Privacy policy

Effective date: 13 November 2026

Who we are

LeedFox is operated by Vision Lab Agency s.r.o., company ID 19495935, Na Folimance 2155/15, 120 00 Praha 2, Czech Republic ("we"). The LeedFox app runs at app.leedfox.com.

For anything about personal data, write to privacy@leedfox.com.

Our two roles

• Controller. We decide how data is used for visitors of this website and for people who send us the demo form.
• Processor. Our customers store their own leads and contacts in the LeedFox CRM. For that data the customer is the controller and we process it only on the customer's instructions, under a data processing agreement.

Website visitors and demo requests

When you send the demo form, we receive your name, e-mail, phone number and company name. We use them to reply to your enquiry, arrange a demo and remind you of the meeting.

The legal basis is the consent you give in the form and our legitimate interest in replying to an enquiry you sent us. You can withdraw your consent at any time by writing to privacy@leedfox.com.

Leads and contacts in the LeedFox CRM

Customers use LeedFox to receive leads, store contacts and send them SMS and e-mail messages. We process this data only to provide the service to the customer. If you are a lead or contact of a business that uses LeedFox, that business is responsible for your data. Please contact it first. You can also write to us and we will pass your request on.

Data from Meta (Facebook and Instagram)

A customer can connect their Facebook Page and ad account to LeedFox. After that we:

• receive lead form submissions from that customer's Facebook and Instagram Lead Ads,
• read information about the customer's Page, ad account, campaigns, pixel or dataset, and ad performance.

We use this data only to put the leads into that customer's CRM and to show the customer how their ads perform. We do not sell data from Meta. We do not use it for advertising profiling. We do not share it with anyone except the processors listed below.

The customer can disconnect at any time in LeedFox settings, or in Facebook under Settings, Business Integrations. We then delete the access tokens. How to ask for deletion of the data itself is described on the data deletion page.

Processors we use

• Database and sign-in: Supabase, EU region.
• Website and app hosting: Vercel.
• File storage: Cloudflare R2, EU jurisdiction.
• E-mail sending: Amazon SES.
• SMS sending: BulkGate.
• Application error monitoring: Sentry.

How long we keep data

• Leads and contacts in the CRM: while the customer's account is active. We delete them within 30 days after the account is closed or after a deletion request.
• Data from the website demo form: up to 24 months.

Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability, to object to processing, and to withdraw consent at any time. Write to privacy@leedfox.com.

You can also file a complaint with the Czech data protection authority, Úřad pro ochranu osobních údajů, uoou.gov.cz.

Cookies

This website uses only necessary storage. It saves your choice of light or dark theme and your language in your browser's local storage. We do not use advertising trackers or analytics cookies on this website.

Data processing agreement (DPA)

For leads and contacts that customers store in LeedFox, we act as a processor under a data processing agreement with each customer. It covers the purpose of processing, security, the processors listed above, help with data subject requests and deletion of data at the end of the service. To get a copy, write to privacy@leedfox.com.

Changes

We may update this policy. The effective date at the top always shows the current version. See also our terms of service.