Privacy Policy

PRIVACY POLICY

LeadLynk LLC

Last Updated: May 18, 2026

LeadLynk LLC (“LeadLynk,” “we,” “us,” or “our”) has prepared this Privacy Policy to help you understand how we collect, use, share, and protect personal information in connection with the LeadLynk lead capture and customer relationship management platform, including the website at leadlynk.io, our web and mobile applications, and related services (collectively, the “Services”). LeadLynk is a Kansas limited liability company with its principal place of business at 2327 W. 96th Street, Leawood, Kansas 66206.

LeadLynk provides a lead capture and CRM platform that enables exhibitors, sponsors, and event organizers (our “Customers”) to capture, store, manage, and follow up with leads collected at trade shows, conferences, and other events. Methods of lead capture supported by the Services include business card scanning with optical character recognition (OCR), QR code and badge scanning, and manual entry by booth staff.

In most cases, when our Customers use the Services to collect information about event attendees and prospective leads (“Leads”), LeadLynk acts as a data processor or service provider on behalf of the Customer, who is the data controller. The Customer determines the purposes for which Lead information is collected and used. If you are a Lead whose information has been captured through the Services, this Privacy Policy describes LeadLynk’s practices generally; however, you should also contact the Customer who captured your information for details regarding their specific privacy practices.

By accessing or using the Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Services.

We collect information from and about users of the Services, including our Customers, their authorized users (such as administrators, coordinators, and booth staff), and Leads whose information is captured through the Services.

2.1 Information You Provide Directly

Account Information: When a Customer creates a workspace, or an authorized user is invited to join one, we collect information such as name, business email address, company name, job title, phone number, and password (which is stored only in cryptographically hashed form by our authentication provider).

Single Sign-On Information: If you choose to sign in using a third-party identity provider such as Google, Microsoft, or Apple, we receive basic profile information from that provider (typically name, email address, and a unique identifier). Your use of those sign-in options is also subject to the respective provider’s terms and privacy policy.

Billing Information: For paid subscriptions, we collect billing contact information. Payment card data is collected and processed directly by our payment processor, Stripe, Inc., and is not stored on LeadLynk servers. We receive limited information from Stripe such as the last four digits of the payment card, card brand, expiration date, and transaction status.

Customer Content: Information our Customers and their authorized users submit into the Services, including event configuration data, venue and booth information, staff rosters, attendee lists, custom qualifying questions, notes, and tags applied to Leads.

Referral Information: If you participate in our referral program, we collect information about your referral activity, including referral codes generated, referrals shared, and conversions that result in credits applied to your account.

Communications: Information you provide when you contact our support team, request a demo, respond to surveys, or otherwise communicate with us.

2.2 Lead Information Captured Through the Services

When a Customer or its authorized user captures a Lead at an event, the Services collect information about that Lead. Depending on the capture method and the information provided, this may include:

Name, job title, and company name

Business email address, business phone number, and mailing address

Images of business cards and the structured data extracted from them via OCR

Data encoded in event-issued QR codes or badges, which typically includes registration information made available to exhibitors by the event organizer

Custom responses to qualifying questions configured by the Customer

Notes, ratings, follow-up tasks, product interest tags, and other annotations entered by booth staff

Event name, booth number, date, time, and the identity of the capturing user associated with the Lead record

Lead information is collected by LeadLynk on behalf of, and at the direction of, our Customer. Lead information belongs to the Customer (the exhibitor), and the Customer is responsible for determining the lawful basis for collection and for honoring requests from Leads regarding their information.

2.3 Information Collected Automatically

When you use the Services, we automatically collect certain technical information, including:

Device information such as device type, operating system, browser type and version, and unique device identifiers

Log data such as IP address, access times, pages viewed, features used, and referring URLs

Approximate geographic location derived from IP address

Network and security information collected by our content delivery and security provider, including data used to mitigate denial-of-service attacks and other malicious activity

Usage analytics, such as which features are used, frequency of use, and performance metrics

Cookies and similar tracking technologies, as further described in Section 8

2.4 Information From Third Parties

We may receive information about you from third parties, including event registration systems, our Customers, identity providers used for single sign-on, and integration partners such as Salesforce and HubSpot when a Customer authorizes data to flow between their LeadLynk workspace and another platform.

We use the information we collect for the following purposes:

To provide, operate, maintain, and improve the Services

To process business card images through OCR and structure captured data into Lead records

To create and manage workspaces, user accounts, roles, and permissions

To process transactions and send related information, including confirmations, invoices, renewal notices, and referral credits

To enable integrations and data exports to authorized third-party platforms such as Salesforce and HubSpot at the direction of our Customer

To respond to inquiries and provide customer support

To send administrative communications, including security alerts, service updates, and policy changes

To send marketing communications about LeadLynk products and services, where permitted by law and subject to your opt-out rights

To analyze trends, usage, and activity in order to improve and personalize the Services

To detect, investigate, and prevent fraud, abuse, security incidents, and other harmful activity

To comply with legal obligations, enforce our terms, and protect our rights and the rights of others

LeadLynk does not sell personal information for monetary consideration. We do not use Lead information collected through the Services on behalf of a Customer to train artificial intelligence or machine learning models for our own commercial benefit, except in aggregated and de-identified form that cannot reasonably be associated with any individual.

We share information in the following circumstances:

4.1 With Our Customers

Lead information captured through the Services is provided to, and owned by, the Customer that captured it (the exhibitor or event organizer). Once Lead information is delivered to a Customer, the Customer’s own privacy practices govern how that information is subsequently used, stored, retained, and disclosed. LeadLynk is not responsible for the privacy or data security practices of our Customers.

4.2 With Integration Partners at Customer Direction

When a Customer enables an integration with a third-party platform such as Salesforce or HubSpot, Lead information and related Customer Content will be transmitted to that third-party platform. Such transmissions occur at the direction of the Customer, and the receiving platform’s privacy policy will apply to data once it is received. LeadLynk is not responsible for how integration partners use, store, or further disclose information.

4.3 With Service Providers

We share information with third-party vendors, contractors, and service providers who perform services on our behalf. These service providers are contractually obligated to use information only as necessary to provide their services to LeadLynk and to maintain appropriate safeguards. Our current key service providers include:

Amazon Web Services (AWS): Underlying cloud infrastructure used to host our data, located in the United States.

Supabase: Managed database and authentication services. Supabase operates on top of AWS infrastructure in the United States.

Vercel: Application hosting, deployment, and edge serverless functions for the LeadLynk web application.

Cloudflare: DNS, content delivery, web application firewall, denial-of-service protection, and related network security services.

Stripe: Payment processing, subscription billing, customer portal, and management of referral credits.

SendGrid (Twilio): Transactional and marketing email delivery, including account verification, invitations, password resets, and notifications.

Google: Analytics services and, where you choose, single sign-on via Google identity. We may also use other Google services for advertising and conversion measurement.

Microsoft and Apple: Single sign-on identity services, where you choose to authenticate using a Microsoft or Apple account.

GitHub: Source code hosting, version control, and software development workflow services used by LeadLynk personnel. GitHub does not have direct access to Customer Content or Lead information stored within the Services.

From time to time we may engage additional service providers. We will update this Privacy Policy and our subprocessor disclosures as appropriate when material changes occur.

4.4 For Legal Reasons

We may disclose information when we believe in good faith that disclosure is necessary to: (a) comply with applicable law, regulation, legal process, or governmental request; (b) enforce our terms of service or other agreements; (c) detect, prevent, or address fraud, security, or technical issues; or (d) protect the rights, property, or safety of LeadLynk, our users, or the public.

4.5 Business Transfers

If LeadLynk is involved in a merger, acquisition, financing, reorganization, bankruptcy, sale of company assets, or transition of service to another provider, information may be transferred as part of that transaction, subject to standard confidentiality protections.

4.6 With Your Consent or at Your Direction

We may share information for any other purpose disclosed to you at the time we collect the information or with your consent.

4.7 Aggregated and De-Identified Information

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you for any business purpose, including industry benchmarking, marketing, and product development.

LeadLynk maintains administrative, technical, and physical safeguards designed to protect personal information against accidental, unlawful, or unauthorized loss, access, disclosure, alteration, or destruction. These safeguards include encryption of data in transit using TLS, encryption of data at rest, role-based access controls within workspaces, row-level security in our database that prevents one workspace from accessing another workspace’s data, web application firewall and denial-of-service protection, regular security reviews, and use of reputable cloud infrastructure providers.

Despite our efforts, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account. Please notify us promptly at the contact information below if you suspect any unauthorized use of your account.

Depending on your jurisdiction and your relationship to LeadLynk, you may have certain rights with respect to your personal information, including:

Right to Access: Request confirmation of whether we process personal information about you and obtain a copy of that information.

Right to Rectification: Request correction of inaccurate or incomplete personal information.

Right to Erasure: Request deletion of personal information, subject to certain exceptions.

Right to Restrict Processing: Request that we limit how we process your personal information in certain circumstances.

Right to Object: Object to processing based on legitimate interests or direct marketing.

Right to Data Portability: Receive personal information in a structured, commonly used, machine-readable format.

Right to Withdraw Consent: Where we rely on consent, withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

Right to Lodge a Complaint: Lodge a complaint with a supervisory authority in your jurisdiction.

6.1 California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”), provides you with additional rights, including the right to know what personal information we collect, use, disclose, and (if applicable) sell or share; the right to delete personal information; the right to correct inaccurate personal information; the right to opt out of the sale or sharing of personal information; the right to limit the use and disclosure of sensitive personal information; and the right not to be discriminated against for exercising your rights.

LeadLynk does not sell personal information in exchange for monetary consideration. To the extent that any sharing of information for cross-context behavioral advertising purposes constitutes a “sale” or “share” under the CCPA, you may exercise your right to opt out by contacting us using the information below.

You may designate an authorized agent to make a request on your behalf. We will verify your identity (and the agent’s authority, where applicable) before responding.

6.2 European Economic Area, United Kingdom, and Switzerland (GDPR/UK GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation, the UK General Data Protection Regulation, and the Swiss Federal Act on Data Protection (as applicable) provide additional protections. Our legal bases for processing your personal information include: (a) performance of a contract; (b) compliance with legal obligations; (c) our legitimate interests in operating and improving the Services, marketing our products, and ensuring security, provided those interests are not overridden by your rights and freedoms; and (d) your consent, where applicable.

6.3 How to Exercise Your Rights

To exercise any of these rights, please contact us at privacy@leadlynk.io. We will respond within the timeframe required by applicable law. We may need to verify your identity before fulfilling your request. If your information was provided to us by one of our Customers (for example, as a Lead captured at an event), we will direct you to that Customer or, where appropriate, forward your request to them.

Authorized users may access, update, or correct account information at any time by signing into the Services and navigating to workspace or account settings. To deactivate an account or close a workspace, contact us at support@leadlynk.io. After deactivation, certain information may be retained as required by law, for legitimate business purposes such as fraud prevention and dispute resolution, or as previously transmitted to Customers or integration partners in accordance with this Privacy Policy.

A cookie is a small text file stored on your device when you visit a website. We and our service providers use cookies and similar technologies (such as web beacons, pixels, local storage, and session tokens) to operate the Services, authenticate users, remember preferences, support security functions, analyze usage, and support marketing efforts.

Categories of cookies and similar technologies we use include:

Strictly Necessary: Required for the Services to function, including authentication, session management, and security. These include cookies set by Cloudflare for security and bot mitigation, and by Supabase for authentication.

Functional: Used to remember preferences and improve your experience.

Analytics: Used to understand how users interact with the Services, including services provided by Google and Vercel.

Marketing: Where used, support marketing communications and measurement of marketing effectiveness.

You can learn more about how Google uses information at https://policies.google.com/technologies/partner-sites. You may opt out of certain Google Analytics tracking using the Google Analytics Opt-Out Browser Add-on available at https://tools.google.com/dlpage/gaoptout.

Most web browsers allow you to control cookies through browser settings. Please note that some portions of the Services may not function properly if cookies are disabled. The Services do not currently respond to “Do Not Track” browser signals. Where required by law, we will honor opt-out preference signals such as the Global Privacy Control (GPC).

LeadLynk is based in the United States, and our primary data hosting is on Amazon Web Services infrastructure located in the United States. Some of our service providers, such as Cloudflare and Vercel, operate global networks and may process limited routing, caching, and security data at edge locations outside the United States. If you access the Services from outside the United States, your information will be transferred to, stored in, and processed in the United States and possibly other countries.

Where personal information is transferred from the European Economic Area, the United Kingdom, or Switzerland to the United States or other jurisdictions, we rely on appropriate transfer mechanisms, including Standard Contractual Clauses approved by the European Commission and the UK Addendum issued by the UK Information Commissioner’s Office, as applicable.

The Services may contain links to third-party websites, products, and services that are not owned or controlled by LeadLynk. This Privacy Policy does not apply to those third-party properties. We are not responsible for the content, privacy policies, or practices of any third-party websites or services. We encourage you to review the privacy policies of any third-party site you visit.

The Services are intended for use by business professionals in the context of trade shows, conferences, and similar events, and are not directed to children. The Services are not intended for use by, and we do not knowingly collect personal information from, any person under the age of 18. If you believe a child has provided personal information to us, please contact us at privacy@leadlynk.io, and we will take steps to delete such information.

We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. For Customer workspaces, we generally retain Customer Content and associated Lead information for the duration of the Customer’s subscription and for a reasonable period thereafter as specified in the Customer’s service agreement with LeadLynk. Upon termination of a Customer’s subscription, we will delete or anonymize Customer Content in accordance with our standard retention practices, except where retention is required by law.

This Privacy Policy and any dispute arising out of or relating to it shall be governed by and construed in accordance with the laws of the State of Kansas, without regard to its conflict of laws principles. The exclusive venue for any legal proceedings arising out of or relating to this Privacy Policy shall be the state and federal courts located in Johnson County, Kansas, and you consent to the personal jurisdiction of such courts.

If you believe we have not adhered to this Privacy Policy, please contact us at privacy@leadlynk.io so we can address your concerns. We will work in good faith to resolve any complaints.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the “Last Updated” date above and, where appropriate, provide additional notice such as by posting a prominent notice on our website or sending an email to registered users. Your continued use of the Services following the effective date of any updated Privacy Policy constitutes your acceptance of the updated terms.

If you have any questions, comments, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

LeadLynk LLC

Attn: Privacy

2327 W. 96th Street

Leawood, Kansas 66206

Privacy: privacy@leadlynk.io

General support: support@leadlynk.io

Billing: billing@leadlynk.io

Events: events@leadlynk.io

Website: https://leadlynk.io

© 2026 LeadLynk LLC. All rights reserved.