Privacy for the free connection

Updated September 13, 2026

LeadProof is operated by Aniam Ben Or in Israel. This notice covers the free LeadProof connection in an assistant such as ChatGPT. Contact support@leadproof.co for access, correction, removal, or questions.

Information we use

Your verified email identifies your account and its lifetime 100-lead allowance. Common Gmail aliases share an allowance.
Your chosen business category, market, requested quantity, search IDs, and processing status let us fulfill searches and show previous results.
Delivered business data includes business names, business emails and verification status, and available public phone, website, address and listing information.
OAuth records store the client you connected, consented permissions, account identifier, and encrypted access properties. We keep hashes rather than plain sign-in codes. Never provide a password, sign-in code, API key or token to a chat tool.
Short-lived counters keyed by hashes of network addresses and email addresses limit abuse. A secure, HTTP-only sign-in cookie expires after 10 minutes. These free connection pages do not load advertising or session replay scripts.

Who receives information

Cloudflare hosts the service, database, files, and transactional sign-in email. Our Apify fulfillment actor and the business listing, website discovery and email verification services it uses process the selected business category and market and the resulting business data. We do not send your account email or OAuth credentials to the lead search actor. Your connected assistant receives the tool requests, allowance, search status and results needed to answer you. Its provider, including OpenAI when using ChatGPT, applies its own privacy terms to chat content. We do not use your account email for marketing or deliver it to other customers.

Retention

Sign-in flows and hashed codes expire after 10 minutes. Expired flows and rate counters are cleaned during the scheduled sweep, normally within 15 minutes.
Access tokens expire after one hour, refresh tokens after 30 days, and dynamically registered OAuth clients after 90 days.
LeadProof result files and completed search configurations are removed after 30 days, during the scheduled cleanup. Copies in an assistant conversation are controlled by that assistant provider.
Account email, total delivered count, search identifiers, cost reservations and hashed deduplication keys remain while your account exists, so reconnecting does not reset the allowance. Operational records held by upstream fulfillment providers follow their retention settings; the 30-day LeadProof file period does not promise deletion from those providers.

Your controls

You can disconnect LeadProof in your assistant settings. For account deletion, access revocation, exported account information, or removal of business contact data, email support from your account address. Requests are handled by the operator. We may retain minimal records where necessary for legal obligations or abuse prevention. Do not create additional accounts to bypass the allowance.

Free connection terms · Support