Privacy Policy
Short version: there are no accounts, no login, and no database. LeadPuppet processes what you type to run a search and hands you the result. This page explains exactly what that involves.
1. What we process
- What you enter: the website URL you analyze, and the fields you edit before searching (company name, description, categories, cities).
- Search results: business listings from the Google Places API (name, website, phone, address, rating, review count) and contact details (name, role, email) found on those businesses’ public websites.
- Technical data: like any website, our hosting providers process your IP address and basic request information (browser type, timestamps) in standard server logs. We do not ask for or store your name or email.
2. How it is used
- The URL you enter is fetched by our server, and the text of that page is sent to an AI model (OpenAI) to summarize the company and suggest categories and cities.
- Your (edited) categories and cities are used to run searches on the Google Places API.
- For each business found, our server reads a few public pages of its website (for example its contact page) and uses pattern matching and an AI model (OpenAI) to find a contact email.
- The final list is returned to your browser. The CSV export is generated locally in your browser.
We use this data only to provide the Service. We do not sell it or use it for advertising.
3. What is kept, and for how long
- Your browser: the app does not use cookies or local storage of its own.
- Job state: progress and results of a search are held in the API server’s memory and disappear when the server restarts. They are not tied to an account or identity.
- Server files: the server may write temporary result files and keep a cache of publicly available business contact details, keyed by website domain, so the same site is not processed twice. This cache does not include who requested it. It lives on the server’s disk, which may be cleared at any time (for example on redeploys), and we do not promise how long it is retained.
- Usage limit: the daily limit is a single shared counter in server memory, not a per-person record.
- Analytics: the site uses Vercel Analytics for aggregate page-view statistics.
4. Where the business data comes from
Business listings come from the Google Places API, and contact details from the public websites of the businesses themselves. We do not access private or login-protected sources. Accuracy is not guaranteed (see the Terms).
5. Third parties
Data is processed by these providers, each under its own terms and privacy policy:
- Google (Places API)
- OpenAI (AI analysis and contact extraction)
- Vercel (frontend hosting and analytics)
- Railway (API hosting)
6. Businesses listed in results
If you own or represent a business that appears in results and want its information removed, contact us and we will make reasonable efforts to remove it.
7. Children
The Service is not directed at children, and we do not knowingly collect information from them.
8. Changes and contact
We may update this policy; the date at the top shows the latest version. Questions or requests: email hello@lintract.com.