Privacy Policy – GDPR
Last updated: February 13, 2026
1. Data Controller
- The data controller is: SAS LEAD ME
- Registered office: 87 Avenue Char Verdun, 83160 LA VALETTE DU VAR, France
- GDPR contact: hello@leadmia.com
2. Data Collected
2.1 Identification Data
- Last name, first name
- Profile picture (Google, if provided)
- Google ID
2.2 Billing Data
- Company name
- Billing address
- VAT number
- Phone number
2.3 Connection and Usage Data
- IP address
- User agent (browser/device)
- Connection and activity logs
- Date/time of last login
2.4 Google Business Profile Data
- Business names, addresses, phone numbers, websites, opening hours
- Customer reviews, photos
- Performance statistics
2.5 Data Generated by the Service
- Created posts
- Replies to reviews
- Automation settings
- Activity history / reports
3. Purposes and Legal Bases
| Purpose | Legal basis |
|---|---|
| Account management | Performance of the contract |
| Provision of the service (GBP sync) | Performance of the contract |
| Billing/payment | Performance of the contract |
| Automations (posts/replies) | Performance of the contract |
| Transactional emails | Performance of the contract |
| Customer support | Legitimate interest |
| Service improvement | Legitimate interest |
| Aggregated/anonymized statistics | Legitimate interest |
| Newsletter (if enabled) | Consent |
4. Recipients – Processors
Data may be processed by the following processors, depending on usage:
- Stripe (payment)
- Axonaut (billing)
- OpenAI (AI generation)
- Google (Google Business Profile API)
- Hosting provider: o2switch (France)
No personal data is sold to third parties.
5. Transfers Outside the EU
Certain service providers may process data outside the EU, notably in the United States.
In such cases, appropriate safeguards are implemented: Standard Contractual Clauses (SCCs) and/or reliance on recognized mechanisms, such as the Data Privacy Framework where a provider is certified, for example Google/Stripe according to their publications.
6. Retention Periods
| Data | Retention period |
|---|---|
| Active account | Duration of the subscription |
| “Service” data after termination | 30 days for recovery, then deletion/anonymization, except in specific cases |
| Data necessary for evidence/dispute management | Up to 3 years (limitation period) |
| Invoices | 10 years (legal obligation) |
| Logs / standard logging | Up to 1 year, unless specifically required otherwise (CNIL) |
7. Data Subject Rights
In accordance with the GDPR, you have the following rights: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent.
- To exercise your rights: email privacy@leadmia.com
- Response time: 1 month, extendable depending on complexity.
You may also lodge a complaint with the CNIL.
8. Cookies and Trackers
Leadmia uses cookies/trackers:
- necessary for operation, exempt from consent;
- and, where applicable, audience measurement / marketing cookies subject to consent.
Examples, depending on configuration:
| Cookie/tool | Purpose | Duration | Consent |
|---|---|---|---|
| Session | Authentication | Session | Exempt |
| Locale | Language preference | 1 year | Exempt |
| Stripe | Secure payment | Session | Exempt |
| Google Tag Manager | Tagging | 3 years | CMP (CookieHub) |
| Google Analytics | Audience measurement | 3 years | CMP (CookieHub) |
| Microsoft Clarity | UX analysis | 3 years | CMP (CookieHub) |
| Facebook Pixel | Advertising | 3 years | CMP (CookieHub) |
| Google Ads | Advertising | 3 years | CMP (CookieHub) |
The consent banner (CMP CookieHub) allows you to accept/refuse cookies and modify your choices.
9. Security
Measures, depending on the architecture:
- HTTPS/TLS
- Access controls and principle of least privilege
- Regular backups
- Encryption/secure storage of OAuth tokens, if applicable
10. Data Breaches
In the event of a breach presenting a risk, Leadmia notifies the CNIL within the required timeframes and, if necessary, the affected individuals.
11. Minors
Leadmia is intended for professionals and is not intended to be used by minors under the age of 18.
12. Changes
In the event of a substantial change, a notification may be sent by email and/or in-app. The update date is displayed.
13. Contact
For any questions: hello@leadmia.com