Leadoo AI

GDPR overview

GDPR implementation is documented concretely rather than merely asserted. Leadoo publishes a customer Data Processing Agreement, separate controller and processor privacy policies, general terms and a Data Act appendix, in force since 1 May 2020 and last updated on 24 June 2026. A Data Protection Officer is named, Marcin Lis at dpo@leadoo.com, sitting on the management team. The subprocessor list is public, each entry showing processing categories, third countries, safeguards and a link to its own agreement; every subprocessor is audited and customers must accept them. Eight data-subject rights are listed, exercised through info@leadoo.com with identity verification, and the Finnish Data Protection Ombudsman is named as supervisory authority. Product features include default expiry dates on personal data, per-individual export and deletion, and periodic backup filtering. Conversion Insights is advertised as 100% GDPR compliant with 0% cookies.

Who owns the data?

Under Leadoo's general terms, the customer and its website users own the Customer Data they submit. Leadoo, however, claims full ownership of three separate categories - Statistical Information, Platform Data and Derived Data - together with every AI and machine-learning model trained or improved on them. That ownership vests automatically on creation and survives termination of the contract. The customer also grants Leadoo a worldwide, royalty-free licence to use, host, store, reproduce, modify, transmit and create derivative works of Customer Data, without attribution. Intellectual property in the service, software and documentation stays with Leadoo. The vendor states it does not sell or expose individual customer-level data to third parties.

Reuse rights

Customers keep their own data and may reuse and remove it without asking permission: export runs from the interface or the API, in CSV, JSON or XLSX, and the Data Act appendix presents free migration to another provider as a right rather than a favour. Leadoo's own licence over Customer Data is bounded to operating, providing, supporting, improving and developing the services, and the terms state that individual customer-level data is never sold or exposed to third parties. Separately, Leadoo reserves the right to use anonymised Customer Data to develop its services, including training its own AI and machine-learning models, while excluding foundation-model training, sensitive chat content and identifiable personal information. It may also collect the domain names of email addresses gathered on the customer's site for internal company-to-IP matching. On leadoo.com itself, etag tracking and advanced fingerprinting are used, the latter only with explicit permission.

Data retention & training

Hosting summary

Customer data is stored and processed on Amazon Web Services servers in Ireland, with automatic deletion after a customer-defined delay and encryption throughout. The optional AI chat module runs on Microsoft servers in Sweden. Scaleway holds backups in France, and Benhauer, the Polish group company trading as SALESmanago, processes all data for group and customer success services. Four optional subprocessors sit outside that perimeter: Clearbit in the United States for IP-based company enrichment under standard contractual clauses, Zapier in the United States, and Cyclr and Cronofy in the United Kingdom, each activated only at the customer's request. Under the Data Act appendix, Leadoo's own infrastructure falls under Helsinki District Court, Microsoft under Irish courts, AWS under American arbitration, Scaleway under the Paris Commercial Court, Benhauer under Polish courts, Zapier and Clearbit under Delaware, and Cyclr and Cronofy under England and Wales. The homepage states that data is stored within the EU; the data protection page qualifies this, reserving the right to process information outside the EU and EEA while undertaking to minimise it.