Go back
Privacy Policy and Data Processing
This policy explains how ProleadSync collects, uses, stores, shares and protects personal data in connection with the website, the application, the affiliate area and related features. Processing is carried out in accordance with Regulation (EU) 2016/679, applicable Portuguese law and the principles of lawfulness, transparency, minimisation and security.
1. Data controller
The data controller is Rodrigo dos Santos Silvano, Portuguese tax number 275096688, with address at Rua Quinta do Pincho Lote B8 R/C Direito, 6300-420 Guarda, Portugal.
For privacy requests, rights requests, objections to the processing of public profiles or questions about this policy, you should contact ajuda@proleadsync.com with the subject line Privacy, or use +351 935 655 950.
2. What data we process and why
| Category | Examples | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Account and identity | name, email, language, hashed password, session identifiers, accepted legal versions | create and manage the account, authenticate access, record consents and provide support | performance of the contract and legal obligation | while the account is active and up to 12 months after closure, unless a longer legal duty applies |
| Billing and payments | tax number, billing name, billing address, plan history, charges, invoices, Stripe identifiers | charging, invoicing, contractual proof, fraud prevention and accounting and tax compliance | performance of the contract and legal obligation | up to 10 years where required by tax and accounting law |
| Service usage | searches, analyses, reports, generated files, history, tickets, preferences and automations | provide the contracted features, maintain history, enable exports and manage the account | performance of the contract | while the account is active and until deletion or expiry of internal routines |
| Security and technical logs | IP address, user agent, session logs, anti-fraud metrics, error and audit events | security, abuse prevention, platform integrity and technical diagnostics | legitimate interest | typically up to 12 months, unless longer retention is required to defend legal claims |
| Optional integrations | OAuth tokens, minimum Google Calendar data, Telegram chat ID, MailerLite data | scheduling, notifications, operational communication and preference management | performance of the contract or consent, depending on the integration | until you remove the integration or there is no longer a legitimate retention purpose |
| Marketing and optional cookies | consent state, analytics and attribution cookies, campaign and affiliate events | campaign measurement, affiliate management and commercial improvement of the website | consent | until you withdraw consent or the relevant technology expires |
3. Third-party public profiles and data source
ProleadSync also processes data from public profiles and content made public by their owners on social networks, mainly Instagram and Threads, when a platform user researches or analyses those profiles.
- Source of data: publicly accessible information on the originating platforms.
- Types of data: username, public name, profile picture, biography, category, public links, visible metrics, public posts, public comments and contextual signals extracted from those sources.
- Purpose: enabling the user to research, qualify and organise potential commercial contacts.
- Legal basis: legitimate interest in providing the service to the customer and processing data manifestly made public by the relevant data subject, without prejudice to the right to object.
In this context, ProleadSync generally acts as processor for the user who decides to research, enrich and use those data in their commercial workflow. If you are the owner of a public profile and wish to object to indexing or request removal, you may contact us through the channels above.
4. Who we share data with
We only share data when necessary to operate ProleadSync, comply with legal duties or answer your requests. The main recipient categories are:
- hosting, infrastructure and storage providers;
- Stripe, for payments, subscriptions and billing events;
- MailerLite, for communications, marketing preferences and forgetting operations where applicable;
- Google, when you connect calendar integrations;
- Telegram, when you enable notifications on that channel;
- OpenAI and OpenRouter, when you request analyses or AI-assisted features that require the necessary processing context;
- administrative, judicial, tax or regulatory authorities where required by law.
ProleadSync does not sell personal data sets to third parties.
5. International transfers
Some suppliers used by ProleadSync may process data outside the European Economic Area, including in the United States. In those cases, we seek to use appropriate legal mechanisms such as Standard Contractual Clauses approved by the European Commission, adequacy decisions or supplementary measures compatible with the GDPR.
6. Retention and deletion
Account and functional history data are kept while the account is active and for the period needed for support, security, contractual proof and defence of rights. When you request deletion of the account, ProleadSync removes or anonymises operational data that are no longer required, including account history, integrations and associated content, without prejudice to data that must be retained by law, in particular invoices and accounting records.
7. Data subject rights
You have the right of access, rectification, erasure, restriction, objection, portability and withdrawal of consent where processing depends on consent. You also have the right to lodge a complaint with the Portuguese supervisory authority CNPD.
Requests may be sent to ajuda@proleadsync.com. ProleadSync may ask for reasonable additional information to confirm identity before fulfilling the request.
8. Cookies and communications
The public website uses strictly necessary cookies and, where authorised by you, optional analytics, marketing and attribution technologies, including integrations with Google Tag Manager and Meta. You may manage those preferences at any time through the cookie manager. Additional information is available in the Cookie Policy.
9. Suspension and erasure without an active plan
Accounts covered by the move to paid plans are suspended after the communicated deadline and kept for a 7-day recovery period. Without activation, operational account data, content, contacts, automations, integrations, files and personal profile are erased. ProleadSync retains only tax documents and records strictly required to meet legal duties, normally for 10 calendar years, isolated and with restricted access. The irreversible identifier used to prevent abusive trial reuse may be retained under the legitimate interest of fraud prevention.