Legal
Privacy Policy
Effective June 4, 2026 · Last updated October 15, 2026
This Privacy Policy describes how LeadWise, a Grovara Technologies company, collects, uses, and protects information when you use the LeadWise platform and related services. It forms part of, and should be read together with, the LeadWise Terms of Service.
1. Information We Collect
LeadWise may collect account information, technical information, browser information, email metadata, engagement analytics, CRM data, AI interaction data, usage analytics, cookies, and operational telemetry. If you use calling, LeadWise also collects the phone numbers you call, call recordings, and call transcripts. If you connect Google Calendar, LeadWise collects the calendar events it shows you and the events you create through it.
2. How We Use Your Information
LeadWise uses such information to operate the platform, improve AI functionality, provide support, maintain security, prevent abuse, analyze performance, and comply with legal obligations.
3. Google User Data (Gmail and Google Calendar)
When you sign in with Google, LeadWise requests permission to compose and send email from your Gmail mailbox, so you can run outreach and multi-step follow-up sequences on your own behalf, and to read your Gmail messages and settings, so we can detect when a prospect replies, automatically stop the relevant sequence, identify bounced messages, and record that activity on the contact's timeline.
When you connect a Gmail mailbox for outreach, LeadWise also requests permission to modify messages and basic mail settings, so it can label warm-up messages and install a filter that keeps warm-up replies out of your inbox. If you connect Google Calendar, LeadWise requests permission to read your calendars and to create and edit events, so it can show your schedule in LeadWise and book meetings you arrange from a reply. We only access a Google account after you grant consent through Google's standard OAuth screen.
Some features send Gmail data to our AI provider, OpenAI, which processes it only to provide that feature and returns the result to LeadWise. Reply classification sends the text of a reply a contact sends to one of your sequence emails, so LeadWise can tell what the reply means, for example whether the contact is interested or asking to opt out. Reply drafting, when you ask for a draft, sends the most recent messages in that thread (up to six), so a draft can be written for you to review before anything is sent. The Wise assistant may receive email activity LeadWise has recorded, such as reply status and short reply excerpts, when your request needs it. Data sent to OpenAI through its API is not used to train OpenAI's models, and LeadWise does not use Google user data to train AI models.
LeadWise's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, we do not use it for advertising, and we do not use it to train AI models. We do not allow humans to read your Google user data except where you explicitly request support, where it is necessary for security or to comply with applicable law, or in aggregated or anonymized form.
- Data we access: the messages you send through LeadWise, and the headers, content, and labels of messages in your mailbox that are needed to detect replies, bounces, and engagement.
- Data retention: we do not store a copy of your full mailbox. We retain the messages you send through LeadWise and the derived records needed to operate the Services, such as reply and bounce status, thread and message identifiers, a short excerpt of each reply, and activity entries on a contact's timeline, for as long as your account is active or as needed to provide the Services.
- Revoking access: you can revoke LeadWise's access at any time from your Google Account permissions page at myaccount.google.com/permissions, or disconnect a mailbox in your LeadWise settings. Revoking access or disconnecting stops LeadWise from using that mailbox, but does not delete the records LeadWise has already stored.
- Requesting deletion: email support@getleadwise.ai to request deletion of your Google user data, and we will delete it within 30 days of your request, except where we are required to retain it to comply with a legal obligation.
4. AI Assistants You Connect (Claude, ChatGPT and Others)
You can connect LeadWise to an AI assistant you use, such as Claude by Anthropic or ChatGPT by OpenAI, through the Model Context Protocol. The assistant then works in LeadWise as you. It can reach only the records your LeadWise role lets you see, only the areas you tick on the LeadWise consent screen, and only what your workspace administrator allows. Sensitive areas, such as billing, team members, change history, and call recordings, are off unless an administrator opens them and you then choose to share them.
When the assistant asks LeadWise for something, LeadWise returns the result to the assistant, for example contact names, email addresses, job titles, company details, deal values, and segment and sequence information in the areas you shared. That result is sent to the assistant's provider under your own account with them, and the provider's terms and privacy policy govern what it does with it. Because you choose to send data to an assistant, the assistant's provider is not a LeadWise subprocessor. LeadWise does not use anything exchanged with a connected assistant to train AI models.
An assistant can create or update records only if you allowed changes when connecting. Each change is first shown to you as a preview and is made only after it is confirmed. Connected assistants cannot delete records, remove people from lists, import files, manage mailboxes, or change billing, team, or workspace settings.
- What we store: a record of each connection, including the app's name, what you allowed, and when it was connected and last used; access tokens, stored only as one-way hashes; and a log of requests, kept for security and troubleshooting. Changes an assistant makes are recorded in your workspace's history like any other edit.
- How long it lasts: an access token expires after one hour, and a connection lapses after 30 days without use. A sign-in code expires after five minutes, a consent request after ten minutes, and a previewed change that has not been confirmed after ten minutes.
- Revoking access: disconnect an assistant at any time in Settings, Connected apps, which takes effect immediately. Workspace administrators can disconnect anyone's connection and turn assistants off for the workspace. Removing or disabling a member disconnects all of that member's connections.
5. Email Opens, Clicks, and Recipients
When a customer sends email through LeadWise, LeadWise can add an invisible image and rewrite links so the sender can see when a message is opened or a link is clicked. When that happens, LeadWise records the time, the IP address, and the browser or email client information sent with the request, and uses them to tell real readers apart from automated security scanners. When a message includes an unsubscribe link, LeadWise stops further outreach to anyone who uses it.
This information belongs to the customer who sent the email, and LeadWise processes it on that customer's behalf. If you received an email sent through LeadWise and want to know what is held about you, contact the sender, or email support@getleadwise.ai and we will help you reach them.
6. Your Data and Ownership
Customer retains ownership of all Customer Data uploaded, processed, stored, or transmitted through the Services. Customer grants LeadWise a worldwide, limited right to host, copy, process, transmit, analyze, and display Customer Data solely as necessary to provide, maintain, secure, support, and improve the Services. Customer represents and warrants that it possesses all rights and permissions necessary to process Customer Data using the Services.
7. AI and Your Data
LeadWise may use anonymized, aggregated, and de-identified usage information to improve platform performance, analytics, security, and AI functionality. LeadWise shall not intentionally use Customer-specific confidential information or Customer Data to train generalized public AI models without Customer consent.
8. Data Processing
LeadWise may process Personal Data solely as necessary to provide, maintain, support, secure, and improve the Services. Customer acts as data controller and LeadWise acts as processor where applicable under data protection laws.
LeadWise shall implement commercially reasonable technical and organizational measures designed to protect Personal Data against unauthorized access, disclosure, alteration, destruction, or misuse.
9. Subprocessors
LeadWise may engage subprocessors, cloud infrastructure providers, analytics vendors, AI providers, hosting vendors, and support providers reasonably necessary to provide the Services, each subject to their own terms. The providers that currently process customer data, and what each receives, are:
- OpenAI: AI features, including email and reply drafting, reply classification, contact and company research, and the Wise assistant. Receives the text each feature needs, such as reply and thread text, contact names and job titles, company names and website domains, and your requests to Wise.
- Telnyx: phone numbers, calling, and call recording. Receives the numbers you call and the call audio, and stores call recordings.
- Deepgram: call transcription. Receives call recordings to transcribe.
- Postmark: account and notification email. Receives the recipient's email address and the content of each notification.
- Stripe: payments and billing. Receives your billing details and payment card details, which you enter with Stripe directly.
- Google: Gmail, Google Calendar, and Sign in with Google, as described above, and Google Analytics on our public website, only with your consent.
- Microsoft: Sign in with Microsoft. Receives your sign-in request and returns your name and email address. The Microsoft sign-in screen also asks for permission to read and send mail; LeadWise does not currently use that permission to read or send mail from your Microsoft mailbox.
- Apollo.io: prospect search. Receives the search criteria derived from your search, such as keywords, job titles, and locations, and returns matching people. It does not receive your contacts.
- HubSpot: if you connect HubSpot, LeadWise reads your HubSpot contacts, companies, lists, and owners so you can import them.
- Replit: application hosting and file storage.
- Neon: database hosting.
10. Cookies and Analytics
LeadWise uses cookies that are needed to keep you signed in and to protect your account against forged requests.
Our public website uses Google Analytics to understand how visitors use it. Google Analytics loads only after you accept analytics in the consent bar. If you decline, or make no choice, it is not loaded and sets no cookies. Your choice is remembered in your browser. Google Analytics is not used inside the signed-in LeadWise application.
We also count page views and clicks on our public website ourselves, without cookies and without storing your IP address, to see which pages are read and which links are used. When a visit is counted, your approximate location (country, state or region, and city) is looked up from your IP address on our own server and kept; the IP address is not. These counts cannot identify you or follow you from one day to the next. Location data comes from GeoLite2, created by MaxMind and available from https://www.maxmind.com.
11. Data Retention and Deletion
LeadWise keeps your workspace data while your subscription is active. Disconnecting an integration, such as a Gmail mailbox, does not delete data already stored.
After a subscription is cancelled, LeadWise keeps the workspace data for 90 days so it can be restored if you reactivate. After 90 days the workspace is closed and can no longer be accessed, its phone numbers are released, and its call recordings are deleted from our calling provider. Closing a workspace does not by itself erase all of its records.
To have your data deleted, email support@getleadwise.ai. We will delete it within 30 days of your request, except where we are required to retain it to comply with a legal obligation.
12. Your Rights and Choices
Depending on where you live, you may have the right to access the personal data held about you, to correct it, to have it deleted, to receive a copy in a portable format, to object to or restrict certain processing, and to withdraw consent you have given. LeadWise does not sell personal information and does not share it for cross-context behavioral advertising.
To make a request about your LeadWise account, email support@getleadwise.ai. If your data is in a LeadWise customer's workspace, for example as a contact they email, that customer controls it; contact them directly, or write to us and we will pass your request on. We respond within 30 days, and we will not treat you differently for exercising these rights.
13. Security
LeadWise maintains commercially reasonable safeguards including encryption, access controls, logging, monitoring, rate limiting, anomaly detection, infrastructure segmentation, spam protections, backup systems, and incident response procedures.
To report a security issue, email support@getleadwise.ai with "Security" in the subject line. Please give us a reasonable chance to fix it before telling anyone else.
14. Contact Us
LeadWise is operated by Grovara Technologies LLC. For questions about this policy or your data, email support@getleadwise.ai.
LeadWise, a Grovara Technologies company.
Questions? Contact us.