Privacy Policy

Effective and last updated: August 31, 2026. This Policy explains how Muhammad Zaid, a sole proprietor trading as BuildMeLeads, handles personal information through the public website and the BuildMeLeads service.

1. Scope and current product status

This Policy applies to buildmeleads.me, the pre-launch waitlist, and—when available—the authenticated BuildMeLeads application. The public website currently presents planned product information and does not accept subscription payments.

2. Information we collect

Public website and waitlist

  • Waitlist information: the email address you submit and any timestamp or technical metadata recorded by the connected form provider.
  • Communications: your email address and message when you contact us.
  • Basic hosting data: IP address, browser and device details, requested URLs, timestamps, and security logs that may be processed by our hosting provider.

Authenticated service, when available

  • Account information: name, email address, hashed password, session information, plan, campaign settings, and sending preferences.
  • Business lead data: public business names, categories, locations, websites, phone numbers, public email addresses, Google Business Profile details, observed weaknesses, source information, and enrichment results.
  • Campaign and message data: offers, calls to action, prompt templates, generated drafts, recipient details, queue states, suppression entries, unsubscribe events, delivery attempts, and performance or compliance signals.
  • Connected Gmail data: your Google account identifier or email, OAuth scopes and status, and access or refresh tokens needed to send messages you authorize. BuildMeLeads requests the minimum gmail.send scope and does not request permission to read your inbox.
  • SendGrid data: sending configuration and provider responses required to deliver and troubleshoot messages.
  • Billing data: subscription and transaction identifiers, plan, payment status, tax or country information, and limited billing details received from Paddle. Full payment-card details are handled by the payment provider, not stored by BuildMeLeads.
  • Technical and security data: IP address, user agent, login and session events, audit records, errors, rate-limit events, and abuse-prevention signals.

3. Where information comes from

Information comes from you, your connected providers, public business sources, Google Business Profiles, websites and directories, data-collection services such as Apify, delivery providers, and normal website or application operation. Public availability does not remove privacy or marketing-law obligations; customers must establish their own lawful basis for lead processing and outreach.

4. How we use information

We use information to:

  • operate the waitlist, respond to inquiries, and provide requested launch updates;
  • create and secure accounts, maintain server-side sessions, and isolate each customer’s data;
  • discover and qualify leads according to customer instructions;
  • generate, store, validate, queue, and send customer-authorized outreach;
  • apply suppression, unsubscribe, duplicate-contact, sending-cap, bounce, complaint, and abuse safeguards;
  • process subscriptions, maintain transaction records, and provide support;
  • monitor reliability, investigate incidents, prevent fraud or misuse, and comply with law.

Depending on your location and the context, we rely on performance of a contract, legitimate interests in operating and securing the Service, consent for optional launch communications or connected accounts, and compliance with legal obligations. Where consent applies, you may withdraw it at any time.

5. How information is shared

We do not sell personal information. We may share the minimum necessary information with service providers and subprocessors, including:

  • Google Forms and related Google services for the pre-launch waitlist;
  • GitHub Pages for public website hosting;
  • Groq for AI text generation using the business and campaign context supplied for a draft;
  • Apify for cloud-based public business data collection when used by the discovery workflow;
  • Google Gmail API to send messages from a connected Google account;
  • SendGrid as an alternative email-sending provider;
  • Paddle as a planned payment and subscription provider when billing launches;
  • infrastructure, security, analytics, legal, or professional providers needed to operate the Service.

We may also disclose information when required by law, to protect rights or security, in connection with a business reorganization, or at your direction. Providers process data under their own terms and may operate in other countries.

6. International transfers

BuildMeLeads is operated from Pakistan and uses providers that may process information in the United States and other countries. Those locations may have different privacy laws. Where required, we will use appropriate contractual or legal safeguards for international transfers.

7. Storage and security

We use reasonable administrative, technical, and organizational safeguards appropriate to the information and risk. The planned authenticated service uses password hashing, server-side sessions, per-user database isolation, access controls, encrypted Gmail refresh tokens at rest, protected environment secrets, transport encryption, and activity logging. No online service can guarantee absolute security.

Gmail access tokens are refreshed only as needed to perform authorized sending. Disconnecting Gmail prevents future use of the connection, subject to short operational and backup retention periods.

8. Retention

We retain waitlist information until you unsubscribe, ask for deletion, or the launch communication purpose ends. Account, campaign, lead, message, and send-log data are retained while needed to provide the Service, maintain suppression and compliance records, resolve disputes, prevent abuse, and meet legal obligations. Retention periods vary by data type and may include limited backups. We delete or de-identify information when it is no longer reasonably needed.

9. Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. You may unsubscribe from launch emails using the link in a message or by contacting us. Outreach recipients may use the unsubscribe link in an email; suppression records may be retained to ensure they are not contacted again.

To make a privacy or deletion request, email support@buildmeleads.me. We may need to verify your identity. You may also complain to the data-protection authority that applies to you.

10. Children

The Service is intended for businesses and is not directed to children under 18. We do not knowingly collect children’s personal information. Contact us if you believe a child has provided information.

11. Changes to this Policy

We may update this Policy to reflect product, provider, or legal changes. We will post the updated version and change the effective date. Where required, we will provide additional notice.

12. Operator and privacy contact

Muhammad Zaid, sole proprietor trading as BuildMeLeads
Johar Town, Lahore, Pakistan
Email: support@buildmeleads.me