Privacy Policy

cheapleads.io lets businesses build a list of B2B contacts and buy it. That means we handle personal information about two very different groups of people: the buyers who use the site, and the business professionals whose contact details are in the data we sell. This policy covers both, in plain terms.

1. Who we are

cheapleads.io (the "Site") is operated by QUIKSUITE LLC ("we", "us", "our"). The Site lets visitors filter a database of business contacts, see a count and a masked preview, pay for the number of contacts they choose, and download the result as a CSV file. Buyers pay with credits and can sign in with Whop to keep them.

For the personal information described in this policy, QUIKSUITE LLC is the "controller" under the GDPR and UK GDPR and the "business" under the California Consumer Privacy Act (CCPA). You can reach us at support@cheapleads.io.

2. Two kinds of people we hold data about

The rules are different depending on who you are, so we separate them.

• Buyers and visitors. People who visit the Site, build a list, or place an order. We collect this information directly from you (sections 3 and 4).
• People in the contact data. Business professionals whose work contact details appear in the data we sell. These people never signed up with us and did not give us their details directly. Their information comes from other sources (sections 5, 6 and 12), and they have the right to ask us to remove it (section 9).

3. What we collect from buyers and visitors

Payment details. Whop handles your card or other payment details. We do not receive or store them. Whop's own terms and privacy policy apply to the payment, and we encourage you to read them.

Free signups. If you claim free leads, we use your name, email address and phone number to run your account and add your credits, to prevent abuse, and to contact you about cheapleads.io. We email you about cheapleads.io, and you can unsubscribe at any time. We call or text you only if you ticked the separate box for calls and texts, and consent to that is not a condition of anything you buy or claim. You can withdraw either consent at any time: use the unsubscribe link in an email, reply STOP to a text, or email support@cheapleads.io. We do not sell this information.

Accounts. You can browse and filter without an account. To hold credits you sign in with Whop. We receive your Whop user ID and email address from Whop, and we do not receive or store your Whop password or your Whop access tokens beyond the sign-in itself. If you pay without signing in, your credits are recorded against the Whop account that paid. We do not use buyer information to build profiles, and we do not sell it.

4. Cookies and similar technology

We keep this simple. The Site does not currently use analytics or advertising cookies or trackers. We do not set cookies for tracking you across other sites. The one cookie we set is a sign-in cookie, and only if you sign in.

• Session cookie (strictly necessary). When you sign in with Whop, we set a signed cookie named cl_session. It holds your Whop user ID and email address, it lasts up to 30 days, and it is used only to keep you signed in. It is marked HttpOnly and Secure. Signing out removes it. Because it is strictly necessary for the sign-in you asked for, there is no banner for it.
• Session storage. The Site may store a small item in your browser's session storage (for example, an access code you enter during a visit) so ordering works. It clears when you close the tab or browser.
• Fonts. The Site loads web fonts from Google Fonts, so your browser sends a request, including your IP address, to Google.
• Checkout. When you go to Whop to pay, Whop may set its own cookies. We do not control them.

Because we do not use cookies to sell or share personal information for advertising, there is no cookie banner. If we add analytics or advertising tools later, we will update this policy first and give you a choice where the law requires one. We treat a Global Privacy Control signal from your browser as a request to opt out of any sale or sharing of your visitor information, although we do not sell or share it today.

5. The business contact data

The data we sell consists of business contact records. This section tells you what is in them and where they come from.

What is in a record

• Name, job title, seniority level and department
• Company name, website domain, industry and company size
• Business location (city, state and country)
• Professional profile (LinkedIn) URL
• Work email address, with a status such as valid or catch-all
• Mobile phone number, where one is available (this may be a mobile number a person uses for work)

The data is about people in their professional roles. We do not seek out information about people's private lives, and we do not knowingly collect sensitive categories such as government identifiers, financial account numbers, precise location, health, biometric or genetic data, or information about race, religion, sexual orientation or union membership.

Where it comes from

We do not collect this data from the individuals themselves. It comes from licensed third-party business data providers and from publicly available professional information. We do not name our providers on the Site. Some fields, such as seniority and department, are derived from a person's job title. Email status is produced by verification checks.

Why we process it

• To let businesses find and contact professionals about relevant products, services, partnerships and job opportunities (B2B sales, marketing and recruiting).
• To show counts and masked previews on the Site, and to deliver purchased files.
• To honor removal requests and keep removed records out of future orders.
• To keep the Site secure and to comply with the law.

We do not use this data to target online advertising.

What buyers can do with it

Buyers receive a limited license to use purchased records for their own outreach. Our Terms of Service prohibit reselling the data, building a competing database, using it for credit, employment, insurance or housing decisions, and sending messages that break email, calling or privacy laws. Once a buyer downloads a record, that buyer decides how to use it and is responsible for doing so lawfully. We pass removal requests on to buyers as described in section 9.

6. Legal bases (EU and UK)

If the GDPR or UK GDPR applies, we rely on these bases:

• Buyers and visitors: performance of a contract (to deliver your order), our legitimate interests (running and securing the Site and preventing fraud), and legal obligation (tax and accounting records). Where we ask for consent, such as for calls and texts on the free signup form, we rely on consent, and you can withdraw it at any time.
• People in the contact data: our legitimate interests, and those of our buyers, in business-to-business sales, marketing and recruiting communication. We limit the data to professional contact details, we offer an easy removal route, and you can object at any time (section 9). Where the law requires consent for a particular channel (for example, certain electronic marketing), that is the buyer's responsibility, and our Terms say so.

7. How we share information

With buyers (this is a "sale" under California law)

Selling access to business contact records to buyers is our core activity. Under the CCPA, disclosing personal information to a buyer in exchange for payment is a "sale", so we say so plainly: we sell business contact information to the businesses that purchase it. The categories are listed in section 10. We do not sell the information of buyers and visitors.

With service providers

We use providers that act for us under contract, in these categories:

Other disclosures

We may disclose information where the law requires it, to protect our rights, safety or property or those of others, or to a buyer or successor if our business is sold or merged. In that case this policy continues to apply to the information transferred.

8. Your rights

Depending on where you live, you may have the right to:

• know what personal information we hold about you and where it came from;
• get a copy of it;
• correct it;
• delete it;
• opt out of its sale or sharing;
• object to or restrict our use of it; and
• withdraw consent, where we rely on consent. For the free signup, you can withdraw your email or call and text consent at any time using the unsubscribe link, by replying STOP to a text, or by emailing us.

We will not treat you differently, charge you a different price or give you worse service because you used any of these rights. To use them, follow the steps in section 9. You can also have an authorized agent make a request for you. We may ask the agent for proof of authority and ask you to confirm the request directly with us.

9. Remove my information / opt out of sale

How to make a request

Email support@cheapleads.io with the subject line "Remove my information" (or "Access request", "Correction request" or "Do not sell" if you want something else). Tell us:

• your full name;
• the work email address (and, if you like, the company and job title) on the record;
• what you want us to do: remove the record and stop selling it, give you a copy, correct it, or something else; and
• your state or country, so we apply the right timelines.

You can also use this wording for any other privacy request, including a request to opt out of the sale of your information.

What we need to verify

We need to be reasonably sure the request comes from the person it concerns, so we do not remove or hand over a record on a stranger's say-so. For a removal or opt-out request, this is usually light: we may send a confirmation link to the work email address you gave us, or ask you to confirm a couple of details that match the record. For a request to receive a copy of your information, we may ask for more. We use the information you send only to handle your request.

What happens next

• We delete the record from our systems and exclude it from future orders.
• We keep a minimal suppression entry (for example, a record of your email address) so the record is not added again when our data is refreshed from our providers. This entry is used for no other purpose.
• We tell our data providers where needed so the record is not supplied to us again.
• If a buyer has already downloaded the record, we notify buyers who purchased it and require them to delete it and stop using it (see the Terms). We cannot control what a buyer does after receiving a file, but our Terms bind them to honor removals.

Timelines

Requests are free. If a request is manifestly unfounded or excessive, the law may allow us to charge a reasonable fee or decline, and we will explain if we do.

If we say no

We may decline all or part of a request where the law allows, for example if we cannot verify who you are, or we need to keep information to comply with a legal duty. We will tell you why. If you are in a state that gives you a right to appeal, reply to our message with the word "Appeal" and we will review the decision and answer in writing within the time your state's law gives us. You may also contact your state attorney general or data protection authority.

10. California notice

This section is for California residents and supplements the rest of this policy. It describes the personal information we collected, sold and disclosed in the past 12 months.

Purposes. We use this information for the purposes in sections 3 and 5: delivering orders, operating and securing the Site, supporting buyers, honoring removal requests and complying with law. We use contact data to offer it for sale to businesses for B2B sales, marketing and recruiting.

Sale and sharing. As explained in section 7, we sell the contact data categories in the table to the businesses that buy them. We do not "share" personal information for cross-context behavioral advertising. We do not sell or share buyer or visitor information.

Sensitive personal information. We do not intentionally collect it or use it to infer characteristics about anyone.

Your California rights. You have the right to know, delete and correct personal information, to opt out of its sale or sharing, to limit the use of sensitive personal information (which we do not collect), and not to be discriminated against for using these rights. The process and timelines are in section 9. We may ask you to verify your identity, and a request to know specific pieces of information can be made up to twice in 12 months.

Do Not Sell or Share My Personal Information. To opt out of the sale of your information, use the "Remove my info / Do not sell" link in our site footer, which goes to section 9, or email support@cheapleads.io.

Minors. We do not knowingly sell or share the personal information of anyone under 16.

Shine the Light. California residents may ask once a year which categories of personal information we disclosed to third parties for their direct marketing purposes. The categories and recipients are described above. Email us to ask.

11. Other US states

Many states, including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, have privacy laws that give residents rights similar to those in section 8. These include the right to confirm and access personal data, to correct it, to delete it, to get a copy, and to opt out of its sale, targeted advertising and certain profiling.

Several of these laws apply only to people acting as consumers, not to people acting in a business or employment role. We do not want you to have to work out whether a law covers you, so we apply the removal and opt-out process in section 9 to everyone, wherever you live. Nevada residents may also use the same process to opt out of the sale of covered information.

The categories of personal data we sell and the purposes are listed in section 10. We sell business contact data to businesses. We do not process data for targeted advertising or profiling that produces legal or similarly significant effects. If we refuse your request, you may appeal as described in section 9.

12. EU and UK notice (including Article 14 information)

If you are in the European Economic Area or the United Kingdom, this section gives you the information the GDPR and UK GDPR require when we obtain your data from someone other than you (Article 14), alongside the rest of this policy.

• Who is responsible: QUIKSUITE LLC, reachable at support@cheapleads.io.
• Categories of data: name, job title, seniority, department, company details, business location, professional profile URL, work email address and, where available, mobile phone number (section 5).
• Where we got it: licensed third-party business data providers and publicly available professional information. We do not collect it from you directly, and we may not be able to identify the original public source of an individual data point.
• Purposes and legal basis: to make business contact information available to our buyers for B2B sales, marketing and recruiting. Our legal basis is legitimate interests (Article 6(1)(f)) as described in section 6. We have weighed these interests against your rights. Because the data is professional, limited in scope, and easy to remove, we believe the balance supports this use. You may disagree and can object at any time.
• Who receives it: the businesses that purchase it, and our service providers (section 7).
• How long we keep it: see section 13.
• Transfers outside the EEA and UK: see section 15.
• Automated decisions: we do not make decisions about you based solely on automated processing that have legal or similarly significant effects.
• Your rights: access, rectification, erasure, restriction, portability (where it applies), and objection, including the right to object to processing for direct marketing at any time, in which case we will stop. See section 9 for how to exercise them.
• Complaints: you can complain to your data protection authority. In the UK that is the Information Commissioner's Office. In the EEA it is the authority in the country where you live, work or where you think an infringement happened. We would appreciate the chance to fix the problem first.

We will give this notice or point you to it within one month of obtaining your data, or at our first contact with you, if sooner. Where it would take disproportionate effort to send this notice to each person, the Article 14 exceptions allow us to make it public instead, which is what this page does.

13. Retention

• Account records: your Whop user ID, email address, credit balance and history, plan status and list order history are kept while your account is active and for as long as needed to support you, handle disputes, and meet tax, accounting and legal obligations. To ask us to delete your account records, email support@cheapleads.io.
• Free signup records: your name, email address, phone number and the linked Whop account are kept while your account exists. Consent records (your choices, the date and time, IP address and user agent) are kept longer, as proof of the consent you gave and to prevent repeat claims. If you withdraw consent, we stop contacting you that way but keep the record that you gave and withdrew it.
• Buyer and order records: kept for as long as needed to deliver and support the order, handle refunds and disputes, and meet tax, accounting and legal obligations.
• Delivery files: download links for a list work for 24 hours, and we do not store files beyond that. Please save your file yourself, as explained in the Terms.
• Server logs: kept for a limited period needed for security and rate limiting.
• Contact data: kept for as long as it remains relevant and accurate for the purposes in section 5, and refreshed or removed as our providers update it.
• Suppression entries: kept for as long as needed to keep a removed record from returning.

14. Security

We use reasonable technical and organizational measures to protect the information we hold, such as encrypting traffic to and from the Site and limiting who can access order and contact data. We do not claim any security certification. No system is completely secure, and we cannot guarantee absolute security. If a security incident affects you and the law requires us to tell you or a regulator, we will.

15. International transfers

We and our providers operate mainly in the United States, so information about people in other countries, including the EEA and the UK, may be transferred to and processed in the United States and other countries. Where the law requires safeguards for such transfers, we rely on appropriate mechanisms, such as standard contractual clauses, with our providers. Ask us at support@cheapleads.io if you would like more detail.

16. Children

The Site is a business tool and is not directed at anyone under 18. We do not knowingly collect personal information from children, and we do not knowingly hold or sell contact records for minors. If you think a child's information is in our data or has been sent to us, email us and we will delete it.

17. Changes to this policy

We may update this policy as the Site and the law change. The "Last updated" date at the top shows the current version. If we make a material change, we will post a notice on the Site and, where we hold your email address as a buyer, may tell you directly.

18. Contact

For questions about this policy, to make a privacy request, or to be removed from our data, email support@cheapleads.io.

QUIKSUITE LLC