Privacy Policy

LeadCondor is a tool that works alongside HubSpot. Sales teams connect their HubSpot account to LeadCondor, and LeadCondor scores the contacts in that account for how likely each one is to buy.

That means we hold information about two different groups of people, and the answers below are different for each.

First, people who sign up to use LeadCondor. You gave us your details yourself.

Second, people whose details sit in a customer's HubSpot account. You did not give us anything and you may never have heard of us. Section 4 is written for you.

This notice covers all of the systems we run, including the ones we use for development and testing.

What we hold. Your email address, your name, the role you have on your team, your notification settings, and when you last signed in. Our sign-in provider also holds your email address, your name, your login credentials and information about the sessions and devices you sign in from.

Why we hold it. To let you sign in, to set up and run your account, to send you emails about the service such as alerts and notifications, and to answer you when you contact us.

Our legal basis. We need this information to give you the service you asked for, so our basis is performance of a contract with you. Where we use information to keep the service secure and working properly, our basis is our legitimate interests in running a reliable service.

Where it came from. You gave it to us when you signed up.

When you connect HubSpot, we store the access keys that let us read from and write to that account. We treat those keys as credentials, not as information about you.

You decide what LeadCondor reads from your HubSpot account and what it writes back. That decision, and the responsibility that comes with it, sits with the company that owns the HubSpot account.

If you visit our website we set a cookie recording whether you have agreed to analytics cookies, and a cookie recording which broad region you are in, so we know whether to ask you in the first place.

If you agree, we use a product analytics tool to understand how people use the site and the product. Our basis for analytics cookies is your consent, and you can decline without losing anything on the site.

We also use an error monitoring tool that records technical details when something goes wrong. Identifying fields are removed before those reports are sent. Our basis for this is our legitimate interests in finding and fixing faults.

This section is for people who have not signed up to LeadCondor and did not give us anything.

Where we got your information. From the HubSpot account of a company you have had some contact with. That company is a LeadCondor customer. They connected their HubSpot account to LeadCondor, and LeadCondor read the records they hold about you.

What we hold about you. Your email address. Your first and last name. The company you work for. Your job title. Your company's industry and rough size. Where their sales team has placed you in their process. Records of interactions their HubSpot account had recorded, which can include emails they sent you being opened or clicked, forms you submitted to them, pages of their website you viewed, calls they logged with you, and meetings you attended. If there is a sale in progress, its stage, value and expected close date.

We also hold the record HubSpot sends us for each of those interactions, in the form HubSpot sends it. Where that interaction was a form you filled in, the record can include everything you typed into that form.

What we do with it. We calculate a score for you, described in section 5, and we write that score back into our customer's HubSpot account. We do not sell your information, we do not use it to advertise to you, and we do not share it with any other customer.

Who is responsible. The company whose HubSpot account you are in decides what records it keeps about you and what it does with them. They instruct us. Our position is that for those records we act on their instructions rather than for our own purposes.

We are being straight with you about one open question. We do not just store the records that company holds. We create something new: a prediction about you, produced by our own model. Our customer supplies their records; the model, and the decisions about how it works, are ours. We are reviewing whether that makes us jointly responsible with our customer for that part of the processing, rather than acting purely on their instructions. Until that review is finished we have not stated a legal basis of our own for it, because we would rather leave the question open than answer it wrongly. We will update this notice when it is settled.

For each contact in a customer's HubSpot account we produce three things: a score between 0 and 1, a band that score falls into, and a short list of the reasons behind it in plain English.

The score is a prediction of how likely that person is to buy. It is calculated from the interactions recorded in our customer's HubSpot account and from general characteristics such as job title and company size.

The score is written into our customer's HubSpot account so their sales team can see it. It is used to help a salesperson decide who to contact first.

No decision about you is made by the score on its own. It does not decide a price, a contract, an entitlement or whether anyone will deal with you. A person at our customer reads the ranking and decides what to do.

Salespeople at our customer can mark a score as useful or not. We record that so we can see where our scores are wrong. It does not change how any score is calculated.

If you want to know what score we hold about you, ask us, or ask the company whose HubSpot account you are in.

Four of the companies listed above are in the United States, so some information reaches the United States.

Our sign-in provider relies on the UK extension to the EU-US Data Privacy Framework. Our email provider's agreement with us includes the standard clauses approved for transfers out of the UK and the EU. We are confirming the exact arrangement in place for our website host and for HubSpot, and we will name it here once we have.

We will not claim that everything we hold stays in the UK or the European Union, because it does not.

We do not currently operate a fixed retention schedule. We keep information for as long as the account it belongs to is open, and we have not yet set a period after which we delete it.

We also take periodic snapshots of our database as an operational and audit record. Those snapshots currently have no expiry date.

We are working on a retention schedule. When it is set, the periods will be written into this section.

We want to describe this accurately rather than reassuringly.

Our database is encrypted at rest by the company that hosts it. On top of that, two things are separately encrypted inside our database: contact email addresses, and the keys that connect to a customer's HubSpot account.

Everything else we hold is stored without that additional layer. That includes your name, your job title, the company you work for, and the records of your interactions.

Access to a customer's information is restricted to that customer's own account. Technical error reports have identifying fields removed before they leave our systems.

Under UK data protection law you have the right to ask for a copy of the information we hold about you, to have it corrected, to have it deleted, to restrict what we do with it, to object to what we do with it, and to receive it in a portable form. Where we rely on your consent, you can withdraw it at any time.

Here is what we can and cannot do today.

If you signed up to use LeadCondor. We can delete your user record. When we do, your team's account and its data remain, so that deleting one person's login does not destroy their colleagues' work. If you want the whole account and its data removed, ask us and say so.

If your details are in a customer's HubSpot account. The company whose account you are in controls the records they hold about you, so the fastest route is usually to ask them directly. If you ask us, we do not currently have an automated process for removing an individual's records, so we will deal with your request individually and tell you what we have done.

Our database snapshots. These are a fixed historical record and cannot be edited. A deletion we make now will not reach a snapshot taken before it. We have told you this rather than leave it out.

To exercise any right, email mike@leadcondor.com.

We will update this notice as LeadCondor develops, and the date at the top will change. Where a change matters to you, we will say what changed.

If you are unhappy with how we have handled your information, please tell us first at mike@leadcondor.com so we can try to put it right.

You can also complain to the Information Commissioner's Office, which regulates data protection in the UK. Their website is ico.org.uk and they have a helpline for members of the public.