Your data stays yours.
How LeadSignal protects your account, your leads, your keys and your files, and why nothing is ever sent without your approval.
Private by design
Every request for your data is checked in four places.
The app
Shows only your account's websites.
Our server
Checks who you are and your role.
Database functions
Check the account on every call.
Database rules
Refuse any row of another account.
A request for another account's data is refused at each of them.
Accounts and access
- Every company gets its own account. You invite members as owner, admin or member, and only members can open its websites.
- Sign in with email and password, Google or Microsoft. Email addresses are confirmed before first use, and a bot check protects sign-in, sign-up and password reset.
- Two-step sign-in with an authenticator app is available to everyone, and required for owner actions such as managing members or deleting the account.
Private leads
- Every lead, contact detail, list, knowledge entry and campaign belongs to one website of one account.
- Your lists, notes and campaigns are never shared with or searchable by other customers.
Encryption of keys
- Your Smartlead key is encrypted with AES-256 before it is stored. After you save it, it is never shown again, and only our server can use it.
- All traffic is encrypted in transit, and stored data is encrypted at rest.
Private file storage
- Uploaded documents go to private storage with no public address.
- Each file is checked for type, size and structure before it is read. Files that fail are deleted, and you see the reason.
- Download links are created after an access check and expire within 5 minutes.
Approval before sending
- Nothing reaches a person until you approve twice: once to build the campaign in your Smartlead account, once to start sending.
- Replies that need a person are held for your OK. You can pause or stop a campaign at any time.
Activity record
- Sign-ins, member and role changes, website changes, Smartlead connections, campaign starts and stops, document uploads and knowledge edits are recorded in a log that cannot be edited.
Your data, your choice
- Download your knowledge base as Markdown at any time.
- Removing a document hides it from you and the agents. To delete your account and its data, write to support@leadsignal.example and we will erase it.
Report a security issue
- Write to support@leadsignal.example. We keep you updated until the issue is fixed.
Questions about security?
Ask us for details before you sign up. A person replies.