Privacy Policy

Who we are

RestaurantLeads ("we", "us") operates restaurantleads.org, a subscription service that provides information about restaurants that are about to open. This policy explains what personal information we collect, how we use it, and the choices you have.

Information we collect

Account information. When you sign in with Google we receive your name, email address and profile picture from Google. We store your email address to identify your account. We do not receive or store your Google password.

Billing information. Payments are processed by Stripe. Stripe collects your card details directly; we never see or store your full card number. We store the Stripe customer and subscription identifiers and your subscription status.

Usage information. We keep standard server logs (IP address, browser type, pages requested, timestamps) and, for API users, the API key and requests made with it. We use a session cookie to keep you signed in.

Lead data. The restaurant leads we provide are compiled from public records such as building permits, liquor license applications, health permits, lease filings and news reports. They describe businesses and, where available, the business owner or operator in their business capacity.

How we use information

To create and manage your account and subscription, provide the dashboard, CSV export and API, respond to support requests, prevent fraud and abuse, and comply with legal obligations. We may email you about your account, billing or important service changes. We do not send marketing email without your consent.

Sharing

We share information only with service providers that help us run the service: Google (sign-in), Stripe (payments), our hosting provider, and email delivery. These providers may only use the information to provide their services to us. We may also disclose information when required by law or to protect our rights. We do not sell your personal information.

Cookies

We use a single first-party session cookie to keep you signed in. It contains a random identifier and no personal information. You can delete it at any time by signing out or clearing your browser cookies.

Data retention

We keep account and billing records for as long as your account exists and as required for tax and accounting purposes afterwards. Server logs are retained for up to 90 days. You can ask us to delete your account at any time.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal information, or to object to certain processing. To exercise these rights, email us at [email protected]. We will respond within 30 days.

Security

We use HTTPS for all traffic, store data on access-controlled servers, and give API keys only to the account that created them. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

The service is intended for businesses and is not directed to anyone under 18. We do not knowingly collect information from children.

Changes

We may update this policy from time to time. We will post the new version here and update the date above. Continued use of the service after a change means you accept the updated policy.

Contact

Questions about privacy: [email protected].