Privacy

This page describes what the product does with data. It is not legal advice, and you should have a lawyer review it against the rules that apply to you before you rely on it.

Your account

We store your email address, your name if you give one, and a hashed password. We never store a password in a form we can read.

Credentials you connect

Your Instagram session cookie and your Resend API key are stored so scrapes and pushes can run. They are used for nothing else, never sent anywhere except to Instagram and Resend respectively, and are never returned to the browser once saved. You can clear either one at any time from the Connect page.

Lead data

Builtlead collects information that businesses and creators have published on their own public Instagram profiles and websites: handle, category, follower count, and the contact details they chose to display. We do not collect private messages, private accounts, or anything behind a login other than the pages your own session can already see.

That data is stored against your account and is visible only to you. We do not sell it, and we do not pool one customer's leads into a shared database.

If you are on a list

If your details appear in Builtlead and you want them gone, email privacy@builtlead.com with the handle or address. We will remove it from our systems and add it to a suppression list so it is not collected again.

Your obligations

Having an address is not the same as being allowed to mail it. Marketing rules — GDPR, CAN-SPAM, PDPA and their equivalents — apply to you as the sender. You are responsible for having a lawful basis to contact the people on your lists and for honouring opt-outs.

Cookies

One cookie, holding your signed-in session. No advertising or analytics trackers.

Deleting your account

Email hello@builtlead.com and we will delete your account, your leads and your stored credentials.