Privacy Policy

This policy explains what personal data Ruslan Kosykh, the operator of Leadlark ("Leadlark", "we"), collects when you use leadlark.app and the Leadlark app, why we need it, who we share it with and what you can do about it. Ruslan Kosykh (Cyprus) is the controller of this data.

1. What we collect

• Account data: name, email, login details from our sign-in provider, company name.
• Billing data: plan, invoices and payment status. Payments are handled by Paddle, our reseller and Merchant of Record; we only see the card brand and last 4 digits, plus a card fingerprint used to allow one free trial per card.
• Profile and campaign data: your Upwork profile URL, your knowledge base (skills, portfolio, past work you add), campaign filters and settings, generated drafts.
• Upwork access and activity (Autopilot and Unlimited only): proposals sent through Leadlark, client replies to them and the lead status, so we can count leads and show results. If you connect with login details, also your Upwork email, password and two-factor (TOTP) secret, stored encrypted.
• Usage data: what you do in the app, such as campaign edits, approvals and sent proposals.
• Technical data: IP address, browser, device and operating system, logs.
• Communication: emails and support messages you send us, and your email preferences.

Job listings we show are public data from Upwork, not data about you.

2. Why we use it

• To run the Service: find and score jobs, write drafts, send proposals you've set up, count leads. (Basis: our contract with you.)
• To bill you and prevent trial abuse. (Contract, and our legitimate interest in preventing fraud.)
• To send service emails: onboarding, alerts, billing notices. (Contract.)
• To improve the product with usage analytics. (Legitimate interest.)
• To send product news, only if you agree; you can unsubscribe at any time. (Consent.)
• To meet legal and tax duties. (Legal obligation.)

3. Your Upwork account

Leadlark connects to Upwork only on Autopilot and Unlimited. By default you give us your Upwork email, password and two-factor (TOTP) secret. We store them encrypted, keep access to them limited to the systems that sign in, and never show them back in the app or share them. Sign-in happens from an isolated browser profile and a separate proxy for each client. Agencies can instead give us a staff account with a Business Manager role. We act only for the campaigns you set up. When you disconnect your account in Leadlark, we delete the stored login details right away.

Your relationship with Upwork is yours. Leadlark is not affiliated with or endorsed by Upwork, and we are not responsible if Upwork restricts or closes your account.

4. AI processing

To score jobs and write cover letters, we send the job text and the relevant parts of your profile and knowledge base to our AI provider, Anthropic. They process it only to return the result and do not use it to train their models. We don't use your data to train AI models either.

5. Who we share data with

We don't sell or rent your data. We share it only with service providers that help us run Leadlark, under contracts that require them to protect it:

We may also disclose data when the law requires it, or to a buyer if Leadlark is sold, under this same policy.

6. International transfers

Some providers process data outside your country, including in the US. Where needed, we use standard contractual clauses or similar safeguards.

7. How long we keep data

We keep your data while your account is active. After you delete your account, we delete or anonymize it within 30 days, except billing records we must keep by tax law and the card fingerprint used to block repeat trials.

8. Your rights

Depending on where you live, you can ask us to access, correct, delete or export your data, or object to or limit how we use it. You can withdraw consent to marketing emails at any time. Write to privacy@leadlark.app; we answer within 30 days. You can also complain to your local data protection authority.

9. Security

We use encryption in transit and at rest, access controls and limited staff access to protect your data. Upwork login details and two-factor secrets are encrypted separately and are never visible to our staff in plain text. No system is completely secure, so we can't guarantee absolute security. If a breach affects you, we will tell you as the law requires.

10. Cookies

We use cookies needed for sign-in and the app to work, and analytics cookies to understand how the site is used. You can control cookies in your browser. If we add advertising cookies, we'll ask for your consent first.

11. Age

Leadlark is not meant for anyone under 18, and we don't knowingly collect their data.

12. Changes

We may update this policy. For important changes, we'll notify you by email or in the app.

13. Contact

Ruslan Kosykh, Cyprus. Privacy questions: privacy@leadlark.app.