LEADSPYDER.AI PRIVACY POLICY
Effective Date: April 7, 2026
Last Updated: April 7, 2026
Company: WySMart AI LLC
1. OVERVIEW
LeadSpyder.AI ("we," "us," "our") is operated by WySMart AI LLC. This Privacy Policy explains how we collect, use, store, and protect information in connection with the LeadSpyder.AI visitor identification platform, including the Amos technology and the WebTracker snippet.
This Policy applies to:
- Visitors to leadspyder.ai
- Clients who subscribe to LeadSpyder.AI plans
- Website visitors of our clients whose sites have the WebTracker snippet installed
2. INFORMATION WE COLLECT
2.1 Information You Provide (Client Account Data)
When you create a LeadSpyder.AI account, we collect:
- Full name and business name
- Email address and phone number
- Website URL
- Industry category
- Estimated monthly visitor volume
- Brand onboarding data (tone of voice, services, target customer, exclusions)
- Payment information (processed and stored by Stripe - we do not store card numbers)
- Communications with our support team
2.2 Information Collected Automatically (Client Dashboard Usage)
When you use your SpyderDash, we collect:
- Login timestamps and session activity
- Dashboard interaction and feature usage data
- Browser type, device type, and operating system
- IP address
2.3 Information Collected via WebTracker (Your Website Visitors)
When your website visitors interact with a site on which the WebTracker snippet is installed, Amos collects first-party behavioral signals including:
- Pages visited and time spent per page
- Scroll depth and click path
- Entry source and referral URL
- Device type, browser, and operating system
- Session frequency and return visit patterns
- IP address (used for IP-to-company matching, not stored long-term in its raw form)
- Browser fingerprint data (cookieless, persistent identification signal)
This behavioral data is cross-referenced against our third-party identity graph to attempt person-level identification. Successfully identified visitors ("Caught Visitors") are delivered to the installing client's SpyderDash with: name, email address, phone number, LinkedIn URL, job title, company name, and firmographic data where available.
Not every visitor is identified. Amos catches then identifies a portion of anonymous traffic. Visitors whose signals do not match the identity graph remain fully anonymous and no contact data is delivered.
3. HOW WE USE INFORMATION
3.1 Client Account Information
We use your account information to:
- Provide, operate, and improve the LeadSpyder.AI service
- Process billing and subscription management via Stripe
- Generate AI-powered conversation starters personalized to your brand
- Send transactional emails including trial campaign communications, billing receipts, and product updates
- Provide customer support
- Enforce these Terms of Service
3.2 Website Visitor Data (Caught Visitors)
Behavioral data collected via WebTracker is used exclusively to:
- Attempt person-level identification via identity graph cross-reference
- Generate SpyderScore intent classifications
- Deliver enriched Caught Visitor profiles to the installing client's dashboard
- Power automated outreach workflows (SpyderFlow) on the client's behalf
- Improve identification accuracy and SpyderScore weighting models in aggregate, anonymized form
We do not use your visitors' data for our own advertising, marketing, or third-party monetization. We do not sell visitor data to any third party.
4. DATA SHARING & THIRD PARTIES
4.1 Identity Graph Partner
Person-level identification is powered by a third-party identity graph provider. Behavioral signals collected by WebTracker are transmitted to this partner for matching. Our partner operates under a data processing agreement and is contractually prohibited from using the data for any purpose other than identification matching for our service.
4.2 WySMart App Platform
All client data and Caught Visitor records are stored within the WySMart App platform. The WySMart App is our white-labeled AI-powered CRM and automation platform. Data stored within the WySMart App is subject to that platform's enterprise data security standards and is hosted on US-based servers.
4.3 Stripe
Payment processing is handled by Stripe, Inc. Your payment data is subject to Stripe's Privacy Policy at stripe.com/privacy. We do not receive or store your full credit card number.
4.4 Service Providers
We may share data with third-party service providers who assist in operating our platform, including email delivery, analytics, and customer support tools. All service providers are contractually required to protect your data and may not use it for independent purposes.
4.5 Legal Requirements
We may disclose information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of WySMart AI, our clients, or others.
4.6 Business Transfers
In the event of a merger, acquisition, or sale of all or substantially all assets of WySMart AI, client data may be transferred to the acquiring entity subject to the same privacy protections described in this Policy.
5. DATA RETENTION
| Data Type | Retention Period |
|---|---|
| Client account data | Duration of subscription + 90 days post-cancellation |
| Caught Visitor records (client LeadSpyder Account) | 90 days post-cancellation, then purged |
| Caught Visitor records (master account) | Retained indefinitely as aggregate platform data |
| Payment records | 7 years (tax/accounting compliance) |
| Support communications | 3 years |
| WebTracker behavioral signals (raw) | 30 days, then anonymized or purged |
7. YOUR RIGHTS & CHOICES
7.1 Client Rights
You have the right to:
- Access the personal data we hold about your account
- Correct inaccurate information in your account
- Request deletion of your account and associated data (subject to retention requirements above)
- Export your Caught Visitor data in CSV format from your SpyderDash at any time
- Opt out of non-transactional marketing emails via the unsubscribe link in any marketing email
To exercise these rights, contact privacy@leadspyder.ai.
7.2 Rights of Your Website Visitors (Caught Visitors)
If a person identified by Amos contacts you or us to request deletion, correction, or opt-out of identification, we will:
- Remove their data from your SpyderDash upon verified request
- Add them to our suppression list to prevent future identification on your site
- Process the request within 30 days
As the website owner, you are the data controller for your visitors. You are responsible for maintaining a compliant Privacy Policy on your own website that discloses the use of visitor identification technology. See Section 8 below for required disclosure language.
7.3 California Residents (CCPA)
California residents have the right to:
- Know what personal information is collected about them
- Know whether their personal information is sold or disclosed and to whom
- Opt out of the sale of personal information
- Request deletion of personal information
- Not be discriminated against for exercising these rights
We do not sell personal information as defined under CCPA. To submit a CCPA request, contact privacy@leadspyder.ai.
7.4 European Residents (GDPR)
For EU residents, we rely on the following legal bases for processing:
- Legitimate interests: Identifying website visitors on behalf of the website operator for business development purposes
- Contractual necessity: Processing client account data to deliver the subscribed service
- Consent: Where required by applicable national law
WebTracker operates in cookieless mode for EU-based visitors. Person-level identification for EU traffic is limited. EU residents may exercise rights under GDPR by contacting privacy@leadspyder.ai. We will respond within 30 days.
8. REQUIRED DISCLOSURE FOR CLIENTS - WEBSITE PRIVACY POLICY
If you install the WebTracker snippet on your website, you are required to include the following disclosure in your website's Privacy Policy. You may use this language verbatim or adapt it as needed:
9. DATA SECURITY
We implement industry-standard security measures to protect your data including:
- HTTPS encryption on all data transmission
- HMAC signed webhook payloads between SpyderBot and WySMart App
- API keys rotated every 90 days
- Two-factor authentication required for all agency-level WySMart App accounts
- Role-based access controls - client LeadSpyder Accounts are permission-isolated
- Client account data is not accessible across other client accounts
Despite these measures, no transmission or storage system is 100% secure. We cannot guarantee absolute security and are not liable for unauthorized access resulting from circumstances beyond our reasonable control.
10. CHILDREN'S PRIVACY
LeadSpyder.AI is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, contact privacy@leadspyder.ai and we will delete it promptly.
11. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. Material changes will be communicated to the email address on your account with 14 days notice. The "Last Updated" date at the top of this Policy reflects the most recent revision. Continued use of the Service following the effective date of any revision constitutes acceptance of the updated Policy.
12. CONTACT
For privacy-related questions, requests, or concerns:
WySMart AI LLC - Privacy Team
Email: privacy@leadspyder.ai
Support: support@leadspyder.ai
Website: leadspyder.ai
For legal notices:
Email: legal@leadspyder.ai
LeadSpyder.AI is a product of WySMart AI LLC. A WySMart AI Product.