Privacy Policy

The data controller for your information is:

[PLACEHOLDER — Name] [PLACEHOLDER — Address] Chamber of Commerce: [PLACEHOLDER] Email: [PLACEHOLDER]

When you use Lead.love, we collect the following data:

• Account details: your name, email address and gender
• Team Assessment: your scores on the 10 questions (1-10 scale), any follow-up answers for Q3 and Q7, first name and partner's name
• Conversations: the messages you exchange with the AI coach, including AI-extracted insights
• Documents: Your Compass and Your Teamplan, generated based on your conversations
• Partner details: your partner's name and email address (if you provide them for the invitation)
• Technical data: a hashed version of your IP address (for abuse prevention), your language preference
• Feedback: messages you send through the feedback form

We use your data for the following purposes:

• Service delivery (Art. 6(1)(b) GDPR): facilitating the coaching experience — your account, conversations, documents and collaboration with your partner. This is necessary for performing the contract you enter into by creating an account.
• Marketing (Art. 6(1)(a) GDPR): if you opt in, we send you the Leaders in Love Newsletter with coaching tips and insights. We only do this with your explicit consent, which you can withdraw at any time.
• Legitimate interest (Art. 6(1)(f) GDPR): sending a one-time invitation to your partner, abuse prevention via rate limiting, and securing the service.

Your conversations are processed by Claude, an AI model by Anthropic (based in the US). Anthropic processes your conversations solely to generate responses and does not use them for training their models. The transfer to the US is secured with Standard Contractual Clauses (SCCs).

We work with the following processors:

• Supabase (EU): database and authentication
• Resend (US, SCCs): email delivery for invitations and documents
• Vercel (US, SCCs): application hosting and privacy-friendly analytics
• Anthropic (US, SCCs): AI processing of conversations
• Cloudflare (US): Turnstile bot protection

We don't keep your data longer than necessary:

• If you complete a Team Assessment without creating an account, that data is automatically deleted after 48 hours.
• Data for active accounts is retained until you manually delete your account.
• If the app is not used for 60 days, all data for the couple is automatically deleted.

Under the GDPR, you have the following rights:

• Right of access: you can request what data we hold about you
• Right to rectification: you can have incorrect data corrected
• Right to erasure: you can have your account and all data deleted
• Right to restriction: you can request restriction of processing
• Right to data portability: you can download your data in a readable format
• Right to object: you can object to processing based on legitimate interest
• Right to withdraw consent: you can withdraw your marketing consent at any time

You can exercise your rights via:

- The settings page in the app: here you can download your data, change your marketing preference and delete your account - By email: [PLACEHOLDER — email address]

If you believe we are not handling your data carefully, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl).

We only use strictly necessary technologies:

- Cloudflare Turnstile: bot protection for the Team Assessment (no tracking cookie) - Supabase auth cookies: necessary for your login session - Vercel Analytics: privacy-friendly analytics without cookies, without personal data, with aggregated data

We do not use tracking cookies, advertising cookies or social media plugins. A cookie banner is therefore not required.

If you sign up for the newsletter, you'll receive coaching tips, exercises and insights approximately every two weeks. You can unsubscribe at any time via the settings page in the app or via the unsubscribe link in each email.

If you provide your partner's email address, we use it solely to send a one-time invitation. We store this address while the invitation is valid and delete it afterwards. We do not send your partner any marketing messages.

Lead.love is intended for persons aged 16 and over. This is the minimum age for giving consent for data processing under the GDPR (Art. 8). At registration, you confirm that you meet this age requirement.