This page is a plain-language summary of how GetLeadExpo processes client data across our B2B lead generation and AI automation engagements. It complements our Privacy Policy and Terms & Conditions. If you need a signed data processing addendum for procurement, email contact@getleadexpo.com.
1. Roles
You (the client) are the controller of the personal data you share with us — for example your ICP, credentials, or customer lists. GetLeadExpo acts as the processor, using that data only to deliver the service you engaged us for. For visitor data on getleadexpo.com, GetLeadExpo is the controller.
2. What We Process and Why
- Lead research data — business contact information (name, role, company, business email, LinkedIn URL, public firmographics) used to build verified B2B lead lists.
- Client-supplied inputs — ICP, sample data, brand voice, prompts, knowledge base content, and, where necessary for delivery, scoped API keys or credentials for CRM, email, calendar, telephony, or n8n environments.
- Runtime data for AI workflows — messages, call transcripts, or events flowing through AI agents, AI receptionists, and n8n automations we build, processed only to execute the workflow you deployed.
3. Data Confidentiality
Client data is handled on a least-privilege basis. Only team members and sub-processors that need access to deliver the engagement can see it. Everyone on our side is under a written confidentiality obligation.
4. Sub-Processors
To deliver our services, we rely on a small set of reputable third-party providers. Typical categories include:
- Cloud hosting and storage.
- Business email and file sharing.
- Contact enrichment and email verification tools.
- Workflow automation platforms (including n8n).
- AI model providers used inside AI agents and voice agents.
- Communication tools (WhatsApp, Fiverr, calendaring).
- Analytics and payment processors.
We only share data with a sub-processor when it is needed to deliver the engagement, and we choose providers with reasonable security and privacy commitments. A current list can be requested at contact@getleadexpo.com.
5. Security Practices
- HTTPS/TLS in transit across our public surfaces.
- Encrypted-at-rest storage on our cloud providers.
- Role-based access, strong authentication, and multi-factor authentication on production tools.
- Least-privilege API keys and rotated credentials for client integrations.
- Access logs and separation between staging and production environments.
- Regular review of dependencies and third-party service posture.
No online system can be guaranteed 100% secure. We work to reduce risk and, if a security incident affects your data, we will notify you without undue delay with the facts we have.
6. Data Location and International Transfers
GetLeadExpo is based in Bangladesh and works with clients worldwide. Data may be processed in Bangladesh and in the countries where our sub-processors operate. We only use providers that offer appropriate contractual and technical safeguards for cross-border data transfers.
7. Data Retention
Working copies of client data are kept only for as long as needed to deliver and support the engagement, and then archived or deleted according to our internal retention schedule. Financial and tax records are retained as required by law. Delivered artefacts (lead lists, workflow files, documentation) belong to you — you decide how long to keep them on your side.
8. Data Deletion and Client Requests
You can ask us at any time to delete working copies of the data you shared for a specific project. On written request to contact@getleadexpo.com we will:
- Confirm the scope of the deletion.
- Delete or anonymize the data within 30 days, except where retention is required by law (for example invoicing records).
- Ask relevant sub-processors to do the same where they hold copies on our behalf.
9. Support for Privacy Regulations
Where applicable, we support you in meeting your obligations under privacy laws such as GDPR, UK GDPR, CCPA, and comparable regimes. This includes helping you respond to subject-access, deletion, and portability requests that relate to data we process on your behalf. Contact us at contact@getleadexpo.com with the request and the timeline you need to hit.
10. Contact
For any data processing question — including sub-processor lists, security questionnaires, or DPA signing — write to contact@getleadexpo.com.