LEAD ATLAS · PRIVACY
Privacy notice
Last updated: 6 October 2026
This notice explains how we handle information about Lead Atlas users and people whose publicly available business contact details may appear in our research results. It applies to Lead Atlas, not to Sheets Fix-It.
For privacy enquiries, correction, objection or removal requests, email info@tasksmith.online.
1. Who is responsible
Lead Atlas is operated by Task Smith Software, the controller responsible for the information described here.
Task Smith Software2. Information we collect
- Accounts and support: email address, email-verification records, support correspondence and account activity.
- Requests and results: search terms, locations, selected countries, requested quantities, saved lead lists, enhancement selections and uploaded website exclusions.
- Payments: token credits, reservations and charges, purchase amounts and payment references. Checkout is handled by Stripe; we do not store your full card details in the Lead Atlas database.
- Security and operation: request identifiers, timestamps, diagnostic events, session information and information used to limit abuse. Hosting services may record IP addresses and browser/request information.
- Business research: business names, categories, addresses, locations, websites, ratings and available public emails, telephone numbers, contact names and social profile links. These can include personal data where they identify a person, including sole traders.
3. Where business information comes from
Business information is obtained from third-party business-listing services, including DataForSEO, and from publicly accessible business websites. We also reuse previously saved research and contact information. Location lookup uses OpenStreetMap-based geocoding. Public availability does not remove an individual's data-protection rights.
4. Why we use it and our lawful bases
- Providing the service (contract): signing users in, processing requested research, delivering results and managing token purchases and balances.
- Operating and protecting the service (legitimate interests): preventing abuse, diagnosing faults and maintaining reliable research records.
- Business research (legitimate interests): identifying businesses and relevant public business contacts to provide business-research lists. This requires considering the context, necessity, reasonable expectations and impact on the individuals concerned; it is not blanket permission to use any public personal information.
- Legal obligations: keeping records where required and responding to lawful requests.
You are not required to provide an account email, but without one we cannot provide an authenticated account. Lead Atlas does not use these data to make decisions with legal or similarly significant effects about individuals.
5. Who receives information
Our hosting and database provider, IONOS, supports storage and operation. Stripe processes checkout and payment information under its applicable privacy terms. Email-delivery services process sign-in and support messages. Research and location providers receive the search, business identifiers, website or location details necessary for their task.
Lead Atlas customers receive the business contact information included in their requested lists and may download it. We do not give them other users' login emails, uploaded exclusion lists, token balances or payment records. Shared business research may be reused for other customers.
Customers are responsible for their subsequent use of downloaded information. Receiving an email address does not establish consent to marketing or guarantee that contacting that person is lawful.
6. Storage and retention
Account details, requested research, delivery history and exclusions are kept to maintain the account, let users retrieve results and prevent repeat delivery. Hiding a lead changes its visibility; it does not delete the delivery record. Removing an exclusion removes it from your active exclusion list.
Reusable Maps contact records are configured to expire after three months and enhanced contact records after six months, with removal performed by background maintenance. Website research is normally eligible for refresh after 30 days. These periods are not deletion deadlines for all associated business identifiers, source records, account histories, diagnostic records or delivered snapshots.
Sign-in codes expire after ten minutes; the login session lasts up to seven days. Expiry does not itself erase all stored authentication records. Account histories, payment records and logs currently have no single automatic deletion period. We consider deletion requests and retain information where needed for ongoing service, security, disputes or legal obligations. Contact us to ask about retention of a particular record.
7. International processing
Research, payment and other service providers may process information outside the UK. Where UK data-protection rules require safeguards for a restricted transfer, appropriate safeguards must apply. Contact us for information about the arrangements relevant to your data.
8. Cookies and security
The app uses a necessary session cookie to keep users signed in and protect requests. The current app does not add advertising or analytics cookies. Stripe checkout and third-party services may use their own cookies and privacy notices.
We use access controls, verified-email sign-in and request protection. No internet service can promise absolute security.
9. Your rights and removal requests
Depending on the circumstances, you can request access, correction, deletion, restriction or portability of your personal data and object to processing based on legitimate interests. You have a right to object to processing of your personal data for direct marketing. Where processing relies on consent, you can withdraw it.
Email info@tasksmith.online with enough information to identify the account or business record. We may need to verify your identity. If your details appear in our business results, you do not need a Lead Atlas account to contact us. Removing a record from our service cannot automatically remove copies already downloaded by customers.
You may complain to the Information Commissioner's Office (ICO). We would welcome the opportunity to address your concern first.
10. Updates
We will update this notice when relevant practices change and show the revision date above.