OnLeadsBack to home

Privacy Policy

Last updated: February 16, 2026

1. Introduction

OnLeads (“we,” “our,” or “us”) operates the OnLeads platform at onleads.chat. This Privacy Policy describes how we collect, use, store, and share information when you use our AI-powered chat widget platform and related services (the “Service”).

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and password. If you subscribe to a paid plan, we collect billing information through our payment processor, Stripe.

2.2 Chat Widget Data

When website visitors interact with our embeddable chat widget, we collect: messages exchanged during conversations, session identifiers stored in localStorage, and any contact information voluntarily provided (name, email, phone number).

2.3 Usage Data

We automatically collect usage information such as pages visited, features used, browser type, IP address, and device information through Vercel Analytics.

3. How We Use Your Information

We use collected information to:

  • Provide and improve the Service
  • Process AI-powered conversations between your chat widget and website visitors
  • Send transactional emails (account setup, billing, notifications)
  • Analyze usage patterns to improve product features
  • Enforce our Terms of Service

4. AI Processing

Messages sent through the chat widget are processed by OpenAI's language models to generate conversational responses. We send conversation context to OpenAI for processing. OpenAI does not use this data to train their models when accessed through their API.

5. Data Storage and Security

Your data is stored securely using Supabase (PostgreSQL) with Row Level Security policies ensuring tenant isolation. All data is encrypted in transit (TLS/HTTPS) and at rest. We implement security headers including CSP, HSTS, and X-Frame-Options.

6. Third-Party Services

We share data with the following third-party services as necessary:

  • Supabase— Database hosting and authentication
  • OpenAI— AI conversation processing
  • Stripe— Payment processing
  • Vercel— Application hosting and analytics
  • Google Calendar— Appointment booking (optional, requires your authorization)
  • HubSpot— CRM integration (optional, requires your authorization)

7. Data Retention

We retain your account data for as long as your account is active. Chat conversation data is retained for the duration of your subscription. Upon account deletion, we delete your data within 30 days, except where retention is required by law.

8. Your Rights

You have the right to:

  • Access, correct, or delete your personal data
  • Export your data in a portable format
  • Opt out of marketing communications
  • Request deletion of your account and associated data

9. Cookies and Tracking

The chat widget uses localStorage (not cookies) to maintain session identifiers. Our main application uses HTTP-only session cookies for authentication managed by Supabase Auth. We use Vercel Analytics for privacy-friendly usage analytics.

10. Contact Us

For questions about this Privacy Policy, contact us at support@onleads.chat.