Privacy policy
Last updated July 1, 2026
This policy explains what personal data SmallBigLeads collects, how we use it, and the choices you have.
Who we are
SmallBigLeads ("we", "us") provides a sales CRM delivered as software over the internet. This policy covers our marketing website and the SmallBigLeads application. For the customer records you upload into your workspace, you are the data controller and we act as your processor; for your own account and billing data, we are the controller.
Information we collect
- Account data — your name, work email, and workspace details when you sign up.
- Billing data — subscription and payment status (card details are handled by Stripe, not stored by us).
- Customer data you upload — the contacts, companies, deals, and notes you add to your workspace.
- Usage data — how you use the product, for reliability, security, and improvement.
- Communications — messages you send us for support or sales.
How we use it
- To provide, maintain, and secure the service.
- To process payments and manage your subscription.
- To respond to your requests and send service-related messages.
- To improve the product and understand how it's used.
- To comply with legal obligations.
Legal bases (EEA/UK)
Where the GDPR applies, we process personal data to perform our contract with you, to pursue our legitimate interests in running and improving the service, to comply with the law, and — where required — with your consent.
Sharing & subprocessors
We don't sell your personal data. We share it only with providers that help us run the service — including Stripe (payments), our email delivery provider, Google (for integrations you connect), our lead-data enrichment and AI providers, and our hosting and database infrastructure — each under appropriate data-protection terms and only as needed to perform their function. We may also disclose data where required by law.
Data retention
We keep personal data for as long as your account is active and as needed to provide the service, then delete or anonymise it within a reasonable period, unless a longer period is required by law.
International transfers
We and our providers may process data in countries other than yours. Where we transfer personal data internationally, we use appropriate safeguards such as standard contractual clauses.
Your rights
Depending on where you live, you may have the right to access, correct, delete, export, or object to the processing of your personal data. You can export your workspace data from the app at any time, and you can exercise other rights by contacting us. If we process customer records on your behalf, we'll help you respond to requests from the people in your database.
Cookies & analytics
We use essential cookies to keep you signed in and privacy-friendly analytics to understand aggregate usage. We don't use advertising trackers.
Children
SmallBigLeads is a business tool and isn't directed to children. We don't knowingly collect data from anyone under 16.
Changes to this policy
We may update this policy from time to time. When we make material changes, we'll update the date above and, where appropriate, notify you.
Contact
Questions or requests? Email privacy@smallbigleads.com.