Privacy policy
We collect the least we can get away with, keep it for the shortest time that is still useful to you, and tell you exactly who else touches it. This page is the whole story, not a summary of one.
Who we are
LeadsLeak is operated by Burntstik Media, based in Strathmore, Alberta, Canada. We serve trades businesses in Calgary and across Alberta. Our office is in Strathmore; our market is Calgary and the rest of the province.
Alberta's Personal Information Protection Act (PIPA) applies to us. It requires that we keep personal information only as long as reasonably necessary for a legitimate business or legal purpose, and that we securely destroy or anonymize it once that purpose ends. The schedule in section 04 is how we meet that.
What we collect
What you give us. Your business name, website address, trade, city and service area, and an email address (and a phone number if you ask for results by text). If you buy a Deep Audit, our payment processor handles your card. We never see or store your card number.
What we gather about your business. Publicly available information about your website and listings: page content and speed measurements, your Google Business Profile details, directory listings, visible licence numbers, badges and reviews.
What we gather about competitors. Your report names other businesses that AI assistants recommended when we ran your queries, and the publicly visible evidence supporting them. This is public information about businesses, observed the same way any homeowner would see it.
Standard technical data. Server logs, IP address and basic request information, kept for security and troubleshooting.
What we do with it
We use it to run your audit, deliver your report, answer you if you reply, and keep the service running and secure. If you buy something, we use it to process payment and keep the records the Canada Revenue Agency requires.
We do not sell your information. We do not share it with other trades businesses, and we do not share it with your competitors.
We do not use your data to train AI models. Your business details are sent to the AI providers listed in section 05 only as part of the search queries we run on your behalf. Those providers operate under their own terms, which we do not control.
We may keep anonymized, aggregated results for benchmarking, so we can say things like “the median AI visibility score across Calgary plumbers we have audited.” Anonymized means your business is not identifiable in it.
How long we keep it
There is no universal legal retention period for audit data. These are ours. A free-audit customer does not need permanent storage; a paid customer needs long enough to download the report and work through it with a developer.
- Free-audit report and detailed findings
- 30 days
- Free-audit contact information
- 90 days, unless you opt into marketing
- Paid Deep Audit report
- 12 months
- Temporary crawl files, screenshots and raw query outputs
- 90 days
- Monitoring history
- While subscribed, plus 30 days after cancellation
- Server and security logs
- 90 days
- Deleted-data backups
- Permanently removed within 30 days
- Invoices, payment and tax records
- 6 years (CRA requirement)
In short: audit reports are kept 30 days for free audits and 12 months for paid audits. Monitoring history is kept while your subscription is active and for 30 days after cancellation. Temporary audit files are deleted within 90 days. Billing and transaction records may be kept longer where Canadian law requires it. You can request deletion of your audit data at any time, subject to those record-keeping requirements.
Who else receives your data
Running the audit means sending some of your information to the providers below. This list is complete, and it changes in the same update as the scanner does.
OpenAI
Running live AI-visibility queries against ChatGPT with web search. Receives: your business name, trade and city, as part of the search queries we run.
Perplexity
Running live AI-visibility queries against Perplexity. Receives: your business name, trade and city, as part of the search queries we run.
Google (Gemini and Places)
Running live AI-visibility queries and checking Google Business Profile consistency. Receives: your business name, trade, city and website address.
Vercel
Website and application hosting. Receives: standard request and server log data.
Neon
Database hosting for audit records. Receives: your submitted business details and audit results.
Resend
Sending your audit report and related email. Receives: your email address and the contents of the email we send you.
Where your data lives. These providers operate infrastructure outside Canada, including in the United States. That means your information may be stored or processed outside Canada and may be accessible to foreign courts and law enforcement under the laws that apply there. Submitting an audit means you understand and accept that.
Your rights
Under PIPA you can ask what personal information we hold about you, ask for a copy, ask us to correct it if it is wrong, and ask us to delete it. Email leadsleak@gmail.com and we will respond within 30 days. Deletion is subject to the billing and tax records we are legally required to keep.
If you are not satisfied with how we handled your request, you can contact the Office of the Information and Privacy Commissioner of Alberta.
Email and marketing
We email you your report and reply if you write back. We will not add you to a mailing list because you ran an audit. If you do opt in to hear from us, every message has an unsubscribe link, as Canada's anti-spam legislation requires.
Changes
If we change this policy we update the date at the top of the page. If the change is significant and we have your email because you are a customer, we will tell you directly rather than quietly editing the page.