Privacy policy
This page explains what we collect when you run an audit, what we do with it, and who else receives it.
Who we are
LeadsLeak is operated by Burntstik Media, based in Strathmore, Alberta, Canada. We serve trades businesses in Calgary and across Alberta. Our office is in Strathmore; our market is Calgary and the rest of the province.
Alberta's Personal Information Protection Act (PIPA) applies to us. It requires that we keep personal information only as long as reasonably necessary for a legitimate business or legal purpose, and that we securely destroy or anonymize it once that purpose ends. Section 04 explains how long we keep your information.
What we collect
What you give us. Your business name, email address, website address, city, province or territory, trade and specialty. Those seven fields are everything the form asks for. If you buy a Deep Audit, Stripe handles your card on its own payment page. We never see or store your card number.
What we gather about your business. Publicly available information about your website: page content, speed measurements, and technical signals such as how your pages are served to crawlers. Local presence checks, including your Google Business Profile and directory listings, are coming soon.
What we gather about competitors. Your report names other businesses that AI assistants recommended when we ran your queries, and the publicly visible evidence supporting them. This is public information about businesses, observed the same way any homeowner would see it.
Standard technical data. Server logs, IP address and basic request information, kept for security and troubleshooting.
What we do with it
We use it to run your audit, deliver your report, answer you if you reply, and keep the service running and secure. If you buy something, we use it to process payment and keep the records the Canada Revenue Agency requires.
We do not sell your information. We do not share it with other trades businesses, and we do not share it with your competitors.
We do not use your data to train AI models. We send details of your business to the AI providers listed in section 05 for two reasons: to run the search queries that test whether they recommend you, and to have OpenAI write the plain-English wording of your report from the results. Those providers operate under their own terms, which we do not control.
We may keep anonymized, aggregated results for benchmarking, so we can say things like “the median AI visibility score across Calgary plumbers we have audited.” Anonymized means your business is not identifiable in it.
How long we keep it
There is no universal legal retention period for audit data. These are ours. A free-audit customer does not need permanent storage; a paid customer needs long enough to download the report and work through it with a developer.
- Free-audit report and detailed findings
- 30 days
- Free-audit contact information
- 90 days, unless you opt into marketing
- Paid Deep Audit report
- 12 months
- Temporary crawl files, screenshots and raw query outputs
- 90 days
- Monitoring history
- While subscribed, plus 30 days after cancellation
- Server and security logs
- 90 days
- Deleted-data backups
- Permanently removed within 30 days
- Invoices, payment and tax records
- 6 years (CRA requirement)
In short: audit reports are kept 30 days for free audits and 12 months for paid audits. Monitoring history is kept while your subscription is active and for 30 days after cancellation. Temporary audit files are deleted within 90 days. Billing and transaction records may be kept longer where Canadian law requires it. You can request deletion of your audit data at any time, subject to those record-keeping requirements.
Who else receives your data
Running the audit means sending some of your information to the providers below. This list covers every outside service that receives your information from us, as of the date at the top of this page, and we update it whenever we add a new service.
OpenAI (ChatGPT search)
Running live AI-visibility queries against ChatGPT with web search. Receives: your business name, trade, specialty, city and province or territory, as part of the search queries we run.
OpenAI (report writing)
Writing the plain-English wording of your report from your results. Receives: your business name, trade, specialty, city, province or territory and website address, the scores and findings from your audit, and the answers the three AI assistants gave to our queries, which can name your competitors.
Perplexity
Running live AI-visibility queries against Perplexity. Receives: your business name, trade, specialty, city and province or territory, as part of the search queries we run.
Google (Gemini)
Running live AI-visibility queries against Google Gemini. Receives: your business name, trade, specialty, city and province or territory, as part of the search queries we run.
Google (PageSpeed)
Measuring how fast your website loads on phones and on desktop computers. Receives: your website address.
Vercel
Website and application hosting. Receives: standard request and server log data.
Neon
Database hosting for audit records. Receives: your email address, your submitted business details and your audit results.
Resend
Sending your audit report and related email. Receives: your email address and the contents of the email we send you.
Upstash
Counting how many free audits each email address and website has used, which is how we limit abuse. Receives: a standardized form of your email address and your website's domain name, which drop out of the counter after about 30 days.
Stripe
Taking payment for a Deep Audit once it is on sale. Receives: a reference to your scan and whatever you enter on Stripe's own payment page, such as your card details and email.
Where your data lives. These providers operate infrastructure outside Canada, including in the United States. That means your information may be stored or processed outside Canada and may be accessible to foreign courts and law enforcement under the laws that apply there. Submitting an audit means you understand and accept that.
Your rights
Under PIPA you can ask what personal information we hold about you, ask for a copy, ask us to correct it if it is wrong, and ask us to delete it. Email leadsleak@gmail.com and we will respond within 30 days. Deletion is subject to the billing and tax records we are legally required to keep.
If you are not satisfied with how we handled your request, you can contact the Office of the Information and Privacy Commissioner of Alberta.
Email and marketing
We email you a link to confirm your address, then your report, and we reply if you write back. If a scan fails we email you once to say so. Your report email may include a link to buy a Deep Audit. We do not send newsletters or promotional emails, and we do not add anyone to a mailing list. If that ever changes, we will ask for your permission first, and every marketing message will have an unsubscribe link, as Canada's anti-spam legislation requires.
Changes
If we change this policy we update the date at the top of the page. If the change is significant and we have your email because you are a customer, we will tell you directly rather than quietly editing the page.