Privacy Policy
Last updated October 3, 2026
GriffinLeads (“we”, “us”) talks with business owners about how they win customers, and sends each business a free list of 10 businesses that match its best customers. This policy explains what information we collect, why, and the choices you have. If anything here is unclear, email zid@griffinleads.com.
What we collect
When you book a call
We use Cal.com to schedule calls. When you book, Cal.com collects your name, email, business name and, if you choose a phone call, your phone number. The booking is added to our Google Calendar.
In your workspace
- Your email address, which we use to invite you and to sign you in.
- Anything you tell us: your answer to our pre-call question, the customer profile we agree on, your feedback on the list, and the messages and images you send in the chat.
- Customer or lead lists you choose to upload. We keep the file and read the business names and websites in it so we can leave those businesses off your list, or flag them.
- Notes we take during our call about your business and your customers.
Automatically
- A sign-in cookie that keeps you signed in for up to 30 days. It’s required for the workspace to work.
- A bot check from Cloudflare Turnstile on the sign-in page, which looks at basic browser signals to tell people from bots.
- Basic technical logs (such as IP address and browser type) kept by our hosting providers for security and troubleshooting.
We don’t use advertising cookies, and we don’t currently use analytics cookies. If that changes, we’ll update this policy first.
How we use it
- To schedule and hold our conversation.
- To research and deliver your list of 10 businesses.
- To sign you in, run your workspace, and reply to your messages.
- To email you about your workspace: sign-in codes, your invitation, when your list is ready, and new messages from us.
- To learn what would make a useful product. These conversations shape what we build next. When we share what we’ve learned (for example, in a summary or an article), we leave out names and anything that identifies your business unless you say it’s okay.
- To keep the service secure and prevent abuse.
We don’t sell your information, and we don’t share it with anyone for their own marketing. We don’t contact the businesses on your list for you, and we never contact the customers on lists you upload.
Who helps us run GriffinLeads
We use a few service providers, each of which handles your information only to provide its service to us:
- Convex: stores workspace data and uploaded files.
- Vercel: hosts the website.
- Resend: sends our emails.
- Cal.com and Google (Calendar and Meet): scheduling and video calls.
- Cloudflare: the bot check on sign-in.
- Research tools (such as Origami): receive the description of the customers you want, so we can find matching businesses. We don’t put your uploaded lists or chat messages into these tools.
We may also share information if the law requires it, to protect our rights or someone’s safety, or as part of a merger or sale of GriffinLeads (in which case this policy would continue to apply).
Information about the businesses we research
The lists we deliver are built from publicly available business information, such as business websites, directories and public listings. They include business names, locations, and business contact details, sometimes the name and role of a person at the business. If you’re listed and would like us to correct or remove your information, or stop including it in future lists, email zid@griffinleads.com and we’ll take care of it.
How long we keep it
We keep your workspace while you’re using it. If your workspace has been inactive for 24 months, we delete it, including uploaded lists and messages. You can ask us to delete everything sooner at any time. Copies in backups are removed on our providers’ normal backup schedule.
Your choices and rights
- Access, correct or delete. Ask us for a copy of your information, correct it (you can also edit your customer profile and remove uploaded lists yourself), or delete your account and workspace.
- Emails. Message notifications can be switched to a daily summary or turned off from the link in each email. Sign-in codes are always sent, since you need them to sign in.
- California residents have the right to know what personal information we collect, to ask us to delete or correct it, and not to be treated differently for using these rights. We don’t sell or share personal information for cross-context behavioral advertising.
To make a request, email zid@griffinleads.com from the address on your workspace. We’ll reply within 30 days.
Security
Workspaces are invite-only, sign-in uses a one-time code sent to your email, and data is encrypted in transit. Only you, the people you invite, and GriffinLeads can see your workspace. No system is perfectly secure, so please tell us right away if you think something’s wrong.
Children
GriffinLeads is for businesses and isn’t intended for anyone under 18.
Changes
If we change this policy, we’ll update the date at the top. If a change is significant, we’ll email you before it takes effect.
Who we are and how to reach us
GriffinLeads is operated by GILGAMI LLC, based in the San Francisco Bay Area, California. References to “GriffinLeads”, “we” and “us” mean GILGAMI LLC.