Lead Engine

Privacy Policy

Last updated: October 8, 2026

1. What this policy covers

This Privacy Policy explains what information we collect, how we use it, and the choices you have, when you use Lead Engine.

2. Information we collect from you

  • Account information: name, business name, email address, and login credentials.
  • Campaign criteria: the categories, regions, and targeting preferences you configure for your campaigns.
  • Payment information: no card or bank details are collected or stored by this platform. Paid plans are handled through a Payoneer payment request sent to your email; the payment itself happens on Payoneer's platform, outside this system.
  • Communications: messages you send us (e.g. support requests, category requests).
  • Usage data: basic technical logs (such as login activity) needed to operate and secure the service.
  • Website visit data: the pages you view on our public site, the site you came from, and any campaign tags in the link you arrived from (for example, which ad). Visits are counted with an anonymous identifier; if you accept optional cookies, a cookie is used for this instead (see Section 11).
  • How you found us: if you sign up after arriving from an ad or a tagged link, we store those campaign tags and the first page you landed on with your account, so we can tell which marketing works.

3. Information we collect about businesses (leads)

Separately from your account data, the service collects and processes information about third-party businesses -- company name, address, phone number, email, website, and public social media links -- gathered from publicly available sources such as Google Maps listings and business websites, in order to deliver leads matching your campaign criteria. This is business contact information, not personal data about private individuals, and is handled as part of delivering the core service to you.

4. Email outreach

If you use the email outreach feature (included on paid plans and, as a one-time allowance, the free trial), we process additional information:

  • Your connected mailbox. The email address, server details and login you provide. The password is stored encrypted, with the key kept separately from our database, and it is deleted when you remove the mailbox.
  • What you write. The subjects and messages of your email funnels, and the business postal address you enter, which is added to every email.
  • Who you email. The business email addresses and company names of the leads you add to a funnel, and a record of each email sent, bounced, replied to, or opted out.
  • Replies. We check your inbox for messages from people you have emailed, and for delivery-failure reports about them. We store those messages (subject and text) so you can read them in your dashboard. Other messages in your mailbox are not downloaded or stored.
  • Your do-not-email list. The addresses of people who asked to stop, whose emails bounced, or that you add yourself.

We use this only to provide the feature: to send your emails, stop follow-ups when someone replies, honor opt-outs, protect your mailbox from bounces, and show you the results. You decide who is emailed and what is said, and you are responsible for having a lawful basis to email them. We add no open or click tracking and no links of our own to your emails. Emails are sent through your own email provider, which handles them under its own terms. These records are kept as described in Section 7 (Data retention).

5. How we use information

  • To operate and deliver the service, including discovering, verifying, and delivering leads.
  • To coordinate payment requests and manage your subscription.
  • To send transactional email (account verification, payment requests, campaign-ready notices, renewal reminders).
  • To maintain the security of the platform (e.g. fraud/abuse prevention on free trial signups).
  • To improve the service.
  • To measure and improve our marketing and advertising, including conversion measurement with Meta, only if you accept optional cookies (see Section 11).

We do not sell your personal information to third parties.

6. Who we share information with

  • Payoneer, to send and process your payment request if you choose a paid plan.
  • Our email delivery provider, to send transactional email on our behalf.
  • Meta Platforms (Facebook and Instagram), only if you accept optional cookies, to measure and improve our advertising (see Section 11).
  • Service providers who help us operate the platform, bound by confidentiality obligations.
  • Where required by law, or to protect our legal rights.

7. Data retention

We retain your account and campaign data for as long as your account remains active, and for up to 24 months after account closure or cancellation, to handle disputes, refunds, and legal obligations. Lead data delivered to you is retained on our systems for the same period, for support and quality purposes. Email outreach records (funnels, recipients, sending events and replies) are kept on the same basis as your campaign data, and a saved mailbox login is deleted as soon as you remove the mailbox. Technical logs (such as login activity) are retained for up to 12 months. After these periods, data is deleted or anonymized.

8. Security

We apply security measures including CSRF protection on all forms, rate limiting on authentication and signup endpoints, and password hashing (we never store passwords in plain text). No system is perfectly secure, and we cannot guarantee absolute security.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. If you are located in the European Economic Area, the United Kingdom, or a jurisdiction with an equivalent law, see Section 10 (GDPR) below for how these rights apply to you specifically. To exercise any of these rights, contact us at support@prowortex.com.

10. GDPR: additional rights if you're in the EU/EEA or UK

If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction covered by the General Data Protection Regulation (GDPR) or an equivalent law, this section applies to you in addition to the rest of this Policy.

Who is responsible for your data. Faiz Ullah, operating as Prowortex, is the data controller for the personal information described in this Policy.

Our legal basis for processing.

  • Performing our contract with you: operating your account, delivering leads, coordinating payment.
  • Our legitimate interests: securing the platform and preventing abuse of free trials, and improving the service -- used only where these interests don't override your own rights.
  • Your consent, where we ask for it specifically: for example, optional cookies and the advertising measurement data sent to Meta (you can decline, and change your mind at any time with "Cookie settings" in the site footer), and optional communications.
  • Legal obligation, where processing is required of us by law.

Your rights. Access to your data, correction, erasure ("right to be forgotten"), restriction of processing, data portability, objection to processing based on legitimate interest, and withdrawal of consent at any time where processing is based on consent. To exercise any of these, contact support@prowortex.com; we will respond within the timeframe required by applicable law.

International transfers. See Section 13 below.

Complaints. You have the right to lodge a complaint with your local data protection supervisory authority if you believe we haven't handled your data properly -- though we'd appreciate the chance to resolve it directly first at the contact above.

No dedicated Data Protection Officer. Given the size and nature of this service, we are not required to appoint a formal Data Protection Officer under GDPR. The contact above serves that role in practice.

11. Cookies and similar technologies

When you first visit our public website we ask whether you accept optional cookies. Declining is as easy as accepting, and you can change your choice at any time with "Cookie settings" in the footer of every page. Optional cookies and tracking stay off until you accept.

Always on (strictly necessary):

  • Login session cookie: keeps you signed in to your account.
  • Cookie choice (zv_consent): remembers whether you accepted or declined, for about 6 months.

Only if you accept:

  • Anonymous visitor cookie (zv_visitor): a random ID that lets us count how many different people visit our site over time. If you decline, we still count your visit, using an anonymous identifier that changes every day and is not stored in your browser.
  • First-visit source cookie (zv_attribution): remembers the campaign tags of the link you first arrived from, for up to 90 days, so that if you sign up we know which marketing brought you.
  • Meta Pixel (cookies such as _fbp and _fbc): a script from Meta Platforms that records actions on our site, such as viewing a page or clicking the sign-up button. We use it to measure how well our ads work, to improve them, and to reach people who may be interested. Meta receives your IP address, browser details, the pages you view and the actions you take, and handles them under its own privacy policy. For this collection and transfer of data to Meta, we and Meta are joint controllers under data protection law. Meta may transfer data outside your country, including to the United States.
  • Server-to-server ad events: if you accept and then create an account, we send Meta a small number of events about your progress (sign-up, email verified, first campaign, first leads delivered, and a paid plan), with your email address in hashed (SHA-256) form so Meta can match them to its own users. If you decline, none are sent. If you decline or withdraw while signed in, we stop sending them straight away; otherwise, contact us at support@prowortex.com.

If you sign up, a record of your choice and when it was made is kept with your account. Withdrawing consent does not affect what was done before you withdrew. Data Meta already holds is subject to Meta's own controls, which you can manage in your Facebook or Instagram ad preferences. We do not sell your personal information.

12. Children's privacy

Lead Engine is a business-to-business service not directed at, or intended for use by, individuals under 18.

13. International data transfers

Lead Engine is operated from Pakistan, and the infrastructure we use to run the service may be located in other countries, which may be outside the European Economic Area, the United Kingdom, or your own country. Where personal data is transferred internationally, we take reasonable steps to protect it consistent with this Policy, including limiting access to what's needed to operate the service and using reputable infrastructure providers.

14. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be noted on this page with an updated "Last updated" date.

15. Contact

Questions about this policy, or to exercise a data request: support@prowortex.com