LeadMerlin (leadmerlin.com) is operated by Halberd LLC ("we", "us"). This page explains what we collect when you use the website, the dashboard at app.leadmerlin.com and the API at api.leadmerlin.com.
What we collect about you
- Account data: your email address, plan, and the API keys we issue (stored hashed, with an encrypted copy so you can reveal the key in the dashboard).
- Usage data: the searches and enrichment jobs you run (keyword, locations, result counts), credit usage, and standard server logs (IP address, user agent, timestamps).
- Signup attribution: when you first visit, we store a first-party cookie (
lm_src) with the campaign tags in the link you followed, the referring website and the page you landed on. When you create an account we save it with your account, together with your optional answer to "How did you hear about us?". We use this only to learn which channels work. - Billing data: payments are handled by Stripe. We receive your subscription status and a customer ID; we never see or store full card numbers.
Cookies
lm_session: keeps you signed in (strictly necessary).lm_src: first-touch attribution described above, expires after 90 days.
We do not use advertising cookies or sell personal information.
Business data in search results
Search results contain information about businesses compiled from publicly available sources, such as Google Business Profiles and the businesses' own websites. Some of it can include names or contact details of business owners or staff. If you want information about you or your business removed from future results, email us at the address below and we will handle the request.
If you use LeadMerlin data to contact people, you are responsible for complying with the laws that apply to you, such as the U.S. CAN-SPAM Act, the TCPA and, where relevant, GDPR.
Service providers
We share data only as needed to run the service, with: Stripe (payments), Brevo (transactional email), DataForSEO (Google Maps search data), Telnyx and Twilio (phone line type lookup), Anthropic (AI analysis of public website text) and our hosting providers. Cloudflare may process traffic for security and, if enabled, privacy-friendly aggregate analytics.
Retention
We keep account and usage data while your account is active. Ask us to delete your account and we will remove your personal data, except records we must keep for tax, accounting or fraud prevention.
Your choices
You can request access to, correction of or deletion of your personal data at any time.
Contact
Email [email protected]. We will update this page when our practices change and revise the date above.