Privacy Policy

Last updated: April 1, 2026

1. Who we are

Leadquora, Inc. ("Leadquora", "we", "us") is a Delaware corporation operated by LunaVista INC, headquartered at 244 5th Ave, Suite 2, New York, NY 10001. We operate the e-commerce CRM and payment processing platform available at leadquora.com.

2. What information we collect

We collect two categories of information:

Merchant data

• Account details: name, email, phone, company name, role, password hash
• Billing data: card token (stored only in tokenized form), invoice history
• Platform usage: features used, login times, IP addresses, browser fingerprints

Shopper data (collected on behalf of our merchants)

• Contact information: name, email, phone, shipping/billing address
• Transaction data: orders, payment tokens, subscription records, refund history
• Behavioral data: checkout funnel analytics, session recordings (where enabled by the merchant)

3. How we use your information

We use information to operate the service, process payments, communicate with merchants, detect fraud, comply with legal obligations, and improve the product. We never sell data to third parties — this is a core tenet of how we operate.

4. How we share information

We share information only with:

• Payment processors (Stripe, NMI, etc.) to complete transactions you've configured
• Integration partners you've connected (Klaviyo, Shopify, etc.)
• Sub-processors (AWS, Cloudflare, Datadog) under strict data processing agreements
• Law enforcement, if compelled by a valid legal process

5. Data retention

Merchant account data is retained for the lifetime of your account plus 7 years for tax and compliance purposes. Shopper data is retained per the merchant's own retention settings, with a default of 7 years. You can request earlier deletion at any time via privacy@leadquora.com.

6. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the data we hold about you
• Correct inaccurate data
• Delete your data ("right to be forgotten")
• Export your data in a machine-readable format
• Object to or restrict certain processing
• Opt out of the sale of personal information (we don't sell data, but CCPA requires us to say it)

To exercise any of these, email privacy@leadquora.com. We respond within 30 days.

7. Security

See our full Security page for details. Short version: PCI DSS Level 1, SOC 2 Type II, AES-256 at rest, TLS 1.3 in transit, and independent third-party penetration tests every 6 months.

8. International transfers

Leadquora is a US-based company. Data is primarily processed in US-East (Virginia) and US-West (Oregon) AWS regions. For EU merchants, we offer EU data residency on Enterprise plans under Standard Contractual Clauses (SCCs).

9. Children's privacy

Leadquora is not directed to children under 16. We do not knowingly collect data from anyone under 16. If you believe we have, email privacy@leadquora.com and we will delete it promptly.

10. Changes to this policy

We'll notify all account holders by email at least 30 days before any material change takes effect. The archived version history is available on request.

11. Contact us

Questions about privacy? Email privacy@leadquora.com or write to Leadquora Privacy Team, LunaVista INC, 244 5th Ave, Suite 2, New York, NY 10001.