Privacy Policy
Last updated: 30 August 2026
1. Who we are
Leadwire is operated by Giurgia David, an individual sole trader based in Romania. “Leadwire”, “we” and “us” in this policy mean that individual. Leadwire is not a registered company.
Contact for any privacy question or request: giurgiad@gmail.com
If you are in the UK or the EU and are not satisfied with how we handle your data, you can complain to your national data protection authority. In Romania that is ANSPDCP (dataprotection.ro); in the UK it is the ICO (ico.org.uk).
2. The two very different things we do with data
This matters, because our responsibilities differ:
(a) Our own website and demo. When you visit leadwire.online or use the demo that calls your phone, we decide what happens with your data. In legal terms we are the controller. Sections 3 to 5 cover this.
(b) Running the service for a customer. When an agency uses Leadwire to route its clients’ leads, that agency (and its own client) decides what happens with the data. We only act on their instructions. In legal terms we are a processor. Section 6 covers this.
3. The phone demo
The demo is the box on our home page. You type your phone number, we text you a code, and once you enter it we call you with a scripted example lead.
What we collect: the phone number you enter, its country prefix, the verification code and how many times it was attempted, the time you verified, a record of the call (its status, when it was started, when it rang, when you pressed 1, how long it lasted, and Twilio’s identifier for it), the delivery status of any text message we send you, a one-way cryptographic hash of your IP address, and the utm_source value in the link you arrived from.
We do not store your IP address. We store an HMAC-SHA256 hash of it. It cannot be reversed to an IP address, and we use it only to count how many demo requests came from one visitor.
We do not record the demo call.
Why we do it, and on what basis: you asked us to call you and confirmed the number is yours by entering a code, so our lawful basis is your consent. You can withdraw it at any time by emailing us, though a call already placed cannot be recalled.
We also use the same records to stop the demo being abused — limits per phone number, per hashed IP, and per day — and to calculate the median time it takes a phone to ring, which we publish on the site as an aggregate number only. Our lawful basis for these two uses is our legitimate interest in keeping a public phone-dialling endpoint from being used to harass people or to run up costs.
Who we hand it to: Twilio, which places the call and sends the text.
How long we keep it: demo records are deleted after 30 days.
4. Accounts
If you create an account we hold your name, email address, and either a hashed password or the fact that you signed in with Google. If you connect a Twilio account, its credentials are stored encrypted (AES-256-GCM) and are never shown back to you or to anyone else through our interface.
Lawful basis: performance of our contract with you. We keep account data for as long as the account exists, and delete it when you delete the account.
5. Booking a call
If you book a setup call we use Cal.com, and whatever you enter in that form is held by them and by us for the purpose of holding the meeting.
6. Data we process on behalf of a customer
When an agency runs Leadwire, its workspace contains:
- Sales representatives — name, phone number, timezone, working hours.
- Leads — name, phone number, and the interest they submitted through a form.
- Call records — which representative was called about which lead, whether they answered, whether they accepted, and how long the call lasted.
For all of this the customer is the controller and we are the processor. We act only on their instructions, we do not use this data for our own purposes, we never sell it, and we do not use it to train anything.
If you are a sales representative or a lead and want your data corrected or deleted, contact the business that holds the relationship with you. We will help them act on your request, but we cannot act on it on our own.
We do not record these calls. We store only the metadata listed above.
7. Who else touches the data
We use a small number of providers. Each of them only receives what it needs to do its job:
| Provider | What it does | Where |
|---|---|---|
| Twilio | Places calls, sends text messages | US / EU |
| Amazon Web Services | Text-to-speech for the spoken lead announcement | US / EU |
| Neon | Database hosting | EU |
| Vercel | Application hosting | EU / US |
| Optional sign-in | US | |
| Cal.com | Booking the setup call | US |
| Lemon Squeezy | Payments and invoicing, as Merchant of Record | US |
Where these transfer data outside the UK or EEA, they do so under the European Commission’s Standard Contractual Clauses or an equivalent approved mechanism.
8. Your rights
You can ask us for a copy of the data we hold about you, to correct it, to delete it, to restrict what we do with it, to receive it in a portable form, and to object to processing we base on legitimate interest. Where we rely on your consent, you can withdraw it at any time.
Email giurgiad@gmail.com and we will respond within one month.
9. Cookies
We use only what is needed to keep you signed in and to remember which link brought you to the site. We do not run advertising trackers.
10. Security
Twilio credentials are encrypted at rest with AES-256-GCM. Passwords are hashed with bcrypt. Every webhook that accepts a lead is authenticated with a per-workspace secret compared in constant time. Data in transit is encrypted with TLS.
No system is perfect. If we ever become aware of a breach affecting your data, we will notify the relevant authority within 72 hours and tell you directly where the law requires it.
11. Children
Leadwire is a business tool and is not directed at anyone under 18.
12. Changes
If we change this policy we will update the date at the top. If the change is significant we will tell account holders by email.