Privacy Policy

1. Who We Are

LeakSource (“we”, “us”, “our”) provides fraud detection, account security, and related cyber revenue forensics services for businesses. This Privacy Policy explains how we handle information when you:

• Visit our website or landing pages
• Submit a contact form or request an audit
• Engage with us as a client or prospective client

2. Information We Collect

We may collect the following categories of information:

• Contact details: name, business name, email address, phone number, and role/title.
• Inquiry details: the content of your message, including any incident description or business context you provide.
• Engagement data (clients only): logs, exports, account identifiers, transaction records, fraud patterns, or similar data you share so we can perform our services.
• Technical data: IP address, browser type, device information, and basic usage metadata (e.g., pages visited, timestamps) for security and reliability.

We do not intentionally collect sensitive personal data (e.g., health, government IDs) unless you or your systems include it in materials you provide to us as part of an investigation.

3. How We Use Your Information

We use the information described above to:

• Respond to inquiries and provide quotes, proposals, or follow-up.
• Deliver and improve fraud detection, security review, and incident response engagements.
• Analyze patterns of abuse or fraud to protect our clients’ systems and revenue.
• Maintain the security and integrity of our own website and infrastructure.
• Comply with legal obligations, enforce our Terms, and protect our rights or the rights of others.

We do not sell, rent, or trade your personal information for marketing lists.

4. Legal Bases (Where Applicable)

Depending on your location, we may rely on one or more of the following legal bases to process your information:

• Legitimate interests: to investigate fraud and abuse, secure systems, and operate our business.
• Contractual necessity: to perform services under an agreement with you or your organization.
• Consent: when you voluntarily submit information (for example through our contact forms).
• Legal obligation: where we are required to retain or share data by law or court order.

5. Data Retention

• Inquiry / contact form data: generally kept for up to 12 months, unless a longer period is needed to follow up or start an engagement.
• Client engagement data: retained only for as long as needed to deliver services and as required by our agreements with you, then deleted or anonymized where feasible.
• Technical logs & security records: may be retained for a reasonable period for security, audit, and abuse-prevention purposes.

6. How We Share Information

We may share information only in limited situations:

• Service providers: trusted vendors who help us host infrastructure, email, logging, or similar. They may only use data to provide their services to us and must protect it.
• Professional advisors: legal, security, or accounting professionals, where necessary.
• Legal and safety: if required by law, court order, or to respond to lawful requests; or to protect our rights, our clients, or others from fraud or harm.
• Business transfers: in connection with a merger, acquisition, or similar event, subject to continued protections for your data.

We do not sell or license your personal information to data brokers.

7. Security

We use administrative, technical, and organizational measures intended to protect information under our control, including:

• Encrypted transmission where appropriate
• Access controls and least-privilege practices
• Segregation of client data and internal environments where feasible

However, no security program or method of transmission is 100% guaranteed. We cannot promise or guarantee absolute security, but we do take reasonable steps to reduce risk and respond to incidents.

8. Your Choices & Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of certain information, subject to legal or contractual requirements
• Object to or restrict certain types of processing
• Withdraw consent where processing is based on consent

To exercise any of these rights (where available), contact us at: LeakSecure1@outlook.com. We may need to verify your identity before acting on a request.

9. Business Data & Third-Party Systems

Many of our engagements involve data exported from your own platforms (e.g., POS, loyalty, e-commerce, or authentication systems). You are responsible for ensuring that you have appropriate rights and legal bases to share that data with us.

Third-party services you use (payment processors, CRMs, marketing tools, etc.) are governed by their own privacy policies. We are not responsible for the privacy practices of those third parties.

10. Children’s Privacy

Our services and website are designed for businesses and professionals, not for children. We do not knowingly collect personal information from children under 13 (or other age thresholds where local law applies). If you believe a child has provided us with personal information, please contact us so we can review and delete it where appropriate.

11. International Users

Our primary operations are located in the United States. If you access our website or share information from outside the U.S., your data may be transferred to and processed in countries that may have different data protection laws than your own. Where required, we take steps to apply appropriate safeguards.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. When we do, we will revise the “Last updated” date at the top of this page. Material changes may be highlighted or communicated where reasonably appropriate.

13. Contact

If you have questions about this Privacy Policy or how we handle data, you can reach us at:

• Email: LeakSecure1@outlook.com
• Subject line: “Privacy Inquiry – LeakSource”