Privacy Policy
Trust Pack: PP-001 · Companion docs: Terms (ToS-001), DPA (DPA-001), Security Overview (SEC-001)
Trust Pack: PP-001 · Companion docs: Terms (ToS-001), DPA (DPA-001), Security Overview (SEC-001)
This Privacy Policy describes how Lazarus Deal Recovery collects and uses information when you use our B2B revenue intelligence / deal recovery service (forecastability aids and per-deal autopsy). You may try the product as a guest (no account) or sign in with an optional account (Supabase Auth). If you use Lazarus Deal Recovery on behalf of a company, your organization is responsible for the business content you upload; we process it as described here and in any executed Data Processing Addendum (DPA).
| Category | Examples | Purpose |
|---|---|---|
| Account data | Email, name, organization (when you create or use a login) | Authentication, support, billing readiness, account-scoped saves |
| Customer content | Call recordings, transcripts, documents, mailbox threads you attach, live session turns, field capture, HubSpot notes | Write the report. That source evidence is not saved |
| Connector account data | OAuth tokens and connected account email when you link Gmail, Outlook, Zoom, HubSpot, or similar | Read-only evidence import; disconnect clears tokens |
| Saved analyses & CRM link metadata | Scores, reports, optional HubSpot/Salesforce deal IDs linked to a saved analysis | Account history and deal lifecycle features for signed-in users |
| Usage / freemium telemetry | Analysis counts, IP/user-agent soft limits for guests and non-founder accounts | Abuse prevention and free-tier enforcement |
| Technical logs | IP address, browser, API timestamps, error codes | Security, reliability, founder/ops diagnostics |
Guest vs signed-in: Guests may run a limited number of free analyses. Guest runs are not persisted to an account. When you are signed in, or when your company calls with its API key, the report is saved to that company. The raw transcript and evidence-quote fields are not. The summary, scores, and next actions are. See Security Overview §2.
You retain ownership of recordings, transcripts, and related business content. You are the controller. We are the processor. We receive a limited license to process that content solely to provide the service, as stated in our Terms of Service.
You send the call, the email, or the notes to this hosted app. We read them here to say whether the deal is recoverable or a flat no, what is blocking it, and what to do next. Scoring sends the transcript to Google Gemini. We do not save the transcript. We do not sell customer content, use it for advertising, or use it to train public AI models.
This policy describes the hosted app. A company key lets a server post a deal into that app. The call is sent here, then to Google Gemini for scoring. We save the report in the Lazarus database and we do not save the transcript. The key is shown once. We store a hash of the key, not the key itself. The key does not put the portal on your server.
A standalone install is the same app on the company’s server, writing to a database they own. Scoring on that install sends the transcript to Google Gemini with their key. The Lazarus database does not hold those rows. The company key does not create that install. This policy covers the hosted app.
You are responsible for having legal authority to upload and analyze call recordings and transcripts. Lazarus Deal Recovery does not record calls on your behalf and does not verify consent for you.
You must comply with applicable law, including:
See Terms of Service §2 for the full customer warranty.
Security controls are summarized in our Security Overview (SEC-001). At a high level:
user_id| Data type | Default retention |
|---|---|
| Guest analysis runs | Not saved to an account; request processing is ephemeral aside from security/abuse logs |
| Raw audio uploads | Processed in memory; not persisted by default |
| Transcript, evidence quotes, and CRM payload | Used to write the report. The raw transcript is not saved, and evidence-quote fields are removed from the stored report. The summary is kept. A company API key can return the full brief to the customer’s own server |
| Saved report (summary, scores, status, rescue tasks) | The raw transcript is not saved. Evidence-quote fields are removed before the row is stored. The summary, scores, and next actions are kept. The report stays while the deal is open. When HubSpot or Salesforce marks the deal complete, the report is deleted then. Otherwise it is deleted 30 days after a win or a flat no. A stalled or recoverable deal is not on that clock |
| CRM link metadata | Deleted with the report |
| Rescue feedback (anonymous metadata) | Retained without transcript text for product improvement |
| Account data | Until account deletion + reasonable backup window |
Signed-in users can delete their account in Account → Delete my account (two-step confirm). You can also email support@getldr.ca. A written deletion request is handled within 30 days where deletion is technically feasible. When a contract ends, customer personal data is deleted from production within 30 days. See DPA §8. The report also deletes on its own 30 days after a win or a flat no. A stalled or recoverable deal is not on that clock.
| Provider | Function | Location |
|---|---|---|
| Supabase | Database hosting, authentication, optional persistence | North America (default) |
| Render | API application hosting | United States |
| GitHub Pages | Static site hosting (www.getldr.ca) | United States |
| Cloudflare | Turnstile bot protection on analysis submit | United States / Cloudflare edge |
| Stripe | Payment processing when checkout is used | United States |
| Google (Gemini API) | LLM extraction for paid runs (Layer 1 only; scoring is server-side) | United States |
| OpenRouter | Free-tier model routing. Requests are sent with no-training and zero-retention flags. Paid runs use Gemini. | United States |
| AssemblyAI | Optional audio transcription | United States |
| Google (Gmail / Meet APIs) | Optional read-only mailbox and meeting connect | United States |
| Microsoft (Graph) | Optional read-only Outlook / Teams connect | United States / customer tenant region |
| Zoom | Optional live meeting transcript stream (RTMS) | United States / customer Zoom region |
| HubSpot | Optional read-only deals and notes import; a note is written only when you push the plan | United States / customer HubSpot region |
| Salesforce | Optional CRM connect; a note is written only when you push the plan | United States / customer Salesforce region |
Optional connectors and enrichment run only when configured and used. Material sub-processor changes will be communicated per the DPA.
Depending on jurisdiction: access, correction, deletion, portability, and objection to processing. Canada (PIPEDA): contact us with questions or complaints. California (CCPA/CPRA): we do not sell personal information. EU/UK (GDPR): rights apply where relevant; B2B customers may rely on the DPA.
Primary hosting is North America. Cross-border processing may occur through sub-processors listed above. Alternative regions may be agreed in writing for enterprise customers.
We may update this policy. The “Version” date above will change. Material updates will be posted here; continued use after the effective date constitutes notice.
Startup disclosure: Suitable for early launch and pilot customers. Before annual contracts, regulated industries, or large-scale call processing, have legal counsel review this policy together with the Terms, DPA, and Security Overview. Lazarus Deal Recovery is not SOC 2 certified today. We do not offer SSO, a HIPAA business associate agreement, or an uptime SLA. A standalone install is the same app on the company’s server and their database. It is not this hosted service, and the company key does not create it. Default hosting is North America. A different region is only by written agreement.