Privacy Policy
Trust Pack: PP-001 · Companion docs: Terms (ToS-001), DPA (DPA-001), Security Overview (SEC-001)
Trust Pack: PP-001 · Companion docs: Terms (ToS-001), DPA (DPA-001), Security Overview (SEC-001)
This Privacy Policy describes how Lazarus Deal Recovery collects and uses information when you use our B2B revenue intelligence / deal recovery service (forecastability aids and per-deal autopsy). You may try the product as a guest (no account) or sign in with an optional account (Supabase Auth). If you use Lazarus Deal Recovery on behalf of a company, your organization is responsible for the business content you upload; we process it as described here and in any executed Data Processing Addendum (DPA).
| Category | Examples | Purpose |
|---|---|---|
| Account data | Email, name, organization (when you create or use a login) | Authentication, support, billing readiness, account-scoped saves |
| Customer content | Call recordings (processed in memory), transcripts, documents, mailbox threads you attach, live session turns, field capture, HubSpot notes | Per-deal analysis and optional storage of outputs for signed-in users |
| Connector account data | OAuth tokens and connected account email when you link Gmail, Outlook, Zoom, HubSpot, or similar | Read-only evidence import; disconnect clears tokens |
| Saved analyses & CRM link metadata | Scores, reports, optional HubSpot/Salesforce deal IDs linked to a saved analysis | Account history and deal lifecycle features for signed-in users |
| Usage / freemium telemetry | Analysis counts, IP/user-agent soft limits for guests and non-founder accounts | Abuse prevention and free-tier enforcement |
| Technical logs | IP address, browser, API timestamps, error codes | Security, reliability, founder/ops diagnostics |
Guest vs signed-in: Guests may run a limited number of free analyses. Guest runs are not persisted to an account. When you are signed in, analysis outputs may be saved to your user account in Supabase (with Row-Level Security). See Security Overview §2.
You retain ownership of recordings, transcripts, and related business content. We receive a limited license to process that content solely to provide the service, as stated in our Terms of Service. We do not sell customer content or use it to train public AI models.
You are responsible for having legal authority to upload and analyze call recordings and transcripts. Lazarus Deal Recovery does not record calls on your behalf and does not verify consent for you.
You must comply with applicable law, including:
See Terms of Service §2 for the full customer warranty.
Security controls are summarized in our Security Overview (SEC-001). At a high level:
user_id| Data type | Default retention |
|---|---|
| Guest analysis runs | Not saved to an account; request processing is ephemeral aside from security/abuse logs |
| Raw audio uploads | Processed in memory; not persisted by default |
| Transcript text (signed-in saves) | Configurable; default automatic purge/null after 30 days |
| Analysis outputs (JSON, scores) | Retained for signed-in accounts until deleted by the user, founder/ops support action, or contract termination |
| CRM link metadata | Retained with the linked saved analysis |
| Rescue feedback (anonymous metadata) | Retained without transcript text for product improvement |
| Account data | Until account deletion + reasonable backup window |
Signed-in users can delete their account in Account → Delete my account (two-step confirm). You can also email support@getldr.ca. Upon contract termination, see DPA §8.
| Provider | Function | Location |
|---|---|---|
| Supabase | Database hosting, authentication, optional persistence | North America (default) |
| Google (Gemini API) | LLM extraction (Layer 1 only; scoring is server-side) | United States |
| AssemblyAI | Optional audio transcription | United States |
| Google (Gmail / Meet APIs) | Optional read-only mailbox and meeting connect | United States |
| Microsoft (Graph) | Optional read-only Outlook / Teams connect | United States / customer tenant region |
| Zoom | Optional live meeting transcript stream (RTMS) | United States / customer Zoom region |
| HubSpot | Optional read-only deals and notes import | United States / customer HubSpot region |
Optional connectors and enrichment run only when configured and used. Material sub-processor changes will be communicated per the DPA.
Depending on jurisdiction: access, correction, deletion, portability, and objection to processing. Canada (PIPEDA): contact us with questions or complaints. California (CCPA/CPRA): we do not sell personal information. EU/UK (GDPR): rights apply where relevant; B2B customers may rely on the DPA.
Primary hosting is North America. Cross-border processing may occur through sub-processors listed above. Alternative regions may be agreed in writing for enterprise customers.
We may update this policy. The “Version” date above will change. Material updates will be posted here; continued use after the effective date constitutes notice.
Startup disclosure: Suitable for early launch and pilot customers. Before annual contracts, regulated industries, or large-scale call processing, have legal counsel review this policy together with the Terms, DPA, and Security Overview. Lazarus Deal Recovery is not SOC 2 certified today.