Privacy Policy

1. Introduction & Overview

Nanops ("we", "us", or "our") operates the LeadGen platform, browser extensions, and associated utility services (collectively, "the Service"). We are committed to transparency, user security, and respecting individual privacy rights.

This Privacy Policy outlines how we handle personal data in two distinct operational contexts:

• Account & Platform Data: Personal data you provide to us directly to create, authenticate, manage, and bill your LeadGen account (where Nanops acts as the Data Controller).
• User-Extracted & Camera-Scanned Lead Data: Third-party business contact information that you independently extract from web pages, capture via OCR camera scanning, or import into your LeadGen workspace (where the Customer acts as the sole Data Controller, and Nanops is solely a neutral productivity software tool provider).

2. User-Extracted Data & Camera Scanning (Third-Party Information)

LeadGen provides client-side productivity tools, browser extensions, and optical character recognition (OCR) scanning features designed to help professionals organize publicly visible sales prospects and business contact records.

When you use these features to extract publicly displayed information from web pages, business directories, cards, or documents:

• Customer as Sole Data Controller: You determine the purposes, sources, criteria, and legal basis for collecting such information. You act strictly as the independent Data Controller under the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA/CPRA), and equivalent global privacy legislation.
• Nanops Neutrality: Nanops does not select your target websites, does not verify or censor the data you capture, and acts solely as an on-demand software utility.
• Proprietary & Copyrighted Content: You are strictly advised to ensure that you only collect publicly visible contact information where you have lawful grounds or legitimate interests to do so. Unauthorized capture of confidential or proprietary content is under the exclusive responsibility of the customer.
• Lawful Outreach & Anti-Spam Compliance: You are solely responsible for ensuring that any subsequent communication (including B2B emails, calls, or messaging) complies with all applicable marketing statutes, including the CAN-SPAM Act, CASL, TCPA, and the EU ePrivacy Directive.

3. Chrome Web Store & Extension User Data Policy Compliance

The LeadGen Extension for Chrome is built with strict privacy-by-design standards in full compliance with the Google Chrome Web Store Developer Program Policies, including the Limited Use Requirements:

• On-Demand, User-Initiated Execution: The extension remains completely dormant in the background. It only accesses the active tab when you explicitly open the extension popup and click the extraction action button.
• Narrow Permission Scope: The extension utilizes the activeTab and scripting permissions solely to identify and structure text patterns (such as emails, phone numbers, and company names) already visible on the specific web page you are viewing. It does not monitor other open tabs, read browsing history, or track your browsing activity across websites.
• No Remote Code: All scripts, logic, and parsing patterns are packaged locally within the extension. The extension does not load or execute external, unreviewed remote scripts.
• Secure HTTPS Transmission: Captured contact information is only transmitted to your LeadGen workspace when you explicitly click the "Upload" button, transmitted securely over TLS/HTTPS to our encrypted API.
• No Sale or Third-Party Transfer: We do not sell, rent, or trade user data or extracted contacts to any third parties, brokers, or data aggregators.
• No Advertising Use: We do not use or transfer user data or extracted contacts for personalized ads, remarketing, or cross-context behavioral advertising.
• No Creditworthiness Assessment: We do not use or transfer collected data to evaluate creditworthiness or for lending purposes.

4. Camera & Optical Scanning Processing

For camera scanning features (such as scanning physical business cards or event badges):

• Client-Side Processing: Optical character recognition (OCR) detects text directly in your browser. Nanops does not continuously record, stream, or store raw video feeds on central servers.
• User Discretion: You should only capture physical materials with the subject's knowledge (such as exchanging physical business cards at professional meetings).

5. Account Information We Collect

To provide the Service, Nanops collects certain administrative information when you register and interact with our platform:

• Identity & Contact Data: Name, email address, password hashes, and profile settings.
• Billing & Payment Data: Subscription tiers, transaction IDs, and billing contact details. Payment transactions are processed directly by certified third-party payment gateways; Nanops does not store raw payment card credentials.
• Technical & Log Data: IP addresses, browser type, operating system, timestamps, and diagnostic error logs used for system security, fraud prevention, and session maintenance.

6. How We Use Your Account Data

We process your account data solely for the following legitimate business purposes:

• Authenticating your identity and providing access to your dashboard and extensions;
• Processing subscription upgrades, renewals, and billing receipts;
• Delivering critical account notices, security updates, and service announcements;
• Preventing fraudulent access, abuse, and denial-of-service attacks; and
• Complying with statutory accounting and tax obligations.

7. Data Security & Storage

We implement industry-standard technical and organizational security controls to protect your account information and workspace databases against unauthorized access, loss, alteration, or disclosure. These controls include encrypted HTTPS data transmission, salted password hashing, and access-restricted database infrastructure.

8. Data Retention & Customer Control

You maintain full control over the data stored in your workspace:

• You may edit, export (CSV/JSON), or delete any leads, patterns, or schemas stored in your account at any time through the dashboard.
• Upon account deletion or subscription cancellation, your account data and associated database records are purged in accordance with our routine deletion cycles, except where retention is required by tax or financial reporting laws.

9. Third-Party Data Subject Inquiries

Because Nanops does not manage, direct, or index the content extracted or scanned by individual users, we cannot fulfill Data Subject Access Requests (DSARs), opt-out requests, or deletion requests on behalf of third-party individuals whose public contact details were collected by our customers.

Any inquiries or complaints received by Nanops regarding data collected by a specific customer will be redirected to that customer, or the customer will be required to handle and resolve the complaint directly under their own legal responsibility.

10. Limitation of Liability & Indemnity

To the maximum extent permitted by law, Nanops disclaims all liability for any direct, indirect, incidental, statutory, or consequential damages resulting from privacy claims, data breaches, unauthorized data capture, copyright infringement, or regulatory enforcement actions initiated against you or your organization arising from data you extracted, scanned, or processed using LeadGen.

As detailed in our Terms of Service, you agree to defend, indemnify, and hold harmless Nanops and its personnel against any third-party claims, penalties, or damages arising out of your data collection, scanning, or processing practices.

11. Updates to This Policy

We may revise this Privacy Policy periodically to reflect technological updates, legal requirements, or platform enhancements. The date of the most recent revision will be noted at the top of this page. Your continued use of the Service after any modification signifies your acknowledgment and acceptance of the revised policy.