LeadRight

Privacy Policy

Last updated: October 11, 2026

LeadRight is a practice simulator for difficult workplace conversations, available as a web app at getleadright.com and as an iOS app. This policy explains what data we process, why, and what your rights are. The data controller is Nicola Guglielmi (Italy). Contact: hello@getleadright.com.

What the simulator does with what you type

When you practice a live conversation, the text you type — and the conversation transcript it belongs to — is sent to our server and, from there, to Google Gemini, a third-party AI service operated by Google LLC, which generates the counterpart's replies and your debriefing. This is the core of the product and it cannot work without it. Google processes this data as our processor under the Gemini API terms; we do not use your conversations to train models of our own.

You are never required to use real names or confidential facts: the simulator works just as well with made-up details, and we recommend it. In the iOS app, scripted (offline) conversations are processed entirely on your device and send nothing anywhere.

What we collect

iOS app

  • No account. Your practice history (transcripts, scores, confidence ratings, your own saved situations) is stored only on your device. Deleting the app deletes it.
  • Live conversations are transmitted to our server and to Google Gemini as described above. Our server does not store them beyond what is needed to answer the request and to keep operational logs.
  • Purchases are handled by Apple and by RevenueCat (our subscription infrastructure provider), which receives an anonymous app identifier and purchase receipts — never your name or email.
  • Reports. If you report a reply as inappropriate, the report is stored on your device and you can send it to us at the contact address above.

Web app

  • Account data: email address, a hashed password, your name if you provide it, and your organisation membership when you join a team.
  • Practice data: the scenarios you attempted, your answers and scores, used to show your progress and, in teams, aggregated improvement (team admins never see raw scores or transcripts).
  • Waitlist: email address and the plan you indicated, if you signed up for early access.
  • Payments (Pro on the web): handled by Stripe (Stripe Payments Europe, Ltd., Ireland), which receives your email, name, billing address, payment details and, if you enter it, your VAT number. We never see or store your card details; we keep your Stripe customer and subscription identifiers, your plan, the end of your current billing period, and when you accepted the terms of sale and asked for immediate access.
  • Traffic source: the campaign tag of the link you arrived from (for example ?from=youtube-it) is saved with your account when you sign up, to know which channels bring people to LeadRight. If you accept cookies, we also keep that tag for 90 days in a first-party cookie (lr_from) so a later visit is attributed the same way.
  • Analytics: Google Analytics 4, only after you accept cookies (Consent Mode v2; nothing is collected before consent).

Legal basis and purposes

We process data to provide the service you asked for (contract, including subscription payments), to meet tax and accounting obligations for paid plans (legal obligation), to keep the service secure and prevent abuse (legitimate interest), and — for analytics and attribution cookies — on the basis of your consent, which you can withdraw at any time from the cookie banner.

Where data lives

Our servers run on Google Cloud in the European Union (Belgium, europe-west1). Google Gemini requests may be processed in other regions under Google's standard contractual safeguards.

Retention

Web account and practice data are kept while your account exists and deleted within 30 days of a deletion request. Billing records for paid plans are kept for the period required by tax and accounting law. Operational server logs are kept for up to 30 days. Waitlist entries are deleted when the waitlist closes or on request.

Your rights

Under the GDPR you can access, correct, export or delete your data, object to or restrict processing, and lodge a complaint with your supervisory authority (in Italy, the Garante per la protezione dei dati personali). Write to hello@getleadright.com; we answer within 30 days.

Children

LeadRight is made for people who manage teams at work and is not directed to anyone under 16.

Changes

We will post any change on this page and update the date above. Material changes to how conversations are processed will be announced in the app before they take effect.