Privacy Policy

1. Introduction

This Privacy Policy describes how Aoto Hiranuma, operating as ListHeater ("we," "us," or "our"), collects, uses, and protects your personal information when you use our AI-powered lead generation service ("Service").

We are committed to protecting your privacy and ensuring the security of your personal information. This policy explains our practices regarding the collection, use, and disclosure of information through our Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, password, and account preferences
• Profile Information: Name, business information, and communication preferences
• Search Criteria: Industry targets, geographic areas, company size preferences, and product information
• API Keys: Google Places API keys that you provide for conducting searches
• Payment Information: Processed by third-party payment processors (Stripe, PayPal)

2.2 Information We Collect Automatically

• Usage Data: How you interact with our Service, features used, and search patterns
• Technical Data: IP address, browser type, device information, and operating system
• Log Data: Server logs, error reports, and performance metrics
• Cookies: Authentication tokens and preferences (essential cookies only)

2.3 Information from Third Parties

• Google Places API: Business information, locations, and contact details
• Payment Processors: Transaction confirmations and subscription status
• AI Services: Analysis results and scoring data

3. How We Use Your Information

We use your information to:

3.1 Provide Our Service

• Process your search requests and generate lead lists
• Analyze businesses using AI and provide scoring
• Enable data export and reporting features
• Manage your account and subscription

3.2 Improve Our Service

• Analyze usage patterns to enhance functionality
• Develop new features and improvements
• Optimize search algorithms and AI models
• Monitor and improve service performance

3.3 Communicate With You

• Send service-related notifications and updates
• Provide customer support and respond to inquiries
• Send important account and billing information
• Notify you of significant changes to our Service or policies

3.4 Legal and Security

• Comply with legal obligations and respond to legal requests
• Protect against fraud, abuse, and security threats
• Enforce our Terms of Service
• Protect the rights and safety of our users

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

4.1 Service Providers

• Google APIs: To conduct business searches and analysis
• Payment Processors: To process subscriptions and payments
• Cloud Infrastructure: To host and operate our Service
• AI/ML Services: To analyze and score business data

4.2 Legal Requirements

• When required by law, regulation, or court order
• To respond to government requests or legal process
• To protect our rights, property, or safety
• To protect the rights, property, or safety of our users

4.3 Business Transfers

In the event of a business sale, merger, or acquisition, your information may be transferred as part of that transaction. We will notify you of any such transfer and any changes to this privacy policy.

5. Data Security

We implement appropriate security measures to protect your information, including:

• Encryption: Data is encrypted in transit and at rest
• Access Controls: Limited access to personal information on a need-to-know basis
• Secure Infrastructure: Industry-standard security practices and monitoring
• Regular Updates: Security patches and system updates
• API Key Protection: Your Google API keys are encrypted and securely stored

However, no internet transmission is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your information as follows:

• Account Data: Until you delete your account or request deletion
• Search Data: For the duration of your subscription plus 90 days
• Usage Logs: Up to 2 years for service improvement and security
• Payment Records: As required by law and payment processor requirements

You may request deletion of your personal information at any time by contacting us. Some information may be retained for legal or legitimate business purposes.

7. Your Rights and Choices

You have the following rights regarding your personal information:

7.1 Access and Portability

• Request access to your personal information
• Request a copy of your data in a portable format
• View and download your search history and results

7.2 Correction and Updates

• Update your account information and preferences
• Correct inaccurate or incomplete information
• Manage your Google API key and search settings

7.3 Deletion

• Delete your account and associated data
• Request removal of specific information
• Cancel your subscription at any time

7.4 Communication Preferences

• Opt out of non-essential communications
• Choose your preferred communication methods
• Update notification settings

8. International Data Transfers

Your information may be processed and stored in countries other than your country of residence. We ensure appropriate safeguards are in place for international data transfers, including:

• Using cloud providers with appropriate certifications
• Implementing contractual protections for data transfers
• Ensuring adequate data protection standards

9. Children's Privacy

Our Service is not intended for children under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will delete such information promptly.

10. Third-Party Links and Services

Our Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you use.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes by:

• Sending an email notification to your registered email address
• Posting a notice on our website
• Providing notice through our Service

Your continued use of our Service after we post or send notice of changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

We will respond to your inquiry within 30 days. For urgent privacy concerns, please mark your communication as "URGENT - Privacy Request."

13. Regional Privacy Rights

13.1 European Users (GDPR)

If you are located in the European Economic Area, you have additional rights under GDPR:

• Right to object to processing for legitimate interests
• Right to data portability
• Right to lodge a complaint with supervisory authorities
• Right to withdraw consent where processing is based on consent

13.2 California Users (CCPA)

California residents have the right to:

• Know what personal information is collected, used, shared, or sold
• Delete personal information held by us
• Opt-out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising privacy rights