This Privacy Notice explains how Over 40s TC ("we", "us"), trading as AI Lead Generator, handles personal data when you use the AI Lead Generator application and website.
1. Who we are and our role
Over 40s TC is the data controller for personal data processed through your account. We decide the purposes and means of that processing. For payments, PayPal (web) and Apple or Google (in-app purchases) act as independent controllers of buyer/billing data (see section 5).
2. Data we collect
- Account data — name, email address, login credentials, plan status.
- Customer/lead data you upload — names, email addresses, phone numbers, notes and messages relating to your own leads.
- Content and messages — sequences, templates, AI prompts and generated content, inbox conversations.
- Support data — messages, bug reports and attachments you send us.
- Usage and technical data — app interactions, device identifiers, IP address, crash logs.
3. Why we use it and our legal basis
- Providing the service (accounts, leads, AI messaging, integrations) — performance of our contract with you.
- Support and service communications — performance of contract.
- Security, fraud prevention and abuse detection — legitimate interests in keeping the service safe.
- Product improvement and analytics — legitimate interests in improving our product.
- Marketing emails — consent, which you can withdraw at any time.
- Tax, accounting and legal records — compliance with legal obligations.
Where you upload lead data, you are the controller of that data and we act as your processor; you are responsible for having a lawful basis to contact those individuals.
4. AI processing
Prompts and content you submit to AI features are sent to our AI providers solely to generate the requested output. Outputs may be inaccurate and should be reviewed before use.
5. Who we share data with
- PayPal — payment processor for subscriptions purchased on the web. PayPal handles checkout, billing and payment details; we never see your card or bank details.
- Apple App Store / Google Play (via RevenueCat) — where you subscribe inside the iOS or Android app, Apple or Google process the payment and RevenueCat verifies your subscription entitlement for us.
- Supabase — secure cloud database and file hosting, with encryption in transit (TLS) and at rest.
- OpenAI and other AI providers — lead context is sent solely to draft your messages and content; it is not used to train public foundational models.
- Twilio — delivery of outbound SMS and WhatsApp messages.
- Other service providers / subprocessors — email delivery, push notifications, analytics and support tooling.
- Integrations you connect — e.g. Meta, Google, calendar and form providers, only where you authorise them.
- Professional advisers — legal and accounting advisers where necessary.
- Authorities — where required by law.
We do not sell your personal data.
5a. Consent and anti-spam compliance
You must ensure that every lead stored in the app has given explicit, documented consent to receive marketing communications, in line with the Australian Spam Act 2003 and global equivalents such as CAN-SPAM (US) and the GDPR (Europe). Every sequence you send must include a clear and immediate unsubscribe or opt-out mechanism.
6. International transfers
Our providers may process data outside your country, including outside the UK/EEA. Where that happens we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.
7. Retention
- We keep your data for as long as your account is active. You can request immediate, permanent deletion of your account and all associated lead history from Account > Delete Account in the app, or by emailing support.
- Account and lead data — for the life of your account and up to 90 days after deletion, then deleted or anonymised.
- Crash and diagnostic logs — up to 90 days.
- Billing and tax records — retained by our payment providers and by us for up to 7 years where required by law.
8. Your rights
Subject to applicable law, you may request access, rectification, erasure, restriction, portability, or object to processing, and withdraw consent at any time. We respond within one month. You may also complain to your local data protection authority. To exercise your rights, contact us at support@aileadgenerator.online. You can also delete your account in-app from Account settings.
9. Security
We use appropriate technical and organisational measures including encryption in transit (TLS), encryption of stored third-party credentials, row-level access controls and least-privilege access.
10. Cookies
We use essential cookies and local storage to keep you signed in and remember preferences, plus limited analytics to understand product usage. You can clear or block cookies in your browser settings; essential cookies are required for the app to function.
11. Contact
Over 40s TC — support@aileadgenerator.online
Last updated: August 2026.