Built with security at the foundation.

All customer and business data stored in LeadFixes is encrypted at rest using AES-256 encryption. Data is logically isolated per workspace — your data is never commingled with another customer's data. We do not sell or share your data with third parties for advertising purposes.

LeadFixes accounts are protected with secure password hashing (bcrypt), session management, and optional two-factor authentication. Suspicious login activity triggers automatic alerts. Sessions expire after periods of inactivity.

Role-based access controls allow workspace owners to manage what each team member can see and do. Sensitive actions require elevated permissions. All access changes are logged in the activity audit trail.

All data transmitted between your browser, our servers, and third-party integrations is encrypted using TLS 1.2 or higher. We enforce HTTPS across all endpoints and reject unencrypted connections.

Database backups are performed regularly and retained for recovery purposes. We maintain redundant infrastructure to minimize downtime. Backup restoration procedures are tested periodically.

LeadFixes is hosted on cloud infrastructure with physical security controls, network firewalls, and intrusion detection. Our infrastructure providers maintain their own security certifications. We apply security patches and updates on a regular schedule.

Conversation data processed by LeadFixes AI is used solely to generate responses for your leads. We do not use your customer conversation data to train shared AI models. AI instructions and business context you configure remain private to your workspace.

SMS and email communications sent through LeadFixes comply with applicable carrier and provider requirements. We maintain audit logs of all outbound communications. Opt-out requests are processed promptly and honored across all sequences.

We maintain an incident response plan for security events. In the event of a data breach affecting your account, we will notify affected customers in accordance with applicable law. Security concerns can be reported directly to our team.

LeadFixes is designed to be used in compliance with TCPA and applicable SMS regulations. Businesses using LeadFixes are responsible for obtaining appropriate consent from their leads before initiating SMS communications. All sequences include opt-out handling — any lead who replies STOP is immediately removed from all active sequences.