Security & data practices

Data sources

Company records come from the official Companies House public register, published under the Open Government Licence. Contact details are researched from public web pages such as a company's own website, contact pages, about pages and public business directories. We do not scrape private data or bypass access controls.

No bulk email sending

CompaniesHouseLeads.com does not send emails on your behalf. We generate outreach drafts that you copy or export, then send from your own email account. This means replies come directly to you and your existing sender reputation is preserved.

Payments

All payments are processed by Stripe. We never store your full card details on our servers. Subscription status is synced from Stripe via signed webhooks, and you can manage or cancel your plan at any time through the billing page or Stripe Customer Portal.

Account security

• Authentication is handled by Supabase Auth with secure session management.
• Database rows are protected by Row Level Security (RLS) so users only see their own data.
• AI credit balances and billing status are enforced server-side and cannot be edited from the browser.
• All server functions run in a secure edge environment with no direct database secrets exposed to clients.

Retention & deletion

Your leads, campaigns and generated emails are stored only as long as your account exists. You can delete individual leads or your entire account from the Settings page at any time. Deleted data is removed from the active database immediately and is not used to train AI models.

GDPR & lawful basis

CompaniesHouseLeads.com processes business contact details from public sources. You are the data controller for any outreach you conduct, and you should ensure you have a lawful basis — typically legitimate interests for B2B contacts — and honour opt-outs. For more detail, see our Privacy Policy.