XS Leads is operated by TJF Design LLC. This policy explains what information we collect when you use the platform, how we use it, and what choices you have.
What we collect
When you submit an access request, we collect your name, email address, company name, and the information you provide about your intended use. This is the primary data we use to review and open accounts.
When you sign in, we create a session tied to your email address. We store a session token in an HttpOnly cookie so you stay signed in across visits.
When you browse the site, our server logs standard request data: IP address, browser type, pages visited, and timestamps. We do not use third-party analytics trackers on the site at this time.
If you contact us by email, we retain that correspondence in our email system.
How we use it
We use your access request information to review your application and, if approved, to set up your account. We use your email address to communicate with you about your account, listings, and platform updates. We do not sell your personal information to third parties. We do not use your data for advertising.
Personal information in lead data
XS Leads is a marketplace for business lead data. Listings on the platform may contain personal information about individuals, such as a business contact's name, work email, or phone number, supplied by the sellers who list that data. For that information, the seller is the source and is responsible for having a lawful basis to provide it and for any required notices to the people it describes. XS Leads facilitates the listing and sale of that data and reviews listings for quality; we do not collect this information directly from the individuals it describes.
If you are an individual whose information appears in a dataset on XS Leads, you can ask us to remove it or to stop its sale. Email hello@xsleads.com with enough detail to locate the record. We act on verified removal and opt-out requests and pass them to the relevant seller.
Sellers are independent parties
Sellers on XS Leads are independent third parties, not employees or agents of XS Leads. Each seller is solely responsible for its own data collection practices and for complying with the privacy, data protection, and data broker laws that apply to it. XS Leads operates the marketplace and does not collect, compile, or verify the underlying lead data; we are not responsible for how a seller obtained, sourced, or assembled the data it lists. Any question about the origin or lawful basis of a particular dataset is ultimately a matter for the seller that listed it, though we will pass verified removal and opt-out requests to the relevant seller as described above.
Cookies
We set one first-party session cookie (xsl_auth_session) when you sign in.
It is HttpOnly, meaning it is not accessible to JavaScript on the page, and it expires
when your session ends or after a fixed inactivity period. We do not use third-party
advertising or tracking cookies.
Data retention
We retain account and access request data for up to 24 months after your last activity. You can request deletion of your account and associated data at any time by emailing hello@xsleads.com.
Your rights
You can request a copy of the personal data we hold about you, ask us to correct inaccurate data, or ask us to delete your data. To make any of these requests, email hello@xsleads.com from the address associated with your account.
If you are located in the European Economic Area, you have additional rights under the GDPR, including the right to lodge a complaint with your local supervisory authority.
Your U.S. state privacy rights
Depending on your state of residence, including California, Texas, and other states with comprehensive privacy laws, you may have the right to confirm whether we process personal information about you, access a copy of it, correct it, delete it, and opt out of its sale or sharing. These rights apply both to data we hold about you as a user and, where applicable, to personal information about you contained in lead datasets on the platform. To exercise any of these rights, email hello@xsleads.com with the subject line "Privacy Request" and enough detail for us to locate the relevant record. We will not discriminate against you for exercising these rights, and you may use an authorized agent to submit a request on your behalf.
Do Not Sell or Share My Personal Information. Because lead data on this platform may be sold, you have the right to direct us not to sell or share personal information about you. Send your request to hello@xsleads.com and we will suppress your information and, where applicable, instruct the relevant seller to do the same.
XS Leads is a marketplace platform that facilitates transactions between independent sellers and buyers; it is not a data broker. The lead data listed and sold on the marketplace is sourced, priced, and offered by independent third-party sellers, who are responsible for their own data broker registration and compliance obligations with respect to that data. We take the obligations that state data privacy laws place on the platform seriously: we honor the rights described above for all individuals whose personal information we process and, where applicable, we instruct the relevant seller to do the same.
Security
We use industry-standard practices to protect your data, including encrypted connections (HTTPS), HttpOnly session cookies, and access controls on our database. No system is perfectly secure. If you believe your account has been compromised, contact us immediately at hello@xsleads.com.
Changes to this policy
We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Material changes will be communicated to active account holders by email.
Contact
Questions about this policy? Email us at hello@xsleads.com.