Security and GDPR

All your data (requests, knowledge base, team members, exchange history) is hosted within the European Union, without exception.

Database: Supabase (PostgreSQL), AWS infrastructure, eu-west-1 region (Ireland).

Application server: VPS located in Frankfurt, Germany.

Inbound and outbound e-mail: Resend, AWS infrastructure, eu-west-1 region (Ireland).

No data is hosted or replicated outside the EU as part of the normal operation of the service.

Leadento is a multi-tenant service: each client's data is isolated at the database level itself (PostgreSQL Row Level Security), not only at the application level. One institution can never technically access another institution's data, regardless of the action taken.

Leadento team access (technical support) is restricted to a small list of authorized accounts, and any access to a client account for support purposes is logged and time-limited.

Reply drafting and classification are performed via the Google Gemini API, used under a billed Google Cloud account (not the free consumer tier).

Under this contractual arrangement, Google explicitly guarantees that data sent via the API (your e-mails, your knowledge base) is never used to train its public AI models, nor shared with other customers.

Your data is only used to generate the requested reply, for your institution only.

All communications are encrypted in transit (HTTPS/TLS). Data at rest is encrypted by our database host.

Access to the platform requires authentication (password), and each institution only ever sees its own data by design (see section 2).

Sensitive credentials and technical keys (database access, AI, e-mail sending) are never exposed to the browser nor stored in the source code.

To provide the service, we rely on the following subprocessors, all committed to GDPR compliance: Supabase (database, EU), Hostinger (application server, EU), Resend (e-mail sending/receiving, EU), and Google Cloud (AI processing, under contractual guarantee of no data reuse, see section 3).

Under GDPR, you have the right to access, rectify, erase, and export your data, as well as the right to object to its processing. To exercise these rights, write to us at contact@leadento.com — we respond within a reasonable timeframe in line with regulatory requirements.

If you cancel your subscription, your data is deleted or can be exported to you on request, under terms agreed with our team.

For any question regarding the security or protection of your data, contact IMHS LABS LLC (30 N Gould St STE N, Sheridan, WY 82801, USA) at contact@leadento.com.