What we send and what we never send

Read this before you connect anything. It is short and it is the honest version.

What leaves LeadBind

When you connect an assistant, information from your account is sent to that assistant's provider so it can answer you. Depending on what you ask, that includes:

• Your leads' names, phone numbers, and email addresses
• Appointment details: who, when, what for
• Call outcomes: connected, booked, no answer, voicemail, how long it lasted
• Your own account settings: your hours, your pipeline stages

That provider handles it under its terms and its privacy policy, not ours. We do not choose it. We are not paid by it. We cannot see what it does with it.

What never leaves

This list is enforced in our code, not just left out of the tool list. Any response is filtered on the way out, and a blocked field is logged as a bug on our side.

• Call recordings. No audio, no links to audio.
• Call transcripts. Not partial, not summarized.
• Payment details. Card numbers are not in our system at all; Stripe holds them.
• Any other account's data. Every tool is scoped to the account that owns the key.

Why recordings specifically. Recording consent rules vary by state, and some require every party on the call to agree. The person who called your business consented to you recording it, under whatever disclosure you gave them. They did not consent to an AI vendor holding their words. That is not a risk we are willing to hand you quietly, so we removed the ability to take it.

Who is responsible for what

Plainly, because this is the part that matters if anything goes wrong.

You are responsible for choosing the provider. Creating a key and connecting a tool is your decision and your instruction to us. If the people in your account are your customers, you are responsible for having the right to share their information with the provider you picked, and for whatever notice or consent your own agreements and applicable privacy laws require.

We are responsible for the boundaries. Scoping every tool to your account, keeping permissions separate, blocking recordings and transcripts, showing you this disclosure before a key exists, and letting you revoke instantly.

If you operate under a privacy law with a subprocessor concept, such as CCPA or GDPR, the assistant's provider is a subprocessor of your customers' data once you connect it. Your own privacy policy may need to say so. We cannot make that call for you.

Reducing what you share

If you want the convenience with less exposure:

• Use read-only keys unless you specifically need booking. Most of the value is in reading.
• Leave dial off. It is off by default. Turn it on only if you have a reason.
• Ask narrow questions. "What's on my calendar Thursday?" sends less than "show me all my leads."
• Use one key per place. Then revoking your laptop does not break your phone.
• Revoke what you are not using. Every key is listed on the AI Access page with when it was last used. A key that has never been used is a key you can delete.

How to verify any of this

Fair question, and you should not take our word for it.

• Your assistant will tell you what it called. Most apps show each tool call and its result. Look at one.
• Every key shows its last-used time. If a key you forgot about is being used, revoke it.
• The claims here are in our Terms and Privacy Policy. Those are contract, not marketing. If we exposed a transcript through this, those pages would be false.

Turning it off

Go to Account → AI Access and revoke the key. It stops working immediately, everywhere.

Revoked keys stay listed rather than disappearing, so you keep a record of what that key could do and when it was last used. That is exactly what you want if you ever think one leaked.

Questions we did not answer here: support@leadbind.org.