1. Who we are
Leadomino is operated by 3DMA Ltd. (3DMA OOD), a company registered in Bulgaria, European Union (“3DMA”, “we”, “us”). We are the controller for the personal data described in this policy, except where we act as a processor for our customers (see section 5). Contact: [email protected].
2. Whose data this covers
- Website visitors of leadomino.com.
- Waitlist sign-ups and people who contact us.
- Customers and their users of the Leadomino app.
- Business contacts (“recipients”) found on the public web and emailed by our customers.
3. What we collect
Website visitors
Basic technical data our hosting provider needs to serve the site and keep it secure, such as IP address, browser type and the country of the request. We don't use advertising or analytics cookies, and our fonts are served from our own domain.
Waitlist and contact forms
Your work email, company website, the niche you want to reach, your role, and anything you write in a message.
Customers
Account details (name, work email, job title, company, postal address, website, phone if given, time zone), your email signature, campaign settings, approved leads and the emails sent, replies, and usage and security logs. We don't store payment card numbers; payments, once live, are handled by our payment provider.
Recipients
For companies that match a customer's campaign: company name, website, the business email address published on that website (for example info@ or partners@), country and language, a fit score, the emails sent and any reply, and opt-out status. We collect this from publicly available company websites and search results. We don't buy lists and we don't target personal or consumer email addresses.
4. Why we use it and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Running the website and keeping it secure | Legitimate interest, Art. 6(1)(f) |
| Waitlist emails about early access | Consent, Art. 6(1)(a). Withdraw any time. |
| Answering your messages | Legitimate interest, or steps before a contract, Art. 6(1)(b) |
| Providing the Leadomino service to customers | Contract, Art. 6(1)(b) |
| Finding companies and sending relevant B2B emails on customers' behalf | Legitimate interest of the customer and of 3DMA in B2B prospecting, Art. 6(1)(f), together with national e-marketing rules |
| Keeping a do-not-contact list so opted-out people are never emailed | Legal obligation and legitimate interest, Art. 6(1)(c) and (f) |
| Accounting, tax and legal claims | Legal obligation, Art. 6(1)(c) |
Where we rely on legitimate interest for recipients, we have balanced it against your rights: we only use business contact details that companies publish themselves, every email shows who sent it and why, opting out takes one click, and countries that require prior consent for B2B email are blocked by default.
5. Controller and processor roles
Each customer decides who to contact, what to say and when, and is a controller for its campaigns. 3DMA processes campaign data on the customer's behalf under our data processing agreement. 3DMA is an independent controller for finding public business contact data and for the global do-not-contact list.
6. Who we share data with
We never sell personal data. We share it only with the service providers below, who process it for us under contract, with authorities when the law requires it, or with a buyer if our business is sold (you'll be told first).
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare, Inc. | Website hosting, DNS, website forms and waitlist storage | Global network, USA |
| OVH US LLC (OVHcloud) | Application hosting and database | USA |
| Anthropic, PBC | AI that writes emails and scores leads | USA |
| Serper (serper.dev) | Web search used to find companies | USA |
| Resend, Inc. | Login links and service emails | USA |
| Reamaze (GoDaddy) | Sending campaign emails and receiving replies | USA |
| Telegram | Internal alerts to our team (sign-ups, contact and opt-out requests) | Global |
7. International transfers
Some providers, including our application host, are located in the United States. Transfers out of the European Economic Area rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses, with extra safeguards where needed. Ask us for a copy at [email protected].
8. How long we keep data
- Waitlist: until launch plus 12 months, or until you ask us to delete it.
- Contact messages: up to 24 months.
- Customer accounts: while the account is active, then up to 90 days; invoices for the period required by tax law (usually 10 years in Bulgaria).
- Recipient data: up to 12 months after the last campaign that used it.
- Do-not-contact entries: as long as needed to keep honouring your opt-out. We keep only the email or domain for this.
9. Your rights
You can ask to access, correct, delete or export your data, restrict or object to its use (including any use for direct marketing, which we will always stop), and withdraw consent. Email [email protected], or opt out of all Leadomino emails at leadomino.com/opt-out. We reply within one month. You can also complain to your local data protection authority or to the Bulgarian Commission for Personal Data Protection (cpdp.bg).
10. Security
We use encryption in transit, hashed login sessions with no passwords, least-privilege access, hardened containers, monitoring and regular backups. No system is perfectly secure; if a breach affects your data we will tell you and the authorities as the law requires.
11. Children
Leadomino is a business service and is not meant for anyone under 18.
12. Changes
We'll update this page when things change and show the date at the top. For important changes we'll also tell customers by email.