Politique de confidentialité

TRD Leads is a lead tracking platform operated by The Run Digital, a company based in Quebec, Canada (“we”, “us”). Businesses that work with our agency (“clients”) use it to collect the enquiries they receive from their website forms and ads, follow up on them, and book visits. This policy explains what personal information we handle, why, and what rights you have.

1. Who is responsible

Account data (the people who sign in to TRD Leads) and Google data (section 4): The Run Digital is responsible.

Lead data (the people who contact one of our clients): the client business that collected the enquiry is responsible for it. We process it on that client’s behalf and on its instructions, as its service provider. If you contacted a business and want to exercise your rights, you can write to that business or to us, and we will pass your request on.

Our person in charge of the protection of personal information can be reached at [email protected].

2. What we collect

Users of the platform

• Name, email address, workspace membership and role, language preference.
• A password hash, if you set a password (we never store the password itself).
• Records of actions you take, such as status changes, notes and bookings, with the author and time, so that your team can see who did what.

Leads

• What the person submitted through the client’s form or ad: typically name, phone, email, address, and any other fields the client’s form asks for.
• The source (website, Facebook Lead Ads, manual entry) and the campaign, if provided.
• Follow-up information the client’s staff add: status, notes, tags, follow-ups and visit bookings.
• A record of the emails sent to the lead on the client’s behalf (booking confirmations and reminders, only if the client turned them on) and of any unsubscribe.

Technical data

Server logs (IP address, request time, path) kept for security and troubleshooting. We use only the cookies needed to run the service: the sign-in session, your language preference, and a short-lived security cookie during a connection to Google or Facebook. We use no analytics, advertising or tracking cookies.

3. Why we use it

• To provide the service: show leads to the client, let its staff work on them, and book visits.
• To send the emails the service is for: sign-in links, invitations, new-lead alerts to staff, and the customer emails a client has turned on.
• To let the agency monitor how quickly leads are handled, which is the service our clients pay for.
• To secure the service, prevent abuse, and meet legal obligations.

We do not sell personal information, use it for advertising, or use it to train artificial intelligence models.

4. Google user data

A workspace owner can choose to connect a Google account so that visit bookings appear in Google Calendar. This is optional and only an owner can turn it on.

What we access

• Your Google account email address (scopes openid, email), to show which account is connected.
• Calendars created by TRD Leads (scope calendar.app.created). When you connect, we create one calendar named “TRD Leads – your workspace” and only ever read or write that calendar. We cannot see your other calendars or their events.

How we use it

We write one event per visit booking into that calendar (lead name, phone number, visit time, location, the booking note, and a link back to the lead) and update or remove it when the booking changes or is cancelled. Sync is one-way: we do not read the content of events back from Google.

How we store and protect it

We store your Google account email, the identifier of the calendar we created, and an OAuth refresh token. The token is encrypted at rest (AES-256-GCM) on our servers in Germany and is never shown to anyone, including our staff, in the interface.

Sharing

We do not share Google user data with anyone. It is used only to provide the calendar sync to the workspace that connected it.

Retention and deletion

When an owner disconnects Google Calendar in Settings → Integrations, we revoke the token with Google and delete it, together with the stored email and calendar identifier, immediately. The calendar and its events stay in your Google account, where you can delete them. You can also revoke our access at any time from your Google account permissions; syncing then stops.

5. Service providers

We share personal information only with the providers we need to run the service:

• Hetzner Online (Germany): hosting of the application and database.
• Resend (United States): delivery of emails.
• Cloudflare: domain name service (no content passes through it).
• Google (United States): Calendar sync, only for workspaces that connect it.
• Meta: receiving Facebook Lead Ads submissions, only for clients that connect a Facebook Page.

Because of this, personal information may be stored or processed outside Quebec and Canada, mainly in Germany and the United States. We have assessed these transfers and rely on contractual commitments from these providers to protect the information. We may also disclose information when the law requires it.

6. How long we keep it

• Lead data is kept while the client uses the service, or until the client deletes the lead. Deletion is permanent and also removes the lead’s notes, bookings and history.
• When a client leaves, their data is deleted within 90 days unless they ask for an export first.
• User accounts are kept while you belong to a workspace.
• Records of emails sent are kept as long as the related lead, so we can show what was sent and honour unsubscribes.

7. Security

Data travels over HTTPS only. Each client’s data is isolated from every other client’s. Third-party tokens are encrypted at rest, passwords are hashed, and access to production systems is restricted to the staff who operate them.

8. Your rights

Under Quebec’s Act respecting the protection of personal information in the private sector, you can ask to access the personal information we hold about you, to correct it, to receive it in a structured technological format, and to withdraw your consent. Write to [email protected]; we reply within 30 days. If you are not satisfied with our answer, you can file a complaint with the Commission d’accès à l’information du Québec.

If you received an email from one of our clients, the unsubscribe link in it stops further emails from that business.

9. Changes

We will update the date at the top of this page when this policy changes, and notify workspace owners by email of any significant change.