Privacy policy

This policy describes what personal information leads2mail collects, why we collect it, who we share it with, and the choices you have. It covers both this marketing website and the leads2mail application.

Last updated: 2026-09-19

Who we are

leads2mail is operated by Stage Strategy GmbH, Görlitzer Ring 31, 23879 Mölln, Germany. Managing director: Andreas Hartwig. Register: Amtsgericht Lübeck HRB 27433 HL. VAT ID: DE462237858. Contact: info@stage-strategy.de. Full details are in our Imprint.

We are established in Germany, but the service itself runs in the United States: the application and its workers are hosted in Virginia, and the database is in the same region. Personal data you enter is therefore stored and processed in the United States. We chose that location because the companies searched for are in the United States and every request would otherwise cross the Atlantic twice.

Two different roles

This distinction matters for your rights, so we state it plainly. For our customers' account data we decide the purposes of processing — we are the “controller” / “business”. For the prospect contact data our customers process through leads2mail we act on our customer's instructions — we are the “processor” / “service provider”. Our customer decides who is contacted and what is written.

If you received an email sent through leads2mail and want your data removed, use the unsubscribe link in that email — it takes effect immediately — or contact the sender directly. You may also write to us and we will forward your request to the customer responsible.

This website

The website you are reading uses no analytics, no advertising pixels and no tracking cookies. It sets no cookies at all. Fonts are served from our own servers, not from a third-party font service. We do not build visitor profiles. Hosting processes request data, including your IP address, in order to deliver pages and for security.

The application

Account and company data

When you register we collect your username, email address and a password (stored only as a cryptographic hash — we cannot read it), together with the company data you enter: company name, contact name, physical postal address, website, and the description of your customers, your product, the problem you solve and the benefit you offer. The postal address is used in the footer of every email you send, because US law requires a valid physical address in commercial email.

Your mailbox credentials

To send from your own inbox you provide SMTP credentials, and optionally IMAP credentials so replies can be matched. Passwords are encrypted at rest; they are decrypted only in memory at the moment a connection is opened. With IMAP configured, the application reads your inbox to identify sender addresses of replies and to detect delivery failures. It opens the mailbox read-only and does not delete, move or send from it.

Prospect contact data

The application stores the business contacts you upload, import or that it finds for you: email address, name where available, company, city, and the status you assign. It records when an email was sent, when a reply arrived, and — for replies — a short note in the contact's timeline. Unsubscribes and hard bounces are stored on a suppression list so the address is never contacted again through your account.

Data we collect about businesses from public sources

When you use the lead finder or a regional campaign, the application queries a search provider and visits the public websites of the businesses found, in order to extract publicly published business contact details — typically an office email address, phone number and postal address. This is business contact information published by those businesses themselves. We do not collect private individuals' data, social network data, or anything behind a login.

AI email drafting (optional)

If AI drafting is enabled for your account and you use the email composer, the brief you enter — your target audience, your product, the problem you solve, the benefit, plus your name and company name — is transmitted to Anthropic to generate the draft. No prospect data and no mailbox contents are sent. If AI drafting is not enabled, the draft is produced locally from a template and nothing leaves our servers.

Payment data

Payments are processed by Stripe. Card details are entered on Stripe's own checkout page and never reach our servers. We store the Stripe customer and subscription identifiers, your plan, its status and the billing period, so we know what you are entitled to.

Who we share data with

We do not sell personal information and we do not share it for cross-context behavioural advertising. We use service providers, each only to run the service: hosting for this website; hosting for the application and its background workers; a managed database; Stripe for payments; a search provider for the lead finder; and Anthropic where AI drafting is enabled.

How long we keep it

Account and company data for as long as the account exists, and afterwards only where we are legally required to retain records. Prospect contact data for as long as our customer keeps it in their account. Suppression-list entries are kept indefinitely on purpose — forgetting an opt-out would mean contacting that address again.

Your rights

Depending on where you live you may have the right to access, correct, delete or port your personal data, and to object to or restrict its processing. Write to info@stage-strategy.de and we will answer. If the data concerns outreach you received from one of our customers, we will pass the request to that customer, because they decide what happens to it.