Privacy policy
Last updated 3 November 2026 · Aman Chauhan, trading as Next In Marketing, India
The short version. Save This Lead reads a post when you click Save, and checks posts against your own keywords as you scroll. It does not read your feed otherwise, does not touch your messages, and does not act on your behalf. What you type — notes, labels, remarks — is visible only to you and your teammates, never to other customers.
Who we are
Save This Lead is operated by Aman Chauhan, trading as Next In Marketing, A-307, KP Epitome, Makarba, Ahmedabad 380051, Gujarat, India. For anything in this policy, write to privacy@savethislead.com.
What the extension reads, and when
| Trigger | What is read | Where it goes |
|---|---|---|
| You click Save on a post | The post's public text, author name and handle, its URL, image URLs, and whether it has video | Our database, in your workspace |
| A post matches one of your keywords while you scroll | The same public fields | Our database, recorded as a keyword match |
| You right-click Save to Save This Lead on a page, a selection or a link (any website, including AI chats such as ChatGPT or Claude) | That page's URL, title and description, the text you selected, or the link you clicked. Nothing else on the page, and only at that click | Our database, in your workspace |
| You open the side panel or dashboard | Nothing from the page | — |
At no other moment does the extension read page content. The Save button runs only
on x.com, twitter.com, youtube.com,
linkedin.com, instagram.com, reddit.com,
facebook.com and tiktok.com, which is enforced by the
permissions Chrome shows you at install and which we cannot widen without your browser
asking you again. On any other website the extension reads nothing unless you
right-click one of its menu items, and then only the page you clicked on.
What it never touches
- Direct messages, private accounts, or anything behind a follow request.
- Your browsing history, or other tabs. Other websites are read only when you right-click Save on them.
- Passwords, payment details, or anything in your browser's autofill.
The extension never posts, likes, follows, replies, messages or scrolls on your behalf. It has no ability to do so.
Account information
When you sign up we store your email address, your name if your identity provider gives us one, and which workspace you belong to. If you sign in with Google we receive your email address and basic profile from Google and nothing else — we do not request access to your Gmail, Drive, contacts or calendar.
Passwords, when you use one, are handled by our authentication provider and are hashed. We never see them and cannot recover them.
Public posts and the shared pool
Posts you save are public content that was already visible to anyone on the platform. We keep one copy of each post and its analysis in a shared pool, so the same post is not analysed repeatedly for different customers.
Your relationship to a post is not shared. Your labels, notes, remarks, CRM status and the fact that you saved something stay inside your workspace. Other customers cannot see them, and a change of plan cannot expose them. Leads you type in by hand never enter the shared pool at all.
Who else processes your data
| Processor | What for | What they receive |
|---|---|---|
| Supabase | Database, authentication, server functions | Everything stored, hosted in India (Mumbai) |
| Cloudflare | Hosting this website and dashboard | Standard request data: IP address, browser, pages requested |
| Groq | Classifying a post into a company record, and company profiles you request | The public text of a post, or a company name and text from its public web pages. No account information, no notes |
| Dodo Payments | Taking payment, as merchant of record | Your billing details, directly. We never see or store your card |
| Resend | Sending the emails you turn on (weekly brief, scheduled exports) | Your email address and the content of that email |
| PostHog (US) | Product analytics, error reports and session recordings, so we can fix what breaks | Pages opened, clicks, errors and your account id. Recordings mask every input, and all text in the dashboard. Cookies only after you accept |
| Google Analytics (US) | Counting visits and extension downloads on the public website. Not loaded in the dashboard | Pages opened, the site you came from, approximate location and device type. Cookies only after you accept. Advertising features are off |
| Sign-in, if you choose it | Standard OAuth: your email and basic profile |
We do not sell your data, do not share it for advertising, and do not use anything in your workspace to train models.
Google sign-in. We use the email address and basic profile Google gives us only to create and sign in to your account. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
The browser extension. It reads a post only when you save it or when it matches a keyword you set, and sends that post to your workspace. It does not read your browsing history, pages on other sites, or your messages, and it does not sell or transfer that data except to run the features described here.
How long we keep it
- Your saved leads and notes — until you delete them or your workspace.
- Public posts and their analysis — indefinitely; it is public material.
- Activity records (sign-ins, opens, for your own workspace's admins) — 90 days.
- Contacts our research found (not ones you typed in) — deleted after 12 months if nobody in the workspace has worked them. Each one records where it came from.
- If you are a person someone saved as a contact — email support@savethislead.com and we remove you from every workspace and block you from being added again.
- Your account — until you ask us to delete it.
Your plan's history window controls what you can see, not how long we keep it. Downgrading hides older rows; it does not destroy them, and upgrading brings them back.
Your rights, and how to use them
Under India's Digital Personal Data Protection Act and, where it applies to you, the GDPR, you can ask us to show you what we hold, correct it, delete it, or hand it over in a portable form.
Deleting everything: email privacy@savethislead.com from your account address. We delete your workspace, your leads, your notes and your account within 30 days and confirm when it is done. Public posts already in the shared pool are not deleted, because they are public material that does not identify you — nothing linking them to you survives.
Exporting: CSV export is available in the dashboard on paid plans. On the free plan, ask us and we will send it.
If you think we have handled your data badly, tell us first — we would rather fix it. You also have the right to complain to the Data Protection Board of India, or your local supervisory authority in the EU.
Security
Every workspace is separated in the database itself, by row-level rules that apply to every query regardless of what the application asks for. Data is encrypted in transit and at rest. Access to production is limited to people who need it.
No system is perfect. If we discover a breach affecting your data, we will tell you and the relevant authority without undue delay, and within 72 hours where the law requires it.
Children
Save This Lead is a business tool and is not directed at anyone under 18. We do not knowingly collect data from children.
Changes
If we change this policy in a way that affects you, we will email you before it takes effect. The date at the top always reflects the current version.