Back to LeadIntel AI
Toolscase LeadIntel AI icon

Privacy Policy

Toolscase LeadIntel AI

Last Updated: August 19, 2026 · Effective Date: August 19, 2026

1. Overview & Commitment

Toolscase LeadIntel AI ("we," "us," or "our") is a browser extension developed by Toolscase for sales professionals, marketers, recruiters, and growth teams to inspect publicly available B2B company data, discover verified contact information, evaluate website technology stacks, and receive AI-assisted prospect scores.

We believe in complete transparency and strict data minimization. This Privacy Policy details the exact types of data we collect, how that data is handled, where and how long it is stored, how it is protected, our strict third-party sharing policies, and your legal rights.

2. Data Collection & Processing

We collect and process only the minimum amount of data required to deliver core functionality:

1. Website & Domain Context Data

When you explicitly initiate a domain analysis via the side panel, popup, or context menu, the active tab domain, page title, meta description, and DOM contact elements (emails in mailto: links, phone numbers in tel: links, and social links) are processed to extract tech stack signals and verified lead information. We do not passively record your web browsing history.

2. User Account & Authentication Information

When you sign in using Google Sign-In or your Toolscase account, we process your email address, name, profile picture (if provided), and an encrypted authentication token. This data is used solely to authenticate your identity and manage your daily scan limits.

3. Local Scan History & Extension Preferences

Your recent domain scan history, saved companies, custom export settings, and UI preferences (such as theme and active view) are stored locally on your device via chrome.storage.local.

4. Usage Metrics & Quota Logs

We log aggregate daily usage counts (e.g. number of scans performed per day) associated with your user ID to prevent abuse and enforce daily plan limits.

3. How We Use and Handle Your Data

All data handled by LeadIntel AI is processed strictly for the following operational purposes:

  • Deliver On-Demand B2B Intelligence: Analyzing public webpage headers, metadata, and tech signatures to generate prospect scores and firmographic profiles.
  • User Authentication & Quota Management: Verifying your account credentials and tracking daily usage to manage plan allowances.
  • Sales Outreach Generation: Synthesizing detected tech stacks and company attributes into customizable sales pitch drafts.
  • Service Reliability & Abuse Prevention: Monitoring server health and preventing automated abuse of our API infrastructure.

4. Data Storage, Retention & Deletion

Local Browser Storage (chrome.storage.local)

Authentication tokens, recent domain scan results, saved companies, and user preferences are stored directly on your local device. This data remains on your machine and can be cleared at any time directly through the extension's UI or by uninstalling the extension.

Ephemeral Server-Side Processing

When you trigger a scan, the target domain analysis is processed in-memory in transit and transmitted back to your extension over encrypted TLS. We do not maintain a permanent database of pages you visit.

Account Data Retention & Deletion

Your account profile (email address and subscription quota state) is retained only for the duration of your active Toolscase account. You can request immediate and permanent deletion of your account and all associated records by contacting privacy@toolscase.com.

5. Data Sharing & Third-Party Disclosure

Strict No-Sale & No-Monetization Policy

We NEVER sell, rent, monetize, or trade your personal information or browsing data to third parties. We do not provide user data to data brokers, advertising networks, or third-party marketing services.

We transfer data only to trusted service providers strictly necessary to operate the service under binding confidentiality agreements:

Toolscase API Gateway & Auth Server
Purpose: Authentication verification, daily quota enforcement, and orchestrating domain intelligence queries.
Data Disclosed: Target domain name, user authentication token.
Google OAuth / Google Sign-In
Purpose: Secure identity verification and user sign-in.
Data Disclosed: OAuth credential token (id_token) during login.
AI Intelligence Processing (Google Gemini / Anthropic)
Purpose: Generating personalized prospect summaries, qualification reasoning, and custom sales outreach pitches.
Data Disclosed: Public domain context, industry, and detected tech stack. Personal user data is NEVER shared or used to train public AI models.
Public Domain Registries & Ranking APIs (Tranco, Cloudflare Radar, RDAP)
Purpose: Retrieving public domain registration age, traffic rank, and TLS certificate expiry.
Data Disclosed: Target public domain name only.

6. Chrome Extension Permissions Justification

In accordance with Google Chrome Web Store Developer Policies, every requested permission is mapped directly to a core user-facing capability:

activeTab

Allows LeadIntel AI to read the active website URL and inspect DOM contact elements ONLY when you explicitly trigger a scan or open the side panel.

storage

Required to store your authentication session, scan history, preferences, and daily usage state locally in your browser (chrome.storage.local).

sidePanel

Enables LeadIntel AI to present rich prospect scoring, tech stack cards, and verified email summaries alongside your active browser tab.

contextMenus

Adds convenient right-click shortcuts on links and tabs so you can launch LeadIntel AI analysis directly from any webpage.

host_permissions (<all_urls>)

Allows the extension to communicate with the Toolscase secure API gateways (api.toolscase.com) and analyze target public B2B business domains requested by the user.

7. Security & Encryption Standards

We implement industry-standard administrative, physical, and technical safeguards to protect your information:

  • Encryption in Transit: All communication between the extension and backend API servers is encrypted using modern TLS 1.3 / HTTPS protocols.
  • Token Security: User authentication tokens are securely hashed and stored only in sandboxed extension storage.
  • No Remote Code Execution: The extension is 100% self-contained and complies strictly with Manifest V3 policies against remotely hosted code.

8. Your Privacy Rights (GDPR / CCPA / Global)

Depending on your jurisdiction, you have the following rights regarding your personal data:

  • Right to Access & Portability: You may request a copy of the personal information we hold about you.
  • Right to Deletion: You may request the permanent deletion of your account and associated usage data.
  • Right to Rectification: You may update or correct your account information at any time.
  • Right to Opt-Out: You may discontinue use and clear all local extension data at any time.

9. Contact Information & Inquiries

If you have any questions, privacy inquiries, data deletion requests, or security reports, please contact our Data Protection team directly:

Entity: Toolscase
Privacy & Data Requests: privacy@toolscase.com
General Support: support@toolscase.com