Privacy policy

Who decides what

For members, JUPILLE GROUP LTD is the data controller: we decide what is collected to run your account.

For subscribers, the controller is the creator whose page you signed up on: they decide what they ask for and what they do with it. Sublead stores and delivers that data for them, on their instructions, as a processor. To exercise your rights over that data, write first to the creator; we help them answer, and you can also write to us.

What we collect from members

• Account details: your email address, your first and last name, and the themes you create about, asked at sign-up.
• Your space: its name, its picture, its address, and your settings.
• Your content: your lead magnets, their texts, images and files, and their settings.
• Connections: the keys or authorizations of the emailing tools you connect (Systeme.io, ClickFunnels), kept on our servers and never sent back to your browser, and the AI clients you connect to your account (MCP).
• Usage: your sign-ins and the actions needed to run the service.

What we collect from subscribers

• The first name and email address you enter on an opt-in page, and the date you agreed to receive the creator's emails.
• The lead magnet you signed up for, and when.
• A count of page views, without any personal identifier, to show creators how their pages perform.

When the creator has connected an emailing tool, your first name and email address are sent to it, with the tag they chose. From then on, that tool's own privacy policy applies.

When the creator has set up emails after the sign-up (Pro), we send them on the creator's behalf, through Resend, to subscribers who gave their consent. Each one carries a link that stops them at once, for every lead magnet of that creator.

Why we use it

• To create and run your account, publish your pages and deliver lead magnets to their subscribers (performance of the contract).
• To send sign-in codes and service emails (performance of the contract).
• To keep the service secure, prevent abuse and answer reports (legitimate interest, legal obligations).
• To understand how Sublead is used and improve it (legitimate interest).
• To send members news about Sublead, only if they agreed to it. You can unsubscribe at any time.

Who processes it for us

• Vercel Inc. (USA): hosting of the website and of the published pages.
• Convex, Inc. (USA): database and file storage.
• Resend (USA): sending of sign-in and service emails, and of the emails creators send after a sign-up.
• Whop, Inc. (USA): payments for Pro. Your card details go to Whop and never reach us.
• The emailing tools a creator connects (Systeme.io, ClickFunnels): only for that creator's subscribers, on their instruction.

We never sell personal data. These providers only process it on our instructions. Some of them are located in the United States: transfers rely on appropriate safeguards, such as the European Commission's standard contractual clauses.

When you connect ChatGPT, Claude or another AI client to your account, what it reads and writes is processed by its provider under its own privacy policy.

How long we keep it

• Member accounts and their content: as long as the account is open. A deleted account is erased within 30 days, except what the law makes us keep.
• Subscriber data: as long as the creator keeps it in their account. A creator can delete a contact at any time; contacts go with the lead magnet or the account they belong to.
• Sign-in codes: a few minutes.
• Cookies: 13 months at most.

Cookies

Sublead uses only the cookies it needs to work: the one that keeps you signed in and the one that remembers your language. We use no advertising cookie ourselves. A creator on Pro may add Google Analytics or Meta Pixel to their own published pages: those load only after the visitor accepts them in a banner on that page, and their data goes to the creator's accounts with Google or Meta, under those companies' policies. Your browser also stores a few display preferences (theme, folders unfolded) on your own device. You can block or delete cookies in your browser settings; staying signed in will then stop working.

Your rights

You can access, correct, delete or export your data, object to or restrict its use, and withdraw your consent at any time. Members can change most of it themselves in Settings. Otherwise, email info@sublead.io from the address linked to your account, or from the address you signed up with. We answer within one month.

You can also lodge a complaint with the Data Protection Office of Mauritius, or with the data protection authority of your country (for example the CNIL in France).

Changes

We may update this policy. The date at the top of the page shows the latest version.