Privacy policy

1. Who we are

NurtureLead is run by 4 The Boss LLC, doing business as NurtureLead. In this policy, "we" and "us" mean 4 The Boss LLC, and "you" means the person or business that opens an account or uses this website.

2. What this policy covers

This policy covers the website at nurturelead.app and the NurtureLead web app. It says what we collect, why we collect it, who else handles it and how long we keep it. The Terms set out the rules for using the service.

3. Your account

To open an account you give your name, your email address and a password, or you continue with Google. We use these to log you in and to write to you about your account. If you continue with Google, Google tells us your name, your email address, whether Google has verified that address, and an identifier for your Google account. We never receive your Google password.

On Team and Enterprise, each person you invite has their own login and a role: owner, admin or member.

We send you alerts when an account needs you: LinkedIn asks for a verification code, an account is signed out, a reply is waiting, or the AI reply allowance is used. Alerts appear in the app, arrive by email and, if you allow them, show as browser notifications. We do not send text messages.

4. Payment

Plans are paid by card, in US dollars. Payments are processed by Stripe, which also works out any tax that applies where you are. We keep a record of your plan, your billing period and what you have paid, so that we can give you the service you paid for. Your card number is typed on Stripe's own page and never reaches our servers. We see the card's brand and last four digits, and we keep an identifier Stripe gives us for the card so that the one free trial per card rule can be applied.

There is one free trial per card and per LinkedIn account, so we keep a record of which cards and which LinkedIn accounts have had one.

5. The LinkedIn accounts you connect

Each LinkedIn account you connect runs in a browser on our servers. You sign in to LinkedIn once, through a sign-in window inside the app, and that browser stays signed in so the account can do the work you set up. What you type in the sign-in window goes to LinkedIn's own sign-in page in that browser. We do not store your LinkedIn password. The browser keeps LinkedIn's sign-in cookies, as any browser does, and that is what keeps the account signed in. We also keep a one-way fingerprint of which LinkedIn account it is, so that the one free trial per LinkedIn account rule can be applied.

To run your outreach we store what it produces: the people your searches find, the workflows you build, your conversations with those people, the actions taken on your account and the goals reached. For each person we store what LinkedIn shows your account about them: their name, headline, company, location, profile address and how you are connected, and an email address where their LinkedIn contact details show one or your uploaded list gives one. We use this to run your workflows, fill your inbox and build your reports.

We notice whether an account is a Sales Navigator or Recruiter account, because the daily limits are different for those. If LinkedIn asks for a security check or a verification code, the account waits and we alert you.

6. Email and calendar

If you use email steps, you connect your own Gmail or Outlook mailbox. Emails are sent from that mailbox. With Outlook, and with Gmail when it is connected with permission to read, replies to those emails arrive in your NurtureLead inbox next to your LinkedIn replies; when Gmail is connected for sending only, replies stay in Gmail. We look only at replies in conversations that began with an email sent through NurtureLead, and not at the rest of your mailbox. The access you give us is stored encrypted, and disconnecting the mailbox deletes it.

The email addresses we send to come from the contact details your LinkedIn connections show and from lists you upload. Every email ends with an unsubscribe link and your business postal address, which you give us for that purpose. When someone unsubscribes we keep their address, so that they are never emailed again from that workspace.

A goal can be counted as reached when a tracked link is opened or a booking is confirmed through Calendly, Cal.com or a Google Calendar appointment page, so we record those events. Confirmed calls are added to your Google Calendar if you connect it; otherwise an invite file is sent by email. With Google Calendar connected we add those calls, read the list of your calendars so you can choose one, and look at new events to see whether one of the people in your account booked a time. The access is stored encrypted, and disconnecting the calendar deletes it.

7. AI replies

If you use AI replies, they are written by an AI model from OpenAI. To write a reply we send the model the whole conversation with that person, the running notes on where the conversation stands, and what you have given the AI to work with: your goal, your playbooks, your knowledge base and your voice samples. OpenAI handles that text under the terms of its API: it is not used to train OpenAI's models, and OpenAI keeps it for up to 30 days to watch for abuse unless the law requires longer.

8. This website, the contact form and support

When you send the contact form we keep your name, your email address, the topic, your message and the internet address (IP address) it came from. We use them to reply to you and to stop the form being abused.

If you write to support@nurturelead.app, or the help assistant in the app hands your question over to email, we keep that correspondence so that we can answer you.

The site remembers your choice of light or dark theme in your browser. Logging in sets a cookie that keeps you logged in. The site loads its fonts from Google Fonts, so your browser asks Google for them when a page opens. We do not use advertising or analytics trackers.

9. Who else handles your data

We use other companies to run parts of the service. Each one handles only what its part needs.

• Stripe: card payments and tax.
• OpenAI: writing AI replies.
• Google: Continue with Google, Google Calendar, Gmail if that is the mailbox you connect, and the site's fonts.
• Microsoft: Outlook, if that is the mailbox you connect.
• Hetzner: the servers the service runs on.
• The mail service that hosts support@nurturelead.app, which carries the emails we send you ourselves: password resets, invitations and alerts.

The actions you set up go out through your own LinkedIn account, so LinkedIn sees them as it sees anything else you do there.

10. Where your data is held

The service runs on servers rented from Hetzner in Europe (Germany or Finland). 4 The Boss LLC is in the United States, and the companies listed above may handle data in other countries. Your data is stored in Europe. It is handled in the United States when we give you support, and by the companies listed above wherever they operate, under their own terms.

11. How long we keep it

While you have a plan, we keep your data so that the service can run. After cancellation we keep it for 90 days, then delete it.

Messages sent through the contact form, and questions sent to support from the help centre, are kept until you ask us to delete them. Billing records are kept for 7 years.

12. Who at NurtureLead can see your account

To give support, we can open a customer's account and see what that customer sees. Every such visit is recorded. To run the service we also see each customer's plan, usage and costs, and the health and error log of each connected LinkedIn account.

13. The people you contact

NurtureLead holds information about the people you reach out to: what your searches found about them on LinkedIn, your conversations with them and, if you email them, their email address. You decide who to contact and why, and you are responsible for the lists you upload and the messages you send.

If you are someone who was contacted through NurtureLead, the unsubscribe link in any email stops further emails from that sender's workspace. To ask what a customer's account holds about you, or to have it deleted, write to support@nurturelead.app: we pass the request to the customer whose account it is and delete what we hold for them when they tell us to or the law requires it.

14. Agencies and their clients

On Enterprise, an agency can run NurtureLead for its clients under its own logo, name, colours and web address. Each client's data is kept in its own workspace, separate from every other client's. The agency is our customer: it decides who can log in, and its clients see the agency's name, not ours.

15. Your choices

You can export your people, conversations, actions and conversions as spreadsheets, and you can cancel your plan at any time. To ask what we hold about you, or to have it corrected or deleted, write to support@nurturelead.app. We answer within 30 days. If the law where you live gives you further rights over your personal data, as it does in the European Union, the United Kingdom and California, you can use them the same way. We do not sell personal data.

16. Changes to this policy

This policy takes effect on October 1, 2026. When it changes, the new version is posted on this page with its new effective date.

17. Contact

Questions about this policy go to support@nurturelead.app.