DigiMark Leadfinder Privacy Notice
Effective October 20, 2026. Version 2026-10-20.
This notice covers Local Leadfinder at leadfinder.digimarkcrm.com and DigiMark Leadfinder pilot workspaces at app.digimarkcrm.com. It does not describe unrelated DigiMark services.
Who is responsible
DigiMark London, 231 Wychwood Park, London, Ontario, N6G 1S4, Canada, operates the Leadfinder service and administers the pilot. Privacy contact: Dave at dave@digimarklondon.com.
DigiMark handles account administration, support, service security and product activity information. Pilot businesses decide which prospects they research, what information they add, and any permitted subsequent use of their CRM records. Direct a request concerning a business's own collection or outreach to that business; DigiMark can help identify and route requests involving its systems.
Information and purposes
| Information | Why it is handled |
|---|---|
| Name, account email, authentication records, workspace and plan identifiers | Sign-in, access control, account administration and support |
| Pilot request answers, business details, setup preferences and agreed period dates | Assess requests, configure the workspace and provide the pilot |
| Searches, public business details, website information, discovered contact details, review notes and generated assets | Deliver user-requested research, verification, previews, audits and permitted CRM handoff |
| Last active date, counts of searches, previews, audits and publishes, remaining allowances and stored asset counts | Usage accounting, support, activation review and service protection |
| Campaign labels saved at registration and optional measurement data | Understand acquisition and advertising performance, with measurement choices described below |
| Feedback text, account identity, submission date and follow-up choice | Review private feedback and respond where requested |
| Support emails or chat messages and details voluntarily provided | Answer questions and investigate problems |
| Technical/security information such as connection, browser and error data | Operate, protect and diagnose the service and its hosting |
The owner activity view identifies individual app accounts. It is not anonymous reporting. Its activity ledger stores aggregate action counts and timestamps rather than a recording of your screen or keystrokes. Saved searches and prospect records are separate service data.
Business information may come from Google Business Profiles, public business websites, provider results or information you enter. A listing or inferred contact name can be inaccurate; review and correct it before use. Public availability is not a guarantee that every possible reuse or communication is permitted.
Do not upload passwords, payment-card data, identity documents, medical information or other sensitive personal information into prospect notes, generation prompts, feedback or support chat. Use the dedicated connection settings only when an integration credential is needed.
Service providers and data flows
The provider used depends on the feature you request and the connections configured for your account.
| Provider or destination | Service data involved |
|---|---|
| Railway | Hosting and processing of the Leadfinder app and its stored account/service data |
| Cloudflare R2 | Encrypted Leadfinder recovery archives |
| HighLevel / LeadConnector | DigiMarkCRM records, account-registration and product-milestone administration, pilot requests and support chat; selected prospect data when an applicable CRM connection is used |
| Google Places | Business-search queries and requests for listing details and images |
| Google Stitch | Business details and instructions used to generate a requested website concept |
| Outscraper | Business domains and email details needed for requested discovery or verification |
| Hunter, if configured | Domain-search data for the optional discovery fallback |
| Google Analytics and Google Ads, when allowed | Landing/registration measurement and conversion events under the browser choices below |
| Public business websites | Requests made to retrieve information for user-requested research or audits |
Account-registration and milestone information can be saved in DigiMark's administrative CRM separately from transferring a researched prospect to the customer's CRM. Private feedback remains in an owner-restricted inbox; where internal alert forwarding is configured, relevant submission details may also pass through HighLevel to the owner's inbox. This does not make feedback public or authorize marketing to the submitter.
Opening the support chat loads HighLevel's widget. Messages and details you provide there are processed for support. Do not send sensitive information or credentials; use the email support route if you do not want to use that widget.
Using AI generation sends the selected business facts and generation instructions to the AI service. Do not include confidential information. This notice does not promise that every provider has identical retention or model-training rules. Provider terms and data-use settings must be considered before supplying information.
Providers may process data outside Canada, including in the United States and other locations used by their services. The service does not promise Canadian-only residency. Contact DigiMark for information about the relevant provider arrangements.
Public assets and private records
Saved account records and private feedback are not a public directory. Authorized DigiMark administrators may access relevant information to operate and support the service.
A preview or audit you choose to publish is publicly accessible through its link. It can be copied or shared by recipients; a difficult-to-guess link is not access control. Publication does not send the link to the business. Ask Dave to review removal or correction of an asset that should not be public.
Cookies and measurement choices
Sign-in and preference storage support operation of the service. Optional landing-page analytics and advertising measurement are controlled through Measurement preferences. You can decline those options and still use the app, or change the choices later in that browser. Choices on one browser do not necessarily apply to another.
Campaign labels may also be saved with registration for internal acquisition reporting. Internal account activity and allowance records serve product administration and are distinct from optional Google measurement. Advertising measurement can include supported ad-click identifiers when allowed. The current landing measurement implementation disables advertising personalization signals.
Declining optional measurement does not cancel your pilot. Requesting a pilot or submitting feedback does not subscribe you to unrelated marketing.
Retention and ending access
Account and saved work remain available while the relevant service is provided, subject to legitimate operational and legal retention needs. Disabling access is not the same as deleting data.
For a pilot that does not continue, the process is to end complimentary CRM access, allow a 30-day restricted recovery/export window, and then manually review retention and authorized deletion. It is not an automatic purge. The original free Leadfinder account and its saved work remain separate.
Leadfinder recovery archives are configured for daily encrypted backup and 30-day object retention. Expiration processing is asynchronous. An archive may retain earlier information until it expires; active-system deletion does not instantly erase every backup. Any recovery must account for previously approved deletion requests.
These app backups do not provide a full backup of HighLevel workspaces or external provider-held information. Those systems have separate export, retention and recovery arrangements.
Support, feedback, security and administrative records are reviewed for continued need rather than retained simply because the pilot has ended. Records needed for a legal obligation or dispute may be retained separately with restricted access. Requests for deletion are assessed across the app, CRM, published assets and relevant providers; no immediate all-system deletion guarantee is made.
Security and privacy requests
The service uses access controls, encrypted integration settings and encrypted off-site app backups. No system can promise absolute security. Keep logins individual and protect your credentials.
Contact dave@digimarklondon.com to request access, correction, export, deletion, a restriction on use, or to raise a privacy concern. Identify the service and account involved, without sending a password or authentication code. We will use proportionate checks to verify identity and authority and explain any limits or further information required. A researched business or individual can also raise a correction or removal concern through this route.
We handle requests under the rules applicable to the person and information involved. Complaints can also be raised with the relevant privacy regulator, including the Office of the Privacy Commissioner of Canada where applicable.
Changes and scope
The pilot is for adults conducting business. It is not intended for children or for storing sensitive personal records.
Material changes will be explained through an appropriate service notice and any necessary choice before the changed processing begins. Publishing this notice does not constitute your acceptance of pilot terms or your permission for optional measurement or marketing. Those choices remain separate and are not inferred from silence.
These notices do not enroll you in the pilot, start billing or enable messages to your prospects.