How is my data protected in Legiit Leads?
Your data is encrypted while it travels between your browser and Legiit Leads, your password is stored as a hash rather than as readable text, and access to the database is restricted. Card details never reach Legiit Leads at all, because payments run through Stripe.
What is in place
- Encryption in transit. Everything moving between your browser and Legiit Leads is encrypted.
- Hashed passwords. Your password is stored as a hash. Nobody at Legiit can read it back.
- Restricted database access. Access to the stored data is limited.
- No card numbers. Stripe handles the payment itself. Legiit Leads stores only your subscription status and your plan, never your card number.
Credentials you connect
The mailbox password you enter for Outreach Autopilot, and the Twilio account SID and auth token you enter for call tracking, are stored encrypted and used only to operate the features you connected them to. For the detail on how they are sealed and how to disconnect them, see are my mailbox password and Twilio keys stored securely.
If there is ever a breach
No system is perfectly secure, and the Privacy Policy says so under 6. Security. If Legiit Leads learns of a breach affecting your data, you will be notified as required by law.
If you are in the EEA or the UK, you also have the right to lodge a complaint with your local supervisory authority. That right is listed in the GDPR Statement at /gdpr, alongside your rights of access, correction, deletion, restriction and portability.
If you think someone else has got into your account, do not wait for a notification. Change your password straight away and follow these steps.
Still stuck?
A real person on the Legiit team will help. No bots, no runaround.
Contact Supporthelp@legiit.com