LeadCascadePrivacy policy
How LeadCascade handles your data. Last updated 5 November 2026. This policy covers the service at leadcascade.atesensoftware.com.
This policy is written to describe what the software actually does. It is not legal advice. If anything here is unclear, ask us.
Who we are
LeadCascade is operated by Samet Ateşen, trading as Atesen Software, Sakarya, Türkiye (“we”, “us”). You can reach us at support@atesensoftware.com.
What we keep, and for how long
You choose a CSV or Excel file in your browser. An Excel file’s first sheet is turned into CSV text in the browser; that CSV text is sent to our server over HTTPS to build the preview, and the file itself is not stored. What we keep is the planned rows needed for the preview and the run: contact names, e-mail addresses, lead names and company domains, as encrypted blobs.
| Data | How long |
|---|---|
| Account details. The HubSpot account (portal) ID and name, and the HubSpot user ID and e-mail address of the person who connected, received from HubSpot when you connect. | While the account is connected. Deleted within 30 days of disconnecting, or on request. |
| HubSpot tokens. The access and refresh tokens HubSpot issues when you authorise the connection. Encrypted at rest (AES-256-GCM). | Deleted the moment you disconnect the account in LeadCascade. |
| An unused preview. The rows LeadCascade would create from your mapped file, stored as encrypted blobs. A preview that is never run. | Deleted after 24 hours. |
| Run records. Once you run a preview, the same encrypted rows stay so that Undo can work, together with one row per lead: its file row number, the HubSpot IDs of the lead, contact and company, and its step and outcome. | The encrypted rows are deleted 30 days after a finished run (the Undo window), or immediately when the account is disconnected. |
| Job rows and audit log. IDs, file row numbers, outcome and reason codes and timestamps. No names and no e-mail addresses. | 12 months. |
| Billing records. Paddle customer, subscription and transaction IDs, the plan and the period. We never receive card data. | As long as the plan needs them and our legal and tax obligations require. |
| Thank-you email record. After a purchase, the purchase key (a Paddle transaction or subscription ID), whether the one email was sent, and when. Neither your address nor the message is stored. | Kept with the billing records. |
| Server logs. IDs and codes only. Never tokens, names or e-mail addresses. | See “Hosting” below. |
Cookies and trackers
The pages you are reading load no analytics trackers, no advertising service and nothing from other sites. The server sets three cookies of its own, and these are the only cookies LeadCascade sets:
| Cookie | What it is for | Lasts |
|---|---|---|
| cl_session | Keeps you signed in. Essential. | 14 days |
| cl_oauth | Carries the sign-in handshake with HubSpot from start to finish. Essential. | 10 minutes |
| cl_src | Set on your first visit only. It records the website you came from (its host name), the page you landed on and any utm_ tags in the link, so we know which guide or link brought you. It is kept as three short fields on the account. It is not set when your browser sends Do Not Track or Global Privacy Control. | 30 days |
The thank-you email
Paying happens at Paddle’s checkout, which is governed by Paddle’s own terms and privacy notice. After a purchase Paddle sends you its receipt. We may also send one plain-text thank-you and quick-start email to the address on your Paddle payment record, through Resend. We read that address from Paddle at that moment and we do not store it, or the message. The email has no tracking pixel, image or redirect link, and it is sent once per purchase.
What we do not do
We do not sell your data and we do not use it for advertising. We do not use HubSpot data to train AI or machine-learning models. HubSpot data is used only to do what you asked LeadCascade to do. The contacts, companies and leads in your HubSpot account are HubSpot’s data and are not copied; we keep only the planned rows and IDs described above.
What we ask HubSpot for
Read and write access to contacts, companies and leads, which LeadCascade uses to find the records your file names, to create the missing contacts and companies, to create the leads you confirm and, for Undo, to read them and delete the leads the run created. Read access to owners, to match the owner e-mail column. Read access to the property, pipeline and stage lists, for the column mapping. Nothing else: LeadCascade asks for no access to deals, tickets, e-mails, files or users. The permission screen HubSpot shows when you connect lists exactly what is granted, and you can remove the connection in HubSpot at any time.
Why we process it
To provide the service you signed up for (contract), to keep it secure and working (legitimate interest), and to meet our legal and tax obligations (legal obligation).
Service providers
- Cloudflare provides the hosting and the database. It processes data on our instructions.
- Paddle takes payments as seller and merchant of record, under its own terms and privacy notice.
- Resend delivers the one thank-you email described above, under its own terms and privacy notice.
- HubSpot is the source of the data. You authorise the connection, and you can remove it in HubSpot at any time.
Hosting
LeadCascade runs on Cloudflare. Like any host, it processes technical request data, such as your IP address, to deliver pages. Our own server logs hold IDs and codes only.
International transfers
Our providers may process data outside the country you are in. We rely on the contractual safeguards those providers offer.
Retention and deletion
- Disconnecting an account deletes its HubSpot tokens at once and removes its stored previews, runs and plans. Undo is no longer possible after that.
- A preview you never run is deleted after 24 hours.
- The encrypted rows of a run are deleted 30 days after a finished run. Undo is possible during those 30 days.
- The audit log and job rows are kept for 12 months, then deleted.
- Account details are deleted within 30 days of disconnecting, or on your request.
Security
HubSpot tokens and the planned rows are encrypted at rest. Everything travels over HTTPS. We ask HubSpot only for the permissions listed above. If we become aware of a breach affecting your data, we will notify you and HubSpot promptly.
Your rights
Depending on where you are (for example under the GDPR and UK GDPR, the Australian Privacy Act, the New Zealand Privacy Act, or Türkiye’s KVKK) you may ask for access to your data, correction, deletion, or a copy in a portable form. Email support@atesensoftware.com from the address on your account and we will answer within 30 days. If you are not satisfied, you may complain to your local data protection authority.
Children
LeadCascade is a business tool and is not directed at anyone under 18. We do not knowingly collect data from children.
Changes to this policy
We will post updates on this page and change the “last updated” date above. If a change is material, we will email you before it takes effect.
How to ask us something
Email support@atesensoftware.com. The support page explains what to include so that we can answer on the first reply.
Every row of your file becomes a HubSpot lead linked to its contact and company, with a result CSV, a link to each record in HubSpot and Undo for 30 days.
Who it is for: RevOps, sales ops and HubSpot consultants who move leads into HubSpot from another CRM or a spreadsheet and want each lead in the Leads workspace with its contact and company. The HubSpot account needs the Leads object (Sales Hub Professional or Enterprise).
Start free: connect HubSpotCompare plans
Free to connect and check a file. First 10 leads free, then $29 for 7 days or $49 a month, excl. VAT/sales tax.
Three steps
Connect HubSpot
You sign in on HubSpot’s own page and choose the account. LeadCascade never sees your HubSpot password.
Check the file, free
Choose a CSV or Excel file with one row per lead. LeadCascade reads your account and shows the leads, new contacts and new companies the run would create. Nothing is written yet.
Type IMPORT n
Type IMPORT and the number of leads. You get a result CSV, a link to each record in HubSpot, and Undo for 30 days.