Security and privacy
How we protect your information.
LeadBlocker reads some of the most private parts of an athlete's life. These are the rules it is built on, in plain words. They describe how the product works today, not plans.
You approve what goes out
Every message LeadBlocker writes is a draft. You read it in full and approve, edit or cancel it. Nothing is sent until you say yes.
Right before anything is sent, LeadBlocker checks again that it is still you, that the draft has not changed, and that it is going only to the people you saw listed.
If you approve the same routine follow-up often enough, LeadBlocker may suggest a rule. It cannot switch a rule on. Only you can, after confirming it is you, and one switch pauses everything.
Your assistant sees only what you grant
You can invite one assistant. They sign in as themselves, never as you.
A new assistant sees nothing. You turn on each permission one at a time, and you can turn it off again.
Anything you mark Only you stays with you. No permission gives your assistant access to it.
Your assistant cannot change their own permissions, cannot recover your account, and cannot remove your sign-in protection. What they do is recorded separately from what you do.
Two-step sign-in is required
A password alone does not open a LeadBlocker account. You and your assistant each confirm a second step when you sign in.
Sensitive changes ask you to confirm again, even if you are already signed in: changing who can see what, switching on a rule, or exporting your information.
If you lose your device, a person on our side verifies who you are before anything is reset. There are no security questions.
Your information is yours alone
Every record belongs to one account. The database itself enforces that, row by row, so a mistake in our code cannot show one person's information to another.
We test for exactly that automatically, as part of every release.
What it knows, and what it only thinks
LeadBlocker keeps what you told it separate from what it read for itself, and shows you which is which.
Its own reading never quietly becomes fact. It stays a reading until you confirm it, and it is never the basis for chasing somebody on your behalf.
Connected accounts
You connect each permission separately: reading email, reading your calendar, sending as you, and moving meetings you organise. Each has its own consent.
You can disconnect at any time and delete the email LeadBlocker has synced.
The keys to your connected accounts are encrypted and never reach a browser.
Messages are information, not instructions
An email that says "forward this to everyone" is treated as something a person wrote, not as a command. What other people send you cannot tell LeadBlocker what to do.
WhatsApp, honestly
When you use LeadBlocker in WhatsApp, its answers travel through Meta and stay in your chat history, like any other WhatsApp message. We tell you that before you connect your number, and we prove the number is yours first.
What we keep out of our logs
The content of your email, documents and WhatsApp messages is not written to our logs.
What we do not claim
LeadBlocker does not hold a security certification yet. When it does, it will be listed here. Until then we would rather tell you how it works than show you a badge.
