Security

Data Encryption and Communications

API Security and Access Controls

Access Controls and Employee Security

• Limited employee access to user data on a need-to-know basis
• Multi-factor authentication required for administrative access
• Regular review and removal of unnecessary access permissions
• Secure development practices and code review processes
• Employee training on data protection and security practices

Infrastructure Security

Public Data Collection

It's important to understand that PlexLead collects only publicly available business information:

• Business names, addresses, and phone numbers from Google Places API
• Website URLs and publicly visible contact information
• Business descriptions and categories from public listings
• No personal data, private information, or sensitive business data
• No tracking of individual users or personal browsing behavior

Security Limitations and Disclaimers

While we implement reasonable security measures, we cannot guarantee absolute security. Users should be aware that:

• No system is completely immune to security breaches
• Internet communications inherently carry some risk
• The data we collect is already publicly available from other sources
• We are not responsible for the security of external websites or services
• Users are responsible for maintaining the security of their own accounts and passwords

User Responsibilities

You play an important role in maintaining the security of your account:

• Use strong, unique passwords for your PlexLead account
• Keep your login credentials confidential
• Log out of your account when using shared or public computers
• Be responsible for how you use and share the business data you access
• Ensure your own email security, as we may send account-related communications
• Report any suspicious account activity immediately

Data Breach Response

In the event of a security incident affecting user accounts or platform integrity:

• We will assess and contain the situation promptly
• Affected users will be notified within a reasonable timeframe
• We will provide guidance on protective actions users should take
• Necessary remediation measures will be implemented
• We will review and improve our security practices based on lessons learned

Third-Party Services

Our platform integrates with external services for data collection:

• Google Places API for business listings and location data
• Website scraping of publicly accessible business websites
• These services have their own security and privacy practices
• We are not responsible for the security practices of third-party services