Lead Mojo
Free audit

Privacy policy

Last updated 22 September 2026.

This policy explains what information Lead Mojo (“the app”, “we”) collects, how it is used, how it is protected, and the choices you have. It covers (a) people who sign in to the app to manage their advertising (“account users”) and (b) people who visit landing pages published through the app or submit an enquiry on them (“visitors”). Contact: leadmojo.co@gmail.com.

1. Information from your Google account

When you choose “Connect Google Ads”, you sign in with Google and grant these permissions:

  • Google Ads (https://www.googleapis.com/auth/adwords) — to list the Google Ads accounts you can access, read campaign, keyword, search-term and conversion reporting, create campaigns (always created paused), and make changes you approve.
  • Data Manager (https://www.googleapis.com/auth/datamanager) — to send conversion events (such as “qualified lead” or “won job”, with the Google click identifier, time and value) to your Google Ads account.
  • Email address and basic sign-in (openid, email) — to show which Google account is connected.

We receive an OAuth access token and refresh token from Google. Tokens are encrypted (AES-256-GCM) before being stored, are kept only on the server, and are never shown in the browser or written to logs. We store copies of Google Ads reporting data (for example daily spend, clicks and conversions per campaign) so we can show trends and explain recommendations.

2. Google API Services User Data Policy (Limited Use)

Lead Mojo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, Google user data is used only to provide and improve the user-facing features described above for the user who connected it; it is not sold, not used for advertising to you, not used to build unrelated profiles, and not transferred to others except as needed to provide those features, to comply with law, or with your explicit consent. People do not read your Google data except with your permission, for security purposes, or as required by law.

3. Information you give us

  • Your app login: name, email address and a password (stored only as a one-way hash).
  • Business information you enter or confirm: services, locations, budgets, goals, phone and email for receiving leads.
  • Your website address. The app reads the public pages of that website to suggest a business profile. Each extracted fact keeps a link to its source page so you can check and correct it.
  • If you contact us or request early access on our website: the name, email, phone, business details and message you send. We use these only to reply to you and to set up your account if you go ahead, and we store a one-way hash of your IP address for spam prevention.

4. Information about landing page visitors

When someone submits an enquiry form on a landing page published through the app, we store what they entered (typically name, email, phone, suburb and message), the page they used, the time, and advertising attribution such as the Google click identifier (gclid, gbraid or wbraid) and UTM parameters. We also record basic page events (page view, form start, form submission, phone-button tap) without names or contact details, using a random session identifier. We store a one-way hash of the visitor's IP address for spam prevention, not the address itself.

The business that owns the landing page is responsible for how it contacts people who send enquiries. If the page has advertising measurement enabled, the Google tag may be loaded and Google may set cookies as described in How Google uses information from sites that use its services. Where consent is required, measurement only runs after the visitor accepts.

5. How information is used

  • To provide the app: show reporting, draft campaign proposals, create approved campaigns, publish landing pages, deliver enquiries to the business, and report conversions to Google Ads.
  • To generate suggestions with AI. Business profile text, keyword data and aggregated campaign metrics may be sent to an AI model provider (via our hosting platform, Floot) to draft ad copy, landing page copy and recommendations. We do not include visitors' names, emails or phone numbers in AI requests.
  • To keep the service secure and working, including an audit log of every change made to Google Ads.

6. Sharing

We don't sell personal information. We share it only with: Google (when calling Google APIs on your behalf); our hosting and infrastructure provider Floot and its sub-processors (database, email delivery, AI model access), who process data only to run the app; and authorities where legally required.

7. Storage, security and retention

Data is stored in a managed database with access restricted by workspace, so one business's data isn't visible to another. OAuth tokens are encrypted. We keep account and business data while your account is active. Enquiries are kept until the business deletes them or closes its account. Google Ads reporting snapshots are kept for up to 25 months. When you disconnect Google Ads, we revoke the token with Google and delete it from our database.

8. Your choices and rights

  • Disconnect Google Ads at any time in Settings, or remove access at myaccount.google.com/permissions. Disconnecting does not pause campaigns already running in Google Ads.
  • Delete individual enquiries from the Leads inbox, or ask us to delete all data for your account.
  • Visitors who submitted an enquiry can ask the business, or us at the address below, to access, correct or delete their information.

We handle personal information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth). You may complain to us first, and then to the Office of the Australian Information Commissioner (oaic.gov.au).

9. Changes and contact

We'll update this page when our practices change and revise the date above. Questions or requests: leadmojo.co@gmail.com.