Security at Leadwidey
Your trust is our most important asset.
Here’s how we protect your data.
Our “Zero-Risk” Philosophy
Our entire platform was built on a “Zero-Risk” and “Privacy-First” philosophy. Our biggest promise to you is this: We never scan your inbox.
Unlike many CRMs or sales tools that require full, invasive access to your Gmail or Outlook inbox just to function, Leadwidey does not require this access. We do not parse, scan, or read your private emails. Your “Widey Score” is generated only from the click data on the tracking links you choose to create.
Application & Data Security
We ensure your data is protected at every layer of our application.
Organization-Level Isolation: Your data is not just mixed in with everyone else’s. Our database architecture is built on a strict “Organization” model. This means your leads, campaigns, and scores (A4) are kept in a silo, completely isolated from other organizations using the platform.
End-to-End Encryption (SSL) Your connection to both our marketing site (leadwidey.com) and our app (app.leadwidey.com) is fully encrypted using 256-bit SSL (HTTPS). This ensures that no data can be intercepted between your browser and our servers.
Login & Form Protection (Turnstile) Our login.html and signup.html pages are protected by Cloudflare Turnstile, a modern, privacy-first CAPTCHA alternative. This protects your account from bot-based “brute force” attacks without forcing you or your team to solve annoying puzzles.
Infrastructure & Network Security
Our infrastructure is built on world-class, trusted platforms to ensure reliability and protection.
Network Protection by Cloudflare All traffic to our application (app.leadwidey.com) and marketing site (leadwidey.com) is proxied through Cloudflare’s enterprise-grade network. This automatically filters malicious traffic, mitigates DDoS attacks, and protects our origin server IP addresses from being exposed.
Core Application Hosting Our secure Django application and API run on DigitalOcean, a leading cloud infrastructure provider known for its high performance and security standards.
Managed Database: Your lead data is stored in a DigitalOcean Managed PostgreSQL Cluster. This means your data isn’t just in a simple file; it’s managed by DigitalOcean experts with automated backups, high availability, and encrypted storage.
Payment Security
We are 100% PCI compliant.
We Never Store Your Credit Card When you enter your payment information on our payment.html page, your details are sent directly to our payment processor. Your sensitive credit card number never touches or gets stored on our servers. This is the most secure method possible.
Compliance
GDPR Ready Our “Zero-Risk” and “No Inbox Scanning” philosophy was designed from the ground up to align with modern privacy laws like GDPR and KVKK. As our customer, you act as the “Data Controller” for your leads, and we act as your secure “Data Processor.” You can read more in our full Privacy Policy.