Privacy Policy
Last updated: 25 October 2026
1. WHO WE ARE
LeedForce is the trade name of Chekh NDIEGUENE, Entrepreneur individuel (micro-entreprise) registered in France, SIREN 109 474 668, 22 Avenue du vingt quatre avril 1915, 13012 Marseille, France ("LeedForce", "we", "us"). We help dental practices in the United States attract and book new patients through advertising, lead follow-up and AI phone assistance.
Privacy contact: [email protected]
General contact: [email protected]
Because we are established in France, the EU General Data Protection Regulation (GDPR) and French data protection law apply to how we handle personal data, wherever you live. Where US federal or state law gives you additional rights or protections, we follow those too.
2. WHAT THIS POLICY COVERS
This policy explains how we handle personal data when we decide how and why it is used (as a "controller"), in particular when you:
- visit leedforce.co or our booking pages;
- fill in a form, book a call or contact us;
- call our demo line or speak with our AI assistant;
- receive business outreach from us as a dental practice or a member of its staff;
- become a client, or work for one.
When we provide services to a dental practice, we also handle data about that practice's patients and prospective patients on the practice's behalf. Section 10 explains this. For that data, the practice's own privacy policy applies first.
3. DATA WE COLLECT
3.1 Data you give us
Name, business name, job title, business email, phone number, practice address, website, your answers to form questions (for example, the treatments your practice offers, team size and goals), your messages, and the date and time of any call you book. Clients also give us billing contact details and the information we need to set up the services. Card payments are processed by our payment providers. We do not store full card numbers.
3.2 Business information from public sources
For dental practices we may contact, we collect professional information that the practice publishes or that is publicly available: practice name, business email, business phone number, address, website, opening hours, treatments advertised, and public ratings and review counts. Our sources include practice websites, Google business listings and public professional directories. We may use automated tools, including AI tools, to sort and classify this public business information (for example, to identify which treatments a practice advertises). We do not use these tools to make decisions that have legal or similarly significant effects on anyone.
3.3 Calls
When you call our demo line or speak with our AI assistant, the call is answered by an AI voice assistant, which tells you so at the start. These calls may be recorded and transcribed, and we keep a summary and the outcome of the call. You can ask for the call not to be recorded.
We may also call a practice's public phone number ourselves to understand how incoming calls are handled. We do not record those calls. We may note what happened, for example whether the call was answered.
3.4 Emails and messages
The content of our exchanges, their date and time, and any unsubscribe or objection requests. We do not use open-tracking pixels in our outreach emails.
3.5 Technical data
When you visit our website, our hosting provider automatically processes technical data such as your IP address, browser and device type, pages visited, and the date and time of your visit, to deliver and secure the website.
3.6 Advertising platforms
If you respond to one of our ads through a Meta (Facebook or Instagram) lead form, Meta sends us the information you enter in that form.
We do not seek to collect sensitive information, such as health information, about you as a business contact. Please do not send us patients' health information except through the secure channels we agree with you as a client.
4. WHY WE USE YOUR DATA AND OUR LEGAL BASES
- To answer your requests, run the calls you book and send you proposals. Legal basis: steps taken at your request before entering into a contract (GDPR art. 6(1)(b)).
- To contact dental practices about our services (business-to-business prospecting). Legal basis: our legitimate interest in developing our business (art. 6(1)(f)). You can object at any time, and we will stop.
- To provide our services to clients, invoice them and collect payment. Legal basis: performance of our contract (art. 6(1)(b)).
- To keep accounting and tax records and respond to authorities. Legal basis: legal obligation (art. 6(1)(c)).
- To call or text you where you asked us to or agreed to it. Legal basis: your consent where required (art. 6(1)(a)), and, for text messages and automated or AI-voice calls, the consent required by US law.
- To record and transcribe calls with our AI assistant. Legal basis: our legitimate interest in providing our services, checking their quality and keeping an accurate record of what was said; and, where the law of your location requires it, your consent, which you give by continuing the call after being told it is recorded.
- To secure our systems, prevent fraud and establish or defend legal claims. Legal basis: our legitimate interest.
- To keep a list of people who asked us not to contact them, so that we never contact them again. Legal basis: legal obligation and legitimate interest.
5. TEXT MESSAGES AND PHONE CALLS
- We only send you text messages, or call you using automated technology or an AI or prerecorded voice, if you gave us your phone number and agreed to be contacted that way, or where the law otherwise allows it.
- Message frequency varies. Message and data rates may apply. Reply STOP at any time to stop receiving messages, or HELP for help. You can also opt out by telling our assistant during a call, or by writing to [email protected].
- We honor opt-out requests promptly, and always within the time required by law.
- No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. We share data only with service providers, such as our phone and messaging provider, strictly to provide the service.
- We only call or text at the times allowed by law in the recipient's time zone.
6. WHO WE SHARE DATA WITH
We never sell personal data, and we do not share it for cross-context behavioral advertising. We share it only with:
- Service providers that process it for us under contract:
- website hosting, CRM, calendars, phone and text messaging (HighLevel);
- business email (Google Workspace);
- email sending (Smartlead) and email address verification (for example, Reoon);
- AI voice assistant and call transcription (Retell AI and the AI model providers it relies on);
- AI tools we use to analyze business information and draft content;
- advertising and lead forms (Meta Platforms);
- payments and invoicing (Stripe, Whop);
- business information sources (Google Maps Platform);
- internal workspace and notes (for example, Notion).
- Our clients: if you are a patient or prospective patient of a practice we work for, your data goes to that practice (see section 10).
- Professional advisers, such as our accountant, lawyer or insurer, who are bound by confidentiality.
- Authorities, courts or other parties when the law requires it, or to establish, exercise or defend legal claims.
- A buyer or successor if our business is transferred, for example to a company we create to continue it, under the same protections.
7. INTERNATIONAL TRANSFERS
We are based in France, and many of our service providers are in the United States. When personal data is transferred outside the European Economic Area, we rely on the EU-US Data Privacy Framework for certified providers, or on the European Commission's Standard Contractual Clauses, together with additional safeguards where needed. You can ask us for more information.
8. HOW LONG WE KEEP DATA
- Business prospects: up to 3 years after our last contact with you, unless you object sooner.
- Leads and booked calls that do not become clients: 3 years after our last contact.
- Client data: for the duration of our relationship, then 5 years (the general period for bringing legal claims).
- Invoices and accounting records: 10 years, as French law requires.
- Records of consent to calls and text messages: 5 years after the consent was last relied on, so we can prove it.
- Recordings of calls with our demo line or AI assistant: 90 days. Transcripts and summaries: as long as the related lead or client record.
- Do-not-contact list: as long as needed to respect your request. We keep only the minimum information needed to do so.
- Technical logs: up to 12 months.
9. YOUR RIGHTS
9.1 Everyone
Wherever you live, you can ask us to access your data, correct it, delete it, restrict or object to its use (including objecting at any time to prospecting), or send you a copy in a portable format. You can withdraw your consent at any time, without affecting processing done before. Under French law, you can also give instructions about what happens to your data after your death.
9.2 United States residents
Depending on your state (for example California, Colorado, Connecticut, Virginia, Texas, Oregon and others), you may have the right to know what personal information we hold about you, to access, correct or delete it and get a copy of it, to opt out of its sale, of its use for targeted advertising or of profiling, and to appeal our decision on your request. We extend these rights to all US residents, whether or not your state's law applies to us.
We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use it for profiling that produces legal or similarly significant effects. We treat Global Privacy Control signals as a valid opt-out request. We will not discriminate against you for exercising your rights. You may use an authorized agent. We may ask for proof of their authorization and verify your identity.
9.3 How to exercise your rights
Email [email protected]. We may ask for information to verify your identity. We reply within one month under the GDPR and within 45 days under US state laws. Where the law allows us to extend these periods, we will tell you. If we refuse your request, you can appeal by replying to our decision with the word "Appeal", and we will answer within the time required by law.
9.4 Complaints
You can complain to the French data protection authority, the CNIL (www.cnil.fr), or to the data protection authority in your country. If you live in the United States, you can also contact your state attorney general.
10. DATA WE PROCESS FOR DENTAL PRACTICES (PATIENTS AND PROSPECTIVE PATIENTS)
When a dental practice uses our services, we may process, on its behalf and under its instructions, data about people who respond to its ads, call it or book an appointment with it. This can include name, phone number, email, the treatment they are interested in, appointment details, and recordings, transcripts and summaries of calls with the practice's AI assistant.
- The practice is responsible for this data. It is the "controller" and, where HIPAA applies, the "covered entity". We act as its service provider and processor and, where HIPAA applies, its business associate.
- We use this data only to provide services to that practice. We never use it to market our own services, never sell it, and never use it to train AI models.
- Where HIPAA applies, we handle protected health information only under a business associate agreement with the practice, and only through service providers that have agreed to equivalent obligations.
- The AI assistants we operate for practices identify themselves as AI at the start of each call and tell callers when calls are recorded.
- If you are a patient or prospective patient, please send privacy requests to the practice. If you contact us instead, we will pass your request to the practice and help it respond.
- If you live in a state with a consumer health data law (for example Washington or Nevada), the practice's own notices apply to its consumer health data. We process that data only as the practice's processor.
- We do not use geofencing around health care facilities to identify, track or target people seeking care.
11. COOKIES AND SIMILAR TECHNOLOGIES
Our website currently uses only cookies and similar technologies that are strictly necessary to run and secure it and to operate our booking tools. We do not currently use advertising or analytics cookies or tracking pixels on our website. If we add them, we will update this policy and, where required, ask for your consent first. You can also block cookies in your browser settings.
12. SECURITY
We use reputable providers, restricted access, two-factor authentication on our accounts and access limited to what each person needs. No method of transmission or storage is completely secure. If a security incident affects your data, we will notify you and the authorities where the law requires it.
13. CHILDREN
Our website and services are intended for businesses and adults. We do not knowingly collect personal data from children under 16 for our own purposes. When we operate services for a practice, any data about minors is processed only on the practice's instructions.
14. AI AND AUTOMATED DECISIONS
We use AI tools to answer calls, transcribe and summarize conversations, and classify public business information. We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you. You can always ask to speak with a person.
15. CHANGES TO THIS POLICY
We may update this policy. We will post the new version on this page with a new "Last updated" date and, for important changes, notify our clients by email.
16. CONTACT
LeedForce - Chekh NDIEGUENE, EI
22 Avenue du vingt quatre avril 1915, 13012 Marseille, France
