Last updated: June 8, 2026
Live Map Leads ("we", "us", "our") is a self-serve tool that lets you pull lists of local businesses from Google Maps and download them or send them to your CRM. This policy explains what personal data we collect, why, who we share it with, how long we keep it, and the rights you have over it.
This service is operated by North Star Holdings Inc. ("we"), which runs LiveMapLeads.com. For any privacy question, or to exercise your rights, contact privacy@livemapleads.com.
This policy covers the personal data of our account holders and visitors. It is separate from the business-listing data you retrieve using the service. See "Lead data you extract" below, where you, not we, are the data controller.
We collect the following categories of data:
| Category | What it includes | Source |
|---|---|---|
| Account data | Your name, email address, and (for email/password sign-up) a hashed password. We never store your password in plain text. | You, at sign-up |
| Sign-in data | If you sign in with Google, we receive your Google profile (name, email, picture) and authentication tokens. If you use a magic link, we process your email to send it. | You / Google |
| Technical & session data | Session identifiers, IP address, browser/user-agent, and timestamps, used to keep you signed in and to secure your account. | Automatic |
| Usage data | Your search parameters (location, business category, filters), your extraction history (how many results were returned, credits used, timestamps), and your credit balance and credit-movement history. | You, using the service |
| Payment data | When you buy credits, your card details are entered directly with Stripe and are never seen or stored by us. We keep a record of the purchase (amount, currency, timestamp) and a reference to the Stripe transaction. | You / Stripe |
| Analytics data | Only if you accept analytics cookies: product-usage events, page views, approximate location from IP, and device information, via PostHog. Analytics are off by default until you consent. | Automatic, after consent |
| Anti-abuse data | A one-way cryptographic hash of your email address, used solely to enforce our one-time new-account credit grant and prevent abuse. It cannot be reversed to your email. | Derived at sign-up |
Some things we want to be clear we never do:
Live Map Leads lets you retrieve public business listings from Google Maps. Those results can include personal data, for example, the name or contact details of a sole trader or an individual associated with a business.
For the lead data you extract, you are the data controller and we act as your processor, on your instructions, under our Data Processing Addendum. We are not a joint controller with you. You are responsible for having a lawful basis to collect and use that data, for telling people where required how you obtained it, and for complying with all applicable laws (including the GDPR, the CCPA, and anti-spam rules) when you contact those businesses.
Before every search we show an in-app reminder about this responsibility. You can review it on the search page.
If you are an individual and you believe a business listing we returned contains your personal data, you can ask us to remove it. Email privacy@livemapleads.com and we will delete that personal data from the systems we control and add it to a suppression list, so that it is not collected or returned in future searches. Because the listing originates from Google Maps and the underlying source, we will also point you to Google so you can have it corrected or removed at the source.
Under the GDPR we rely on the following lawful bases:
Our providers may process data outside your country, including in the United States. Where data leaves the EEA or the UK, transfers are covered by Standard Contractual Clauses or an equivalent safeguard through the providers listed above.
We operate from Canada. If and when we are required to appoint a representative in the EU/EEA under Article 27 of the GDPR, or in the UK under the UK GDPR, we will appoint one and publish their name and contact details in this section. In the meantime, you can reach us about any data-protection matter, including to exercise your rights, at privacy@livemapleads.com, and you can lodge a complaint with your local data-protection authority.
| Data | Retention |
|---|---|
| Account and usage data | Kept while your account is open. Deleted when you delete your account (see "Your rights"). |
| Export files (CSV/XLSX/JSON) | Automatically deleted 90 days after they are generated. After you delete your account, any remaining export files are purged within a 30-day grace window. |
| Database point-in-time backups | Cloudflare D1 retains automatic point-in-time history for about 30 days, after which it rolls off. |
| Transactional email logs | Retained by Resend for about 30 days. |
| Source extraction datasets | The raw dataset at our data-extraction provider is retained for about 7 days, then deleted. |
| Payment records | Retained by Stripe and by us for at least six years, as required by Canadian tax and accounting law (the CRA records-retention requirement). |
| Anti-abuse email hash | Retained even after you delete your account, to prevent repeated abuse of the one-time signup credit. It is a pseudonymous one-way hash with no contact details, kept under our legitimate interest in fraud prevention. |
| Account-deletion record | A minimal, non-personal record (an opaque account identifier and timestamps) is kept to demonstrate we honoured your deletion request. |
Depending on where you live, you have rights over your personal data. We honour these regardless of location where we reasonably can.
If you are in the EU, EEA, or UK (GDPR), you have the right to access, correct, delete, restrict, or object to our processing of your data, to data portability, and to withdraw consent. You can also lodge a complaint with your local data-protection authority.
If you are in California (CCPA/CPRA), you have the right to know what we collect, to delete it, to correct it, and to opt out of the sale or sharing of personal information. We do not sell or share your personal information as those terms are defined by the CCPA, and we will not discriminate against you for exercising your rights.
If you are in Canada (PIPEDA), you have the right to access the personal information we hold about you, to challenge its accuracy and have it corrected, and to withdraw your consent at any time. You can also contact the Office of the Privacy Commissioner of Canada. Some provinces, including Quebec, British Columbia, and Alberta, provide additional rights under their own privacy laws.
You can exercise the main rights directly in the app:
We respond to rights requests within 30 days, free of charge. For complex or numerous requests we may extend this by up to a further two months, and we will tell you within the first 30 days if we need to.
You can export your data and delete your account anytime from your account settings (you'll need to be signed in). To make any other request, contact privacy@livemapleads.com.
Live Map Leads is a business tool and is not directed to children. We do not knowingly collect data from anyone under 18. If you believe a minor has given us data, contact us and we will delete it.
We protect your data with encryption in transit, hashed passwords, scoped access controls, and a security-hardened hosting platform. No system is perfectly secure, but we take reasonable measures to protect your information.
If a personal-data breach occurs that is likely to affect you, we will notify you and the relevant supervisory authority without undue delay, and within the timeframes required by applicable law, for example, within 72 hours of becoming aware, under the GDPR.
We may update this policy from time to time. If we make a material change, we will update the date above and notify you by email.
Questions about this policy or your data? Contact us at privacy@livemapleads.com.