Privacy policy
Last updated Nov 7, 2026.
closurelead is run by Helios One Oy ("we"). Mail: 3075 Clay St, San Francisco, CA 94115. Email: hello@closurelead.com. This policy covers closurelead.com, the closurelead app and the emails we send.
In short
| What we keep | Why | How long |
|---|---|---|
| Your email, your territory, and what you type into our forms | To show you findings for your territory and email them to you. To run your trial and account, and to answer you. | While you have an account, or until you ask us to delete it |
| A detailed record of how you use the site and app, including session replays of what you type | To see what works, fix what doesn't, and tell real visitors from bots. | Replays 30 days; analytics events up to 7 years |
| Email alerts about your requests, and email you send us, in our inbox | So each sign-up, download, call request, wrong-record note and feedback reaches Touko Ursin, co-founder, who can answer it. | No set limit; deleted when you ask |
We don't sell any of it. The details are below.
What you give us
- Your email address, for example when you download a list or answer the offer we show when you are about to leave a page. Giving it there also starts a free trial.
- The territory you check or watch: a ZIP, city or address, and a radius.
- What you type into our forms, such as a call request (name, company, phone, a time), a note about a wrong record, or feedback.
- A screenshot of the page, if you attach one to feedback in the app.
- The email addresses of teammates you invite.
- Payment details, once card payment is switched on. They will go straight to Stripe, and we will never see your card number.
What we record when you use the site and app
- Pages you view, clicks, scrolling, form submissions and errors.
- Session replays: a recording of what happened on the page, including what you type into forms. Password fields and fields we mark as secret are masked. Replays also keep the page's console messages and network requests, with their headers and bodies.
- Your browser, device, IP address and approximate location. We use these to run the service and to tell people from bots.
- Where you came from: campaign tags in the link (such as utm_source), ad click ids and the referring site, for your first visit and your latest one.
If your browser blocks our analytics script, the site sends its events (such as page views, call requests and trial clicks) to our own server instead, without a replay.
Cookies
| Name | What it's for | Kept for |
|---|---|---|
cl_gidclosurelead | A random visitor id, so a trial you start keeps the territory you checked as a guest. Also kept in local storage. | 1 year |
cl_ftclosurelead | First touch: the first campaign link or referring site that brought you here, and the page you landed on. | 1 year |
cl_ltclosurelead | Last touch: the latest campaign link or referring site, updated on each visit that has one. | 90 days |
ph_<key>_posthogPostHog, through our domain | PostHog analytics id and session, used for analytics and session replay. | 1 year |
cl_xoclosurelead site and app | Remembers that we showed you our offer when you were about to leave the page, so it never shows twice. Also kept in local storage. | 1 year |
cl_botclosurelead app | Our server's guess whether this browser is a bot, read from the request, so bot visits are tagged in analytics. | 1 day |
Browser storage
The site and app also keep keys in your browser's local storage (kept until you clear it) or session storage (gone when the tab closes).
Every browser storage key we use
| Key | What it's for | Kept for |
|---|---|---|
cl_gidSite and app, local | Copy of the visitor id cookie. | Until you clear it |
cl_last_tSite, local | The last territory you checked on the site (what you typed, the radius and the result count), so the offer can name it. | Until you clear it |
cl_capSite, local | Notes that you already gave us your email, so we don't ask again. | Until you clear it |
cl_trialSite, session | Notes that you clicked "Start free trial" in this tab, so the offer stays away. | Until the tab closes |
cl_work_emailApp, local | The email you gave to download a list, so the field is filled in next time. | Until you clear it |
cl_last_demoApp, local | The last territory you looked at as a guest, carried into your account when you sign up. | Until you clear it |
cl_capture_queueApp, local | Download requests that didn't reach our server yet (with the email you gave), retried for up to 7 days. | Until sent, at most 7 days |
cl_trial_claimedApp, local | Notes that this browser started or found a trial at the download form (with that email and territory), so the app offers your weekly list instead of "Start free trial". | Until you clear it |
cl_gate_codeApp, session | The email the sign-in step after a download sent a code to, and when, so reloading the page doesn't send another code. | Until the tab closes |
cl_auth_pendingApp, local | Which sign-in method you just used, read once after sign-in. | Read once; ignored after 30 minutes |
__convexAuthJWT…, __convexAuthRefreshToken…App, local | Your sign-in session. | Until you sign out |
cl_invite_tokenApp, session | The invite link you opened, until you finish signing in. | Until the tab closes |
cl_unsub_tokenApp, session | The token from an unsubscribe link, moved out of the address bar. | Until the tab closes |
cl_billing_banner_dismissedApp, session | Hides the trial banner after you close it. | Until the tab closes |
cl_chunk_reload_atApp, session | Stops a reload loop after we ship an update. | Until the tab closes |
cl_xo_allow_automationApp, local (read only) | Only read, never set by us in your browser: our automated tests set it so their test browser still sees the offer shown when you are about to leave. | Not set |
ph_…PostHog, local and session | PostHog's copy of its analytics id and session, and its replay buffer. | Until you clear it |
When a link takes you from our site to the app and the two can't share cookies, the link carries your visitor id, your analytics ids and where you came from (campaign tags, and your first and latest referring site). The app removes the ids and the referring-site details from the address bar. Campaign tags (utm_* and ad click ids) stay in the address, where analytics and session replay can record them.
Who processes it for us
- Fly.io: hosting, in Virginia, USA.
- Convex: our database, in its US East region.
- PostHog: analytics and session replay, on its EU cloud.
- Resend: email delivery.
- Google Workspace: our company email inbox. When you sign up, download a list, ask for a call, report a wrong record or send feedback, an alert with the details arrives there, such as your email, territory, IP address and where you came from, and for a call request your name, company, phone and note. So does any email you send us.
- Forward Email: passes email you send to hello@closurelead.com on to that inbox.
- Stripe: payments, once card payment is switched on.
Fly.io and Convex keep your data in the United States, and PostHog in the European Union. Resend and Google store it in data centers they choose.
What we don't do
- We don't sell your data.
- We don't tell anyone which territory you watch.
- We share data only with the processors above, or when the law requires it.
Your choices
- Ask for a copy of your data, a correction, or deletion: email hello@closurelead.com from the address you use with us. There is no self-serve tool yet: each request goes to Touko Ursin, co-founder, we carry it out in our database, in PostHog and in our email, and confirm by email when it is done.
- Unsubscribe from any feed or onboarding email with the link at its bottom.
- Block cookies or analytics in your browser. The site still works.
The records in the feed
The feed lists businesses from public government records. Individual (personal) bankruptcy cases are dropped from the feed and never shown; only business debtors are listed. The raw court feeds we keep, so we can check a row against what the court published, still contain them. The WARN lists the states publish give a count of employees affected, never names. The only person a row can name is one the record names in their job, such as the trustee when a bankruptcy docket shows one. A business's legal name can include a person's name, such as a dental practice named for its dentist.
Changes
When this policy changes, we update the date at the top.
Contact
Helios One Oy, 3075 Clay St, San Francisco, CA 94115. hello@closurelead.com, which goes to Touko Ursin, co-founder (about us).