Terms of service

Terms.

Short version

This is the agreement between you (the business that uses Lead Source) and us. It says what we do, what you do, and how we both behave when something goes wrong.

Most of it is standard SaaS terms. The bits worth reading carefully are your obligations as a website operator (you’re responsible for getting consent from your visitors), the limitation of liability, and the indemnity. The rest is housekeeping.

1. Who this is between

These terms form a legally binding agreement between you (“you,” “your,” the “customer”) and Leftleads Pty Ltd trading as Lead Source, ABN [CONFIRM], registered in Victoria, Australia (“Lead Source,” “we,” “us,” “our”).

If you’re entering into this agreement on behalf of a company or organisation, you confirm that you have authority to do so, and “you” refers to that organisation.

By creating an account at app.leadsource.co, installing our tracking script, or otherwise using the service, you agree to these terms. If you don’t agree, don’t use the service.

2. The service

Lead Source is software that:

  • (a) Attribution. Captures form-submission metadata on websites you install our tracking script on and attributes each submission to a marketing source where possible.
  • (b) Outbound sending (on tiers that support it). Connects to a mailbox you authorise via OAuth and sends outbound email messages from that mailbox to your leads on your behalf — including, on the AI tier, messages drafted by an AI sub-processor that reads inbound replies and generates further messages directed toward a goal you configure (for example, booking a meeting).
  • (c) Reporting. Presents the results of (a) and (b) to you in our application and via notification emails.

Together, (a)–(c) are the “service.”

What we provide as part of the service is described on leadsource.co and in our application. We may add, change, or remove features over time. If we materially reduce a feature you rely on, we’ll give reasonable notice. AI-tier features may be subject to additional terms presented in-product at activation; see section 11.

3. Account terms

  • You must be at least 18 years old and have capacity to enter into this agreement.
  • You must provide accurate signup information and keep it current.
  • One account per legal entity, unless we agree otherwise.
  • You’re responsible for everything that happens under your account, including the actions of users you authorise.
  • Keep your credentials secure. Tell us promptly if you think your account has been accessed without authorisation.
  • You may not let anyone else use your account, share credentials publicly, or sell access to your account.

4. Your obligations as a website operator

This is the most important section in these terms. Read it carefully.

When you install the Lead Source tracking script on a website, you are the data controller for the data we capture on your behalf, and we are your data processor. That means the legal responsibility for the lawful capture and use of your visitors’ data sits with you, not us.

You warrant and agree that:

  • You own the websites you install the script on, or you have explicit authority from the owner to install it.
  • Your privacy notice on each website discloses, in plain language, that you use Lead Source (or a tool like it) to capture form-submission metadata for marketing-attribution purposes.
  • Where applicable law requires consent for capturing the kind of data Lead Source captures (for example, ePrivacy obligations in the EU/UK, or applicable US state laws), you obtain that consent from your visitors before the script captures their data, and you don’t override their refusal.
  • You will not install the script on websites primarily directed at children, or on pages that collect special category data (health information, biometric data, racial or ethnic origin, sexual orientation, religious beliefs, trade-union membership, genetic data, criminal records) without the additional safeguards your law requires.
  • You will not use the service to capture data you don’t have a lawful basis to collect, or for purposes incompatible with the basis on which it was collected.
  • You will respond to data-subject requests (access, correction, deletion, objection) from your visitors in accordance with applicable law, and you will use the export and deletion tools we provide in the application to honour those requests.
  • You will not pass information through Lead Source on behalf of third parties whose data you don’t have a relationship with or the right to capture.
Why this matters. If a regulator or a visitor brings a privacy claim arising from data captured on your website, the regulator looks at the controller first. That’s you. We help you with subprocessor obligations and data-export tools, but we cannot stand in for your own privacy compliance. If you breach this section, the indemnity below applies.

4.B Your obligations when sending outbound email

This sub-section applies whenever you enable outbound sending features (template-based first-touch, AI-generated replies, or any other feature that sends email from a connected mailbox). It is in addition to the obligations above. Regulators in every jurisdiction we serve treat the business on whose behalf the email is sent as legally responsible for it, regardless of who pressed send. You warrant and agree that:

  • Mailbox authority. You have authority to connect each mailbox you connect to the service, and to authorise Lead Source (and any user of your account whose mailbox is connected) to send from it. If you connect a mailbox belonging to another person (for example, an employee’s individual mailbox), you have that person’s informed consent.
  • Lawful permission basis. For every lead you send to, you have a lawful permission basis under applicable law in the lead’s jurisdiction — including, where applicable, the US CAN-SPAM Act, the Australian Spam Act 2003, Canada’s CASL, the UK PECR, and the EU ePrivacy Directive as implemented in each Member State.
  • Privacy notice is not permission. You acknowledge that a visible privacy notice on your website is not, by itself, marketing permission in Australia, Canada, the UK, or much of the EU. You are responsible for capturing and evidencing a valid permission basis (express consent, soft opt-in, CASL inquiry / existing business relationship, or a recognised exemption) at the moment you collect each lead’s contact details.
  • Content responsibility. You are responsible for all outbound content sent through the service — including subject lines, offers, pricing, discounts, factual claims, regulated-product representations, and any commitments — whether drafted by you, by a template, or by AI. The AI is an automation tool you have configured; it is not a separate party.
  • Identification and contact details. You authorise Lead Source to include sender identification, a working opt-out / unsubscribe mechanism, and your physical postal address in outbound commercial messages, where applicable law requires those elements. You will provide an accurate postal address and keep it current. You will not disable or modify those compliance elements in a way that breaks compliance.
  • Suppression. You authorise Lead Source to operate a per-account suppression list that blocks subsequent sends to addresses that have opted out, replied with stop indicators, bounced repeatedly, or been suppressed manually. The suppression list operates across templates, AI sends, mailbox reconnects, and account changes, and you may not bypass it.
  • No third-party sending. You will not use the service to send messages on behalf of third parties whose leads you do not have a direct relationship with.
  • Truthful identity. You will not use the service to send messages that misrepresent the sender’s identity, use deceptive subject lines, or hide the origin of the message.
Allocation of risk. Regulators (FTC, ACMA, OPC, ICO and EU member-state authorities) hold both the business that initiates the message and any party that materially sends or facilitates the sending responsible. Our role is processor-side; the message is being sent from your mailbox, in your name, to advance your business. The customer indemnity in section 15 applies to breaches of this sub-section.

5. Acceptable use

You may use Lead Source only for its intended purpose. You may not, and you must not allow anyone using your account to:

  • Reverse-engineer, decompile, or attempt to extract the source code of the service
  • Resell, sublicense, or rent the service without our written permission
  • Use the service to send messages that breach applicable anti-spam or direct-marketing laws — including the US CAN-SPAM Act, the Australian Spam Act 2003, Canada’s CASL, the UK PECR, the EU ePrivacy Directive and its national implementations, or any equivalent law in the recipient’s jurisdiction
  • Send messages to addresses on the per-account suppression list, attempt to bypass the suppression list, or remove or disable the unsubscribe, sender-identification, or postal-address elements required for compliance
  • Use the service to send messages with false or misleading header information, deceptive subject lines, or sender identities designed to misrepresent who the message is from
  • Use the service to send messages that promote unlawful goods or services, fraudulent schemes, content prohibited by your mailbox provider’s terms (Google Workspace, Microsoft 365), or content that would breach your own warranties under section 4
  • Use the service to send unsolicited marketing where applicable law requires consent and you do not have a valid permission basis — recognising that the service has legitimate uses (responses to inbound enquiries, marketing under express consent or recognised exemption) and that the breach is the unlawful send, not the use of automation
  • Probe, scan, or test the vulnerability of the service without our prior consent
  • Interfere with or disrupt the service, our infrastructure, or other customers’ use of it
  • Use the service to build a competitive product or to benchmark it for a competitive product
  • Use our content, the service’s outputs, or data captured through the service to train machine-learning or AI models without our prior written consent (you may use data you captured for your own analytics or AI, subject to your privacy obligations to your visitors and leads)
  • Use automated tools to scrape data from the service beyond what our API permits
  • Bypass usage limits, rate limits, or technical restrictions
  • Misrepresent your identity or your relationship with the websites you install the script on, or with the mailboxes you connect
  • Use the service in any way that is unlawful, fraudulent, or harmful, or that promotes anything that is

6. Subscriptions, billing, and free trial

Plans and pricing. Pricing for paid plans is shown in the application at the time of signup. We may change prices for new sign-ups at any time. For existing customers, we’ll give at least 30 days’ notice of price increases that affect the next billing cycle.

Free trial. If we offer a free trial, the duration is shown in the signup flow. At the end of the trial, your account will either be downgraded to a free plan (where available) or cancelled, unless you’ve added payment details and chosen a paid plan.

Auto-renewal. Paid subscriptions renew automatically at the end of each billing cycle until you cancel. Cancellation is effective at the end of the current paid period.

Refunds. Subscription fees are non-refundable except where required by law (including the Australian Consumer Law, which is not excluded by these terms). If you believe a charge is in error, contact us at billing@leadsource.co within 30 days.

Taxes. Fees are exclusive of GST, VAT, sales tax, or similar, unless stated otherwise. We’ll add applicable taxes at checkout where required.

Cancellation. You can cancel any time from your account settings. Your data is retained per our Privacy Policy and exportable until your retention window ends.

7. Intellectual property

What’s ours. Lead Source owns the service, including all software, design, content, trademarks, and documentation. We grant you a limited, non-exclusive, non-transferable, revocable licence to use the service for your business purposes, subject to these terms. Nothing in these terms transfers any of our intellectual property rights to you.

What’s yours. You own your customer content. The form-submission data we capture on your behalf, and any data you upload to your account. You grant us a limited licence to host, process, transmit, display, and otherwise handle that content as necessary to provide the service.

Trademarks. “Lead Source,” the Lead Source logo, and related marks are our trademarks. You may refer to Lead Source by name in factual statements (e.g. “we use Lead Source for attribution”) without needing permission. Anything beyond that requires our written consent.

8. Feedback

If you send us feedback, suggestions, or feature requests, you grant us a perpetual, irrevocable, worldwide, royalty-free licence to use it for any purpose, without obligation. We don’t treat feedback as confidential. You aren’t obliged to send us feedback.

9. Service availability

We aim to keep Lead Source available and reliable, and we make reasonable efforts to maintain uptime, but we don’t commit to a specific service-level agreement (SLA) under these terms. Custom SLAs are available for enterprise customers under separate written agreements.

We may perform scheduled maintenance, and the service may be unavailable during these windows. We’ll give reasonable notice of planned maintenance affecting most customers. Emergency maintenance may happen without notice.

10. Data processing

To the extent we process personal data on your behalf in our role as a data processor, our data-processing terms apply. They form part of these terms by reference and are available at leadsource.co/dpa or on request from privacy@leadsource.co.

The data-processing terms cover: scope and duration of processing, the nature and purpose of processing, the type of personal data and categories of data subjects, our obligations as processor, sub-processor authorisation, international transfer mechanisms, and our assistance with data-subject requests and breach notification.

Our Privacy Policy describes how we handle data we collect for our own purposes, where we act as controller.

11. AI features

This section applies if you activate AI-tier features under which the service uses an AI sub-processor (currently Anthropic; see DPA Annex III) to read inbound replies and to draft and/or send outbound email replies on your behalf.

11.1 Authorisation. By activating the AI tier, you authorise Lead Source to: (a) read inbound replies received in the connected mailbox; (b) process those replies, lead metadata, and conversation history through Anthropic to generate outbound replies; (c) send those replies from the connected mailbox in your name (or in the name of an authorised user of your account whose mailbox is connected); and (d) repeat (a)–(c) for the life of the thread or until you disable the feature, the thread is escalated to a human, or the recipient opts out. You confirm that each named user whose mailbox is connected has consented to AI-generated email being sent from their mailbox.

11.2 Customer ownership and responsibility. All AI-generated content sent from your mailbox is your content for the purposes of these terms. You are responsible for it as if you had written it yourself, including for the truthfulness of factual claims, the accuracy of pricing and offers, regulatory compliance for any regulated-product content, and any commitments the message could be read to make. The AI is an automation tool you have configured; it is not a separate party, and contracting through the service does not insulate you from the legal consequences of messages sent from your mailbox.

11.3 AI disclosure. Where applicable law requires disclosure that a message was generated by AI — including, from 2 August 2026, the EU AI Act Article 50 where the recipient is in the EU — Lead Source will inject a configurable AI-disclosure element into AI-generated messages by default. You may not disable that disclosure for recipients in jurisdictions where it is required by law. You may configure disclosure for other jurisdictions according to your own legal advice and ethical standards.

11.4 No AI autonomy over commitments. The AI is configured not to make legally binding commitments on your behalf. In particular, the AI is configured to escalate (rather than respond autonomously) on:

  • Pricing, discounts, or rate quotes outside ranges you have explicitly authorised
  • Contractual offers, scope changes, or amendments to existing agreements
  • Factual claims about regulated products (financial, legal, medical, real-estate, or any product subject to industry-specific representation rules)
  • Disputes, complaints, threats of legal action, or messages indicating distress or vulnerability
  • Requests for refunds, cancellations, or contractual remedies
  • Any topic you have configured for human escalation

You are responsible for configuring escalation rules appropriately for your business, and for monitoring threads escalated for human handoff. The default escalation rules are conservative but not exhaustive; you must add rules specific to your industry and offer.

11.5 Logging and audit. For each AI-generated message and each AI action, Lead Source logs the source lead, the lead’s permission-basis metadata, the thread classification, the prompt inputs, the model output, any human approval or edits, the sent message, delivery / bounce / unsubscribe status, and subsequent deletion status. These logs are retained per the schedule in our Privacy Policy and are used for abuse detection, deliverability monitoring, model evaluation, customer audit, and incident response.

11.6 Suspension. If we identify a pattern of AI-generated messages from your account that creates legal, regulatory, deliverability, or reputational risk for Lead Source, our other customers, or our sub-processors, we may suspend AI-tier features for your account on notice. Suspension of the AI tier does not, by itself, affect your access to non-AI features of the service, unless the same pattern also breaches section 5 in respect of those features.

11.7 Your data and AI training. The data we process through Anthropic to generate outbound replies is, by contract, not used by Anthropic to train its general-purpose models. We do not use customer data or lead data to train AI models, and we do not allow our sub-processors to do so. See our Privacy Policy section 15 and DPA section 4A for the full position.

12. Confidentiality

Each party may receive non-public information from the other (“Confidential Information”). Each party will protect the other’s Confidential Information with the same care it uses to protect its own (and not less than reasonable care), use it only to perform under these terms, and not disclose it to anyone outside the recipient party’s organisation except to its employees, advisers, or contractors who need to know it and are bound by similar confidentiality obligations.

This obligation doesn’t apply to information that is publicly available through no fault of the recipient, was already known to the recipient, is independently developed, or is required to be disclosed by law (in which case the recipient will give the other party notice where reasonably possible).

13. Warranties

We warrant that we will provide the service with reasonable skill and care, in accordance with these terms.

Except as expressly set out in these terms, and to the maximum extent permitted by law, the service is provided “as is” and “as available.” We disclaim all other warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, and non-infringement.

We don’t warrant that the service will be uninterrupted, error-free, or that the data it produces will be 100% complete or accurate. Attribution data is by nature derived from imperfect signals; we provide our best estimate of source, not a guarantee.

Australian Consumer Law. Nothing in these terms excludes, restricts, or modifies any guarantee, right, or remedy you have under the Australian Consumer Law (or equivalent legislation in your jurisdiction) that cannot lawfully be excluded. Where our liability arises from a failure to comply with a non-excludable consumer guarantee for services, our liability is limited (at our option) to supplying the services again or paying the cost of having them supplied again, where the law permits.

14. Limitation of liability

To the maximum extent permitted by law:

  • Neither party is liable to the other for indirect, incidental, consequential, special, exemplary, or punitive damages, or for lost profits, lost revenue, lost data, or lost business opportunity, even if advised of the possibility.
  • Our total aggregate liability arising out of or relating to these terms or the service, whether in contract, tort (including negligence), or otherwise, will not exceed the total fees you paid us for the service in the 12 months immediately preceding the event giving rise to the liability, or AUD $100, whichever is greater.

This cap does not apply to: (a) your obligation to pay fees due, (b) either party’s indemnification obligations, (c) breaches of intellectual property rights, (d) breaches of confidentiality, or (e) liability that cannot be limited under applicable law (including under the Australian Consumer Law).

15. Indemnity

By you. You will defend, indemnify, and hold harmless Lead Source and its directors, employees, and contractors from any claim, demand, loss, damage, cost, or expense (including reasonable legal fees) arising from:

  • Your breach of section 4 (Your obligations as a website operator), including failure to obtain required consent, failure to provide accurate privacy notice, or installation of the script on websites you don’t own or control
  • Any third-party claim by a visitor to your website concerning data we captured on your behalf
  • Your breach of section 5 (Acceptable use)
  • Your violation of any law, regulation, or third-party right in connection with your use of the service

By us. We will defend, indemnify, and hold you harmless from any claim by a third party that the service, as provided by us and used in accordance with these terms, infringes that third party’s intellectual property rights. If the service becomes the subject of such a claim, we may, at our option: (a) modify the service to make it non-infringing while preserving substantially equivalent functionality, (b) obtain a licence allowing continued use, or (c) terminate the affected portion of the service and refund prepaid fees for the unused period.

Each party’s indemnification obligation is conditional on the indemnified party giving prompt notice of the claim, allowing the indemnifying party to control the defence and settlement (provided that no settlement adversely affects the indemnified party without consent), and providing reasonable cooperation.

16. Term, termination, and suspension

Term. These terms apply from the date you create your account until terminated.

Termination by you. You can cancel your account any time from your account settings. Cancellation takes effect at the end of your current paid period.

Termination by us, for cause. We may terminate or suspend your account immediately if you breach these terms, fail to pay fees when due (after a 14-day cure period), or use the service in a way that creates legal, regulatory, or security risk for us or others. We’ll notify you of the termination and the reason where reasonably possible.

Termination by us, for convenience. We may terminate without cause by giving you 30 days’ written notice. If we do, we’ll refund any prepaid fees for the unused period.

Suspension. We may suspend (rather than terminate) for non-payment, suspected abuse, security incidents, or compliance with a lawful order. Suspension doesn’t relieve you of your payment obligations for the period before suspension.

Effect of termination. When the agreement ends, your access to the service ends. You can export your data during a 30-day grace period after termination. After the grace period, we may delete your data per our Privacy Policy retention schedule. Sections that by their nature should survive termination (intellectual property, confidentiality, indemnity, limitation of liability, governing law) survive.

17. Changes to these terms

We may update these terms from time to time. The “last updated” date at the top shows when. For material changes affecting your rights or obligations, we’ll notify you by email and/or in the application at least 30 days before the change takes effect. Your continued use of the service after the effective date is acceptance of the change. If you don’t agree, you can terminate before the change takes effect.

18. Governing law and dispute resolution

These terms are governed by the laws of Victoria, Australia, without regard to conflict-of-laws principles. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

Before starting any formal proceeding, the parties will try in good faith to resolve any dispute through informal discussion for at least 30 days after written notice of the dispute. If informal resolution fails, the parties submit to the non-exclusive jurisdiction of the courts of Victoria, Australia. Either party may seek interim or injunctive relief in any court of competent jurisdiction without first attempting informal resolution.

Nothing in this section limits your rights under applicable consumer protection law, including your right to pursue remedies in your local courts where the law permits.

19. Copyright and takedown

If you believe content available through the service infringes your intellectual property rights, send a notice to legal@leadsource.co including: identification of the work claimed to be infringed, identification of the allegedly infringing material with enough detail to find it, your contact information, a statement that you have a good-faith belief that the use isn’t authorised, and a statement under penalty of perjury that the information is accurate and you’re authorised to act on behalf of the rights-holder.

20. General

Entire agreement. These terms, together with our Privacy Policy and (where applicable) the Data Processing Addendum, are the entire agreement between you and Lead Source regarding the service. They supersede any prior agreements or proposals (oral or written).

No waiver. Our failure to enforce a provision is not a waiver of our right to enforce it later.

Severability. If any provision is found unenforceable, the rest remains in effect, and the unenforceable provision is replaced with one that gives effect to the original intent as far as the law permits.

Assignment. You may not assign or transfer these terms without our written consent. We may assign these terms to a successor (acquirer, merger partner, or affiliate) without notice.

Force majeure. Neither party is liable for failure or delay caused by events beyond reasonable control (natural disasters, war, terrorism, riots, acts of government, internet outages, denial-of-service attacks, etc.), provided the affected party gives prompt notice and acts diligently to resume performance.

Independent contractors. The parties are independent contractors. Nothing in these terms creates a partnership, agency, employment, or joint-venture relationship.

Notices. Notices to us go to legal@leadsource.co or our registered postal address. Notices to you go to the email address on your account.

Electronic communications and signatures. You consent to receive notices, agreements, and other communications electronically. Electronic signatures and acceptance through the application have the same legal effect as handwritten signatures.

Headings. Headings are for convenience only and don’t affect interpretation.

21. Contact

Questions about these terms

For legal questions, contract questions, or anything covered by these terms:

For privacy questions: privacy@leadsource.co

For billing questions: billing@leadsource.co

Postal address:

Leftleads Pty Ltd t/a Lead Source
[CONFIRM: street address]
[CONFIRM: suburb, postcode]
Victoria, Australia
ABN: [CONFIRM]