Privacy Policy
1. Who we are
ICP Lens is a B2B SaaS product operated by FOP Khromushkin Kostiantyn Mykolajovych, registered in Ukraine (registration number 3273705914). ICP Lens provides revenue intelligence and account scoring analysis for B2B sales and marketing teams.
2. What data we collect
2.1 Account information
- Email address (required for authentication)
- Full name (optional, for personalisation)
- Password (stored hashed)
- Subscription tier and billing status
2.2 Your uploaded CRM data
When you use ICP Lens you upload CSV or Excel files exported from your CRM. These files may contain company names, deal values, contact names, job titles, and other CRM fields.
2.3 Analysis output data
After your browser completes the analysis, the derived results are stored on our servers. This includes identifying information that the dashboard, shareable links, and PDF export rely on to be useful:
- Account / company names
- ICP scores (0–100) and tier assignments (Best fit, Strong fit, Weak fit, At-risk)
- Deal values — LTV totals and expansion revenue per account
- Job-title clusters (e.g. "VP Sales × 4") used for buyer persona analysis
- Plain-English ICP narrative text
- Analysis run date, file name, account count, and deal count totals
Not stored: contact names, email addresses from your CRM data, CRM notes, or the original uploaded file.
2.4 Usage information
- Pages visited and features used
- Browser type, device type, and approximate location
- IP address (used for security, fraud prevention, and approximate location)
- Anonymised analytics events (with your consent)
3. How your CRM data is processed
The ICP Lens analysis engine runs entirely in your browser as a Web Worker — a background JavaScript process on your own device. Your raw CSV or Excel file is parsed locally, the scoring calculation runs on your device, and the original file is never transmitted to any server.
The computed results of that analysis are sent to our servers for storage in your account. This derived data includes account names, deal values, and job-title clusters — because the dashboard, shareable links, and PDF export rely on this information to remain useful between sessions. Contact names, email addresses from your CRM data, and CRM notes are not part of what is transmitted or stored.
4. How we use your information
- Provide and operate the Service
- Authenticate your account and secure access
- Generate analysis output, dashboards, and narratives
- Send essential transactional emails (account, billing, security)
- Improve the Service through aggregated, anonymised usage data
- Comply with legal obligations
What we do not do:
- Sell or rent your data to third parties
- Use your CRM data to train AI models
- Share your CRM data with external AI providers
- Send marketing emails without your consent
5. Data storage and security
5.1 Where data is stored
ICP Lens uses Supabase (PostgreSQL) for data storage. Your account information and analysis output are stored in an encrypted database with row-level security — only you can access your own data, enforced at the database level.
Agency plan customers may upload a logo for use on white-labelled shared reports. Because shared reports are viewable without logging in, these logo files are stored in a publicly accessible storage bucket and can be retrieved by anyone with the file URL. Do not upload confidential images. No other uploaded content is stored in publicly accessible storage.
5.2 Security measures
- TLS encryption in transit
- Encryption at rest for stored data
- Row-level security policies in the database
- Hashed password storage
- Regular security scans and dependency audits
5.3 Data retention
- Account data: retained while your account is active
- Analysis output: retained while your account is active
- Backups: rotated within 30 days
You may delete your account and all associated analysis data at any time from Account Settings. Deletion is immediate — your account, analyses, analysis events, feedback records, and ToS acceptance records are permanently removed at the time of the request. Records in our marketing and operational tables that are keyed to your email address (contact form submissions, demo bookings, lead magnet downloads, sample data leads, and pending invites) are also deleted at the same time.
To prevent accidentally re-contacting someone who has previously unsubscribed or bounced, we retain a minimal suppression record (email address and suppression reason only, with all other personal fields removed) even after account deletion. For deliverability troubleshooting and abuse prevention, email send logs are also retained with the recipient email anonymised. These records exist solely to respect prior opt-outs and to maintain operational records, and are not used for any other purpose.
6. Data sharing and disclosure
We do not sell, trade, or rent your personal information or CRM data. We may share information only with service providers (Supabase, Paddle, email delivery), when required by law, or in the event of a business transfer — with advance notice.
7. Anonymous benchmarking
ICP Lens collects anonymised aggregate statistics from analyses to build industry benchmarking data. This is disclosed at signup. We collect:
- Industry category distributions
- Company size band distributions
- Geographic region distributions
- Aggregate score and tier distributions
No company names, account names, contact details, or exact financial figures are included in benchmarking data. The data is intentionally structured to make individual company identification impossible.
8. Your rights under GDPR
- Right to access your data
- Right to rectification
- Right to erasure (right to be forgotten)
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
To exercise any of these rights, contact privacy@icplens.com. We will respond within 30 days. If you are located in the EU/EEA, you also have the right to lodge a complaint with the data protection supervisory authority in your country of residence. A list of EU supervisory authorities is available at edpb.europa.eu.
9. Cookies and tracking
ICP Lens uses strictly necessary cookies for authentication and, with your consent, Google Analytics cookies to measure how visitors use the site. See our Cookie Policy for full details.
10. Third-party services
- Supabase (database and authentication) — supabase.com
- Paddle (payment processing) — paddle.com
- Google Analytics (website analytics, consent-gated) — policies.google.com/privacy
11. International data transfers
ICP Lens is operated from Ukraine, which is outside the EU/EEA. Our database infrastructure is hosted in the EU (Frankfurt, Germany). Where personal data of EU/EEA data subjects is accessed from Ukraine, we rely on the EU Standard Contractual Clauses as the transfer safeguard, in accordance with GDPR Chapter V.
12. Children's privacy
ICP Lens is intended for business professionals and is not directed at individuals under 18. If you believe we have collected data from a minor, contact privacy@icplens.com and we will delete it immediately.
13. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email and by posting a notice in the ICP Lens dashboard. Continued use of the Service after changes constitutes acceptance of the updated policy.