1. Scope and relationship to other policies

This Privacy Policy applies to the LEADER AD BACKUP plugin or application, backup creation and restore workflows, schedules, archives, local or remote destinations, licensing, update checks, diagnostics, and support.

This Policy covers processing performed by or specifically through LEADER AD BACKUP. Website visits, Website accounts, checkout, product purchases, downloads, and communications made directly through LEADERAD.site remain subject to the LEADER AD Website Privacy Policy, unless this Policy expressly states otherwise.

2. Who is responsible and how to contact us

For processing under LEADER AD’s control and covered by this Policy, the responsible business is LEADER AD.

Privacy contact: [email protected]
Website: LEADERAD.site
Privacy Center: LEADERAD.site/privacy/

Where a customer uses the product to process information for its own website, business, personnel, learners, clients, visitors, or users, that customer may independently determine the purposes and means of that processing. In that context, the customer is responsible for its notices, instructions, permissions, and lawful basis, while LEADER AD acts only within the role required by the feature, agreement, and applicable law.

3. How BACKUP works

BACKUP copies selected files, databases, settings, or application data into an archive and may restore them later. The customer selects the source, schedule, exclusions, retention cycle, encryption options, and destination. An archive can reproduce personal and confidential information already controlled by the customer; LEADER AD does not become the owner of that content merely because the tool processes it.

4. Information processed

The information processed depends on the features used, configuration, product version, and the actions requested.

5. How information is obtained

Information may be obtained through the following sources:

• from files, databases, and systems selected by the customer;
• from backup schedules, exclusions, destinations, encryption, and retention settings;
• from the connected storage provider when authorization, upload, listing, download, or revocation occurs;
• from restore actions, integrity checks, errors, licensing, and support requests.

We do not infer that optional information is present merely because the product can technically support a related feature.

6. Purposes and legal bases

Information may be processed only as reasonably related to the following purposes:

• create, encrypt where configured, verify, store, rotate, download, transfer, and restore backups;
• authenticate a customer-selected destination and maintain the connection;
• show archive history, integrity, progress, failures, retention, and recovery options;
• activate licenses, enforce plan limits, deliver updates, and prevent abuse;
• diagnose failed backups or restores and provide support;
• protect archives, customer systems, and legal rights.

Where applicable law requires a legal basis, processing may rely on one or more of the following, depending on the activity:

• performance of a contract or steps requested before entering into a contract;
• LEADER AD’s legitimate interests in operating, securing, supporting, improving, and protecting the product, provided those interests are not overridden by applicable rights;
• compliance with legal, accounting, tax, security, or regulatory obligations;
• consent, where consent is required or selected by the user; and
• protection of users, systems, property, or legal rights where permitted by law.

The legal basis depends on the specific feature, context, jurisdiction, and information involved. Consent may be withdrawn for future processing without affecting processing already lawfully performed.

7. Information and access not intentionally required

The ordinary operation of this product is not intended to require unnecessary personal or sensitive information.

• BACKUP does not require LEADER AD to inspect the human-readable contents of every archive;
• cloud access should use the narrowest supported authorization and should not expose the customer’s general cloud-storage password to LEADER AD;
• camera, microphone, contacts, precise location, and advertising identifiers are not required;
• backup content is not sold or used for unrelated advertising or training without an independent disclosed basis.

Do not submit passwords, secret keys, payment-card numbers, government identifiers, health data, or other sensitive information through ordinary support or description fields unless LEADER AD has specifically requested it through an appropriate secure process and it is genuinely necessary.

8. Customer responsibility for backup content

The customer is responsible for deciding what may lawfully be copied, for honoring requests that must also be applied to backups, for limiting access, for selecting an appropriate destination, for encryption-key custody, and for testing restoration. Customers should exclude data that is unnecessary, especially secrets or sensitive categories not needed for recovery.

Where the archive contains information about third parties, the customer is generally the controller of that content and LEADER AD processes it only to provide the configured functionality and support.

9. Encryption and recovery material

When encryption is available and enabled, archive confidentiality depends on correct implementation and protection of passwords, keys, recovery codes, or account access. LEADER AD cannot recover material that the product is deliberately designed not to receive. Loss of a customer-controlled key may make an archive permanently unrecoverable.

Do not place encryption keys in the same unprotected location as the archive. Rotate or revoke cloud authorization when an administrator leaves or compromise is suspected.

Sharing, service providers, and disclosures

LEADER AD does not sell personal information processed under this Policy. Information may be disclosed only as reasonably necessary for the relevant purpose, subject to suitable safeguards and applicable law.

• the storage or cloud provider selected and authorized by the customer;
• hosting, transport, authentication, licensing, update, and support providers acting for LEADER AD;
• customer-authorized administrators, recipients, and incident-recovery professionals;
• a new destination expressly selected by the customer during migration or restore.

Information may also be disclosed when reasonably necessary to comply with law or a valid legal process; protect users, systems, property, safety, or rights; investigate misuse or fraud; enforce applicable terms; or support a merger, financing, acquisition, reorganization, or sale of assets. Any business successor would remain subject to applicable privacy obligations for the information it receives.

International processing and transfers

Service providers, infrastructure, app stores, cloud platforms, or authorized recipients may operate in countries other than the user’s country. Where personal information is transferred internationally, LEADER AD will use the mechanism, authorization, contractual protection, or other safeguard required by the law applicable to that transfer.

A reference to an international provider does not by itself mean that every user’s information is transferred to every location in which that provider operates.

Retention

Information is retained only for as long as reasonably necessary for the purpose for which it was processed, including to provide the product, maintain security and transaction records, resolve disputes, enforce agreements, comply with legal or accounting requirements, and establish or defend legal claims.

• archive retention follows the customer’s configured cycles and the destination’s deletion, trash, versioning, and legal-hold behavior;
• temporary local files should be removed after successful transfer or restore when no longer needed;
• logs and archive metadata may be retained for a shorter operational or security period than the archive itself;
• license, billing, and support records follow applicable service, accounting, fraud, and legal periods.

Retention can vary because local information is controlled by the user or operating system, server logs rotate on different schedules, backup copies expire according to configured cycles, and legal duties may require certain records to be held longer. Information may be deleted, anonymized, aggregated, or isolated when it is no longer required.

Security

LEADER AD uses administrative, technical, and organizational measures selected according to the nature of the product and information involved. Measures may include access controls, separation of duties, authentication, encryption in transit where supported, secure coding and update practices, logging, monitoring, rate limits, integrity checks, and restricted administrative access.

No product, transmission, device, storage system, or security measure can be guaranteed to be completely secure. Users and customer administrators must protect accounts, devices, recovery material, API keys, hosting access, and other credentials under their control; apply updates; limit privileges; review activity; and report suspected compromise promptly.

User and administrator controls

Customers can use available settings to control sources, schedules, destinations, exclusions, encryption, retention, deletion, and restore access.

• exclude directories, tables, or categories that should not be copied;
• choose or disconnect a storage destination;
• set rotation and expiry rules;
• delete archives from every relevant destination, including trash or version history where applicable;
• rotate credentials and encryption material;
• remove the plugin and request deletion of centrally held license or support information.

Removing a local app, disconnecting an integration, or deleting an account does not necessarily erase records that another controller, app store, payment provider, backup destination, or legal obligation independently requires that party to keep.

Privacy rights and requests

Depending on where you live and the law that applies, you may have rights to request access to personal information, obtain a copy, correct inaccurate or incomplete information, object to or restrict certain processing, request deletion where the legal conditions are met, withdraw consent for future processing, and receive certain information in a portable format.

These rights are not absolute. A request may be limited where information must be retained to complete a transaction, protect security, establish or defend legal claims, comply with law, preserve the rights of others, or where another lawful exception applies. We may ask for information reasonably necessary to verify the requester and prevent unauthorized disclosure.

Requests may be sent to [email protected] or through the LEADER AD contact page. We will respond through the appropriate channel and within the period required by applicable law.

Children

BACKUP is an administrative and recovery tool and is not directed to children. It may copy child-related information already contained in a customer system; the customer remains responsible for that underlying processing and any heightened protections.

If LEADER AD learns that information was collected from a child in circumstances requiring parental authorization and that authorization was not validly obtained, we may delete or restrict the information as required by law. A parent or guardian may contact [email protected].

Automated decisions

Scheduled jobs may automatically create, transfer, verify, expire, or report on backups according to customer configuration. These are technical recovery actions and are not intended to make decisions about individuals.

Security, fraud, spam, licensing, integrity, or quality systems may automatically flag, limit, queue, or block an event. Where required by law, a person may contact LEADER AD to request appropriate review of a decision producing legal or similarly significant effects.

Changes to this Policy and product evolution

LEADER AD may update this Policy to reflect product changes, new optional features, security improvements, provider changes, or legal requirements. The “Last Updated” date will identify the current published version. Where required, material changes will be communicated through an appropriate product, account, website, store-listing, or direct notice before they take effect.

A future feature is not treated as active processing solely because this Policy explains how it would be handled if offered. If a new feature materially changes data practices, LEADER AD will update the applicable notice and obtain consent where the law requires it.

Contact and interpretation

This Policy is intended to describe actual product data practices in clear language. It does not waive rights that cannot lawfully be waived, create processing that does not otherwise occur, or require publication of private personal details that are not necessary for a valid public notice.