Plain answers, not badge soup.
All traffic — website, dashboard, API and snippet — is encrypted with TLS. No exceptions.
Billing runs entirely on Stripe's certified infrastructure (PCI DSS Level 1). We never see or store card numbers.
Screened lead data is automatically deleted after 90 days by default. Enterprise plans set their own window in the dashboard — any number of days, down to zero, where lead details are cleared at the next nightly sweep.
Keys can be regenerated instantly from your dashboard; old keys die immediately. We alert you by email on every key change.
Device fingerprints are hashed in the visitor's browser before they reach us. No third-party tracking CDNs are loaded on your site.
If LeadShield is unreachable your forms submit normally. Our availability can never block your business.
Security question or something to report? Contact us — security reports get same-day attention.