The controller for data processing on this website is:
Abayomi IyiolaIf you have any question about how your data is handled, email that address. You will get a reply from a person.
We have kept this short, because the honest answer is that we collect very little.
The site is hosted by Vercel Inc. Like every web host, Vercel's servers record technical information when a page is requested: your IP address, the time, the page requested, your browser and operating system, and the referring page. This happens automatically and is needed to deliver the site and keep it secure.
Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in operating a secure, functioning website. Retention: kept a short period by our host and not used to identify you. We use no tracking cookies, ad pixels, or third-party analytics.
If you email us, we receive your address, your name if you give it, and whatever you write. We use it only to answer you and, if you become a customer, to deliver the work.
Legal basis: Art. 6(1)(b) GDPR for pre-contract and contract, Art. 6(1)(f) for general correspondence. Retention: correspondence tied to a contract is kept for 6 to 10 years where German commercial and tax law requires it.
Payments are handled by Stripe. We never see or store your card number. Stripe processes your payment details as an independent controller under its own policy and passes us what we need to invoice and deliver: your name, email, billing country, and amount paid.
Legal basis: Art. 6(1)(b) GDPR (contract) and Art. 6(1)(c) (legally required invoicing). Retention: as required by German tax law. More: stripe.com/privacy
The demo submits whatever you type into a fictional business's enquiry form so you can watch the system work. If you enter a real email you will receive an automated demo reply, and the submission is recorded in our demo log. Please do not put anything sensitive into the demo form. Demo submissions are deleted periodically and are never used to contact you for sales.
Legal basis: Art. 6(1)(a) GDPR, your consent, given by submitting the form. Email us to withdraw it and we will delete your submission.
| Provider | What they do | Where |
|---|---|---|
| Vercel Inc. | Hosts the website | USA |
| Stripe Payments Europe, Ltd. | Processes payments | Ireland / USA |
| Google Ireland Ltd. | Email and spreadsheet storage used to run the service | Ireland / USA |
| Zoho Corporation | Hosts our email at twominutelead.com | USA (Zoho US data centre) |
| n8n GmbH | Runs the automation that powers the service | Germany / EU |
Some providers are based in, or transfer data to, the United States. Those transfers rely on the EU Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. We do not sell your data. We do not share it for advertising. Nobody buys a list from us, ever.
If you hire us, we build a lead response system that runs inside your own accounts. In that arrangement you are the controller of your leads' data and we act as your processor, under a separate written data processing agreement provided before work starts. Your leads' data stays in your systems. We keep no copy after handover, beyond what is needed for support you have asked for.
Under the GDPR you have the right to: access a copy of your data (Art. 15), correct it (Art. 16), have it deleted (Art. 17), restrict its use (Art. 18), receive it in a portable format (Art. 20), object to processing based on legitimate interest (Art. 21), and withdraw consent at any time without affecting anything done before (Art. 7(3)).
To use any of these, email hello@twominutelead.com. We respond within one month and will not charge you or make it difficult.
We do not carry out automated decision-making or profiling that produces legal effects for you. Our product sends automated replies and follow-up messages. Those are automated messages, not automated decisions about you. A human reads and answers every real enquiry.
The site is served over HTTPS. Access to our email and the systems we build is protected by strong authentication, and payment details never touch our systems. No system is perfectly secure, and we would rather say that plainly than claim otherwise.
If we change how we handle data, we will update this page and the date at the top. If the change is significant and we have your email, we will tell you directly.