Privacy notice
Updated 17 September 2026
Who operates this application
TCO LeadGen is operated by Tom & Co. Ltd. For questions about this application, your information, or a request to access, correct or delete information, contact tom@tomandco.co.uk or your workspace administrator.
Information used by the application
Google sign-in provides your verified email address and basic profile, including your name and profile image. LeadGen also stores workspace membership and the business records created or imported into your workspace.
If you connect Google Workspace, you authorise additional access:
- Gmail: read messages and settings, send email, and manage labels. The sync feature uses a selected Gmail label to identify correspondence for the CRM; relevant message content and supported attachments can be stored in LeadGen.
- Calendar: read calendar information, events and attendees to record relevant business meetings.
- Drive and Docs: read files and document content for imports and meeting context, manage app-used files, and create or edit Google Docs for document workflows. Google's Docs permission also permits deletion of documents; the application may trash app-created documents when cleaning up a failed operation.
The permissions Google displays can be broader than an individual feature's use. Google account permissions still govern which resources are accessible. LeadGen stores OAuth tokens so approved connections can operate in the background. It does not ask for or store your Google password.
How information is used and shared
Information supports these CRM features and is available to authorised workspace users according to the application's access controls and sharing settings. Connecting an account can therefore make imported correspondence and documents available to other authorised users of that workspace.
Relevant record content, including imported email, meeting or document text, can be processed by OpenAI through its API to provide summaries, drafts, deal analysis and assistant responses. AI runs and their results can be stored in LeadGen. Google Cloud provides application infrastructure and file storage.
LeadGen does not sell Google user data, use it for advertising, or use it to train general-purpose AI models. Its use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Disconnecting, retention and deletion
You can disconnect Google Workspace in LeadGen settings and revoke the app's permissions through your Google Account connections. Disconnecting removes the stored connection credentials; it does not automatically delete previously imported CRM records, attachments, documents or AI results.
Imported records and AI results can remain stored until they are removed. Synchronisation lookback windows do not automatically delete older records. Contact your workspace administrator or tom@tomandco.co.uk to request removal of stored information, including information held in logs or backups, and to discuss any applicable business or legal retention requirements.
Security and changes
LeadGen uses authenticated access and workspace access controls. Keep your Google account secure and only connect accounts and data you are authorised to use in the workspace. Changes to this notice will be published on this page.