Last updated 22 October 2026. This policy explains what BossLead (www.talentfocus.com.my) collects, why, and the choices you have. It is written to meet the Malaysian Personal Data Protection Act 2010 (PDPA).
Who we are
BossLead is owned and operated by Agensi Pekerjaan Talent Focus Sdn Bhd, which decides how personal data in the service is used (the data user under the Personal Data Protection Act 2010).
Email: [email protected]
What we collect
- Your account: name, email, company, phone, billing details (card payments are handled by Stripe; we do not store card numbers).
- What you add to the service: lists, notes, emails and messages you write, and the mailboxes and WhatsApp numbers you connect.
- Business contact data: company and business-contact details gathered from public sources (company websites, public registers), used so our customers can find and contact businesses.
- Usage data: pages visited, device and browser, and approximate location from your network address, to run and protect the service.
How we use it
To provide the service you signed up for, send the emails and messages you ask us to send, bill you, give support, keep the service secure and prevent abuse, and tell you about changes. We do not sell personal data.
Who we share it with
Service providers that help us run BossLead (hosting, payments, email delivery, AI providers that process text you ask us to write), only to provide the service and under confidentiality. We disclose data when the law requires it.
How long we keep it
While your account is open, and afterwards only as long as needed for billing, legal or security reasons. You can ask us to delete your account and data.
Your rights
You can ask to access, correct or delete your personal data, or withdraw consent, by writing to [email protected]. Businesses listed in our data can ask to be removed the same way.
Security
Passwords and access tokens are stored encrypted, connections use HTTPS, and access to data is limited to people who need it.
Google user data
When you connect a Gmail or Google Workspace mailbox with "Sign in with Google", BossLead asks Google for permission to:
- Send email on your behalf (gmail.send): to send the outreach emails and follow-ups you write or approve in BossLead, from your own address.
- Read your email (gmail.readonly): to find replies, bounces and out-of-office answers to the emails BossLead sent, so follow-ups stop when someone answers and replies appear in your BossLead inbox and pipeline.
- Your email address (openid, email): to know which mailbox you connected.
We only read messages to find answers to emails sent through BossLead, and we store only what is needed for that: the sender, subject, date, the text of those replies, their message identifiers, and the contact details written in the reply's signature (such as name, job title, company and phone), which are saved to your own contact book. Other email in your mailbox is not stored.
Everything read from your mailbox is used only to provide these features to you, and only your account can see it. It is never added to the business-contact data other BossLead customers search, never shared with other customers, and never used for any other purpose.
We do not sell Google user data, use it for advertising, use it to build or train general artificial-intelligence or machine-learning models, or let people read it, except with your permission for support, for security reasons, to comply with the law, or when the data is aggregated and anonymised.
BossLead’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Access tokens are stored encrypted. You can disconnect the mailbox in BossLead at any time, and remove our access in your Google Account under Security, Third-party apps with account access. When you disconnect, we delete the tokens straight away and the stored replies when you delete the mailbox or your account.
Questions about Google user data: [email protected].
Changes and contact
We will post changes on this page. Contact: [email protected].