Legal

Privacy Policy

Last Updated: April 6, 2026  |  Effective Date: April 6, 2026

1. Introduction and Governing Entity

Lead Titan AI (the "Service") is owned and operated by AtmosAI, Inc., doing business as Marketing Titan ("AtmosAI," "Company," "we," "us," or "our"). AtmosAI, Inc. is the parent entity and data controller responsible for Lead Titan AI and its suite of related products, including Marketing Titan and IT Titan. This Privacy Policy explains how we collect, use, store, disclose, and protect information in connection with your use of the Service, including through integrations with third-party platforms such as CRM systems, calendar scheduling tools, email delivery providers, and telecommunications infrastructure providers.

By creating an account or using the Service, you acknowledge that you have read and agree to this Privacy Policy. If you do not agree, discontinue use immediately.

We are committed to compliance with all applicable data protection, privacy, and consumer protection laws, including but not limited to:

2. Information We Collect

2.1 Account and Identity Information

2.2 Usage and Platform Activity Data

2.3 Integration and Connected Platform Data

When you connect third-party platforms to the Service, we may collect and process data through those integrations. The categories of integrations and associated data are as follows:

CRM Integrations: When you connect a customer relationship management (CRM) platform to the Service, we may access, sync, and write contact records, account data, activity logs, deal or pipeline data, and custom fields as authorized by your integration configuration. We act as a data processor with respect to CRM data and process it only on your instruction.

Calendar and Scheduling Integrations: When you connect a calendar or scheduling platform, we may access calendar availability, meeting data, event details, and attendee information to facilitate appointment booking, call scheduling, and follow-up sequencing through the Service. We access only the calendar data necessary to provide the scheduling features you enable.

Email Provider Integrations: When you connect an email account or email delivery provider to the Service, we may access, send, receive, and log emails on your behalf as part of outreach sequence automation. This includes send/delivery status, open and click tracking data, bounce data, and reply detection. We do not read or store the content of inbound emails beyond what is necessary to detect replies and manage sequences.

Transactional Email Delivery Providers: When you use the Service's email delivery infrastructure, your outreach emails are transmitted through third-party transactional email delivery providers operating under data processing agreements with AtmosAI. These providers process email content, recipient addresses, and delivery metadata on our behalf.

Telecommunications Providers: Voice calls, SMS messages, and phone number provisioning are facilitated through third-party telecommunications infrastructure providers with whom AtmosAI has an established ISV/reseller relationship. Call metadata, call recordings (where enabled), SMS content, and telephony logs may be transmitted through and stored by these providers in accordance with their own data processing terms.

Social and Professional Network Integrations: When you use professional network or social platform outreach features, we interact with those platforms on your behalf using your authenticated credentials or authorized API access. We access only the data and functionality necessary to execute outreach sequences and log activity.

2.4 B2B Lead Data

Lead Titan AI provides access to publicly available business contact information sourced from public records, company websites, professional networks, and licensed third-party data partners, for B2B sales and marketing purposes. We do not intentionally collect or provide consumer data for consumer marketing or telemarketing purposes. However, users acknowledge that:

2.5 Communications and Outreach Activity Data

2.6 Sensitive Information

We do not intentionally collect sensitive categories of personal data (e.g., health information, financial account details, government ID numbers) through the Service. If you or your clients process such data through integrations or outreach activities, you are solely responsible for compliance with applicable laws including HIPAA, GLBA, and PCI-DSS.

3. How We Use Your Information

4. Third-Party Integrations: Data Sharing and Processor Relationships

4.1 Categories of Sub-Processors and Integration Partners

To provide the Service, we share data with third-party service providers and integration partners operating as sub-processors or data processors under data processing agreements with AtmosAI. Categories include:

4.2 OAuth and API-Based Integrations

Certain integrations (CRM, calendar, email inbox, social platforms) are connected by you via OAuth authorization or API key. By connecting a third-party platform, you authorize AtmosAI to access, use, and transmit data from that platform to the extent necessary to provide the integrated features you enable. You are responsible for reviewing the privacy policies and terms of service of any platform you connect. AtmosAI's access to connected platforms is limited to the scopes you authorize, and you may revoke access at any time through your account settings or the third-party platform's own authorization management.

4.3 Data Shared With Third Parties

We do not sell your personal information. We may share data in the following circumstances:

4.4 Third-Party Platform Responsibility

AtmosAI is not responsible for the privacy practices, data handling, security measures, or terms of any third-party platform you integrate with through the Service. Your use of connected platforms is governed by those platforms' own terms of service and privacy policies. We encourage you to review them carefully before connecting any integration.

5. B2B Lead Data and Outreach Compliance

5.1 Nature of Lead Data

Lead data provided through the Service is sourced from publicly available sources, professional networks, and licensed data partners for legitimate B2B sales and marketing purposes. We do not provide consumer data for consumer marketing or telemarketing purposes.

5.2 User Responsibility for Outreach Compliance

Users are solely responsible for ensuring their use of lead data and all outreach activities conducted through the Service — including through connected CRM, email, calendar, SMS, voice, and social integrations — comply with all applicable laws. AtmosAI does not obtain consent on behalf of users, does not perform DNC scrubbing unless explicitly offered as a feature, and does not warrant the legal suitability of any data for any specific outreach purpose.

5.3 TCPA and AI Voice Call Notice

Business phone numbers, including mobile numbers, may be subject to TCPA protection regardless of their business-use context. Users must independently verify that contacts have provided prior express written consent before placing any automated or AI-generated voice call or text message. Statutory damages under TCPA range from $500 to $1,500 per violation.

6. Telecommunications, Call Recording, and AI Disclosure

6.1 Telecommunications Infrastructure

Voice calls and SMS messages facilitated through the Service are transmitted through third-party telecommunications infrastructure providers with whom AtmosAI maintains an ISV/reseller relationship. Call and SMS data, including metadata, recordings (where enabled), and logs, may be processed and stored by these providers subject to their own terms and privacy policies.

6.2 Call Recording

If you enable call recording, you are solely responsible for complying with all applicable federal and state wiretapping, electronic surveillance, and call recording laws. Two-party or all-party consent is required in numerous states, including California, Florida, Illinois, Maryland, Massachusetts, Nevada, New Hampshire, Oregon, Pennsylvania, and Washington. You must configure appropriate disclosures and obtain required consents before recording any call.

6.3 AI Caller Identity Disclosure

Applicable state and federal regulations may require that AI-driven or automated callers identify themselves as such at the start of a call or communication. Users are responsible for configuring AI Caller features to comply with applicable disclosure requirements in all jurisdictions where they operate. AtmosAI recommends including an AI identification disclosure at the start of every AI-initiated call as a best practice, regardless of jurisdiction.

7. International Data Transfers

AtmosAI, Inc. is based in the United States. Data may be transferred to and processed in the United States and in other jurisdictions where our sub-processors and integration partners operate. For users in the European Economic Area (EEA) or United Kingdom, such transfers are made pursuant to applicable legal transfer mechanisms, including Standard Contractual Clauses (SCCs). Users in Canada are subject to applicable PIPEDA and provincial privacy law requirements.

If you require a Data Processing Agreement (DPA) for GDPR compliance, contact privacy@marketingtitan.ai.

8. HIPAA Notice

Lead Titan AI is not a HIPAA-covered entity by default, and the Service is not designed for use with Protected Health Information (PHI). If you are a HIPAA-covered entity or business associate and wish to use the Service in connection with PHI — including through connected CRM, email, or calendar integrations — you must execute a Business Associate Agreement (BAA) with AtmosAI prior to any such use. Contact legal@marketingtitan.ai to request a BAA.

9. Data Security

No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of data transmitted through third-party integrations, which are subject to those providers' own security practices.

10. API Access and Data

AtmosAI makes an API available to users on eligible plans. When you access the Service via API:

11. Data Retention

12. Your Privacy Rights

All Users

California Residents (CCPA/CPRA)

EEA/UK Residents (GDPR/UK GDPR)

To exercise any of these rights, contact privacy@marketingtitan.ai. We will respond within the timeframe required by applicable law (45 days under CCPA; 30 days under GDPR).

13. Cookies and Tracking Technologies

We do not use cookies or tracking technologies for cross-site behavioral advertising.

14. Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that a minor has created an account or provided information, we will promptly delete that information and close the account.

15. Export Controls and Sanctions Compliance

The Service may not be used by individuals or entities subject to U.S. economic sanctions administered by the Office of Foreign Assets Control (OFAC). By using the Service, you represent that you are not located in, organized under the laws of, or subject to the jurisdiction of any sanctioned country or region, and that you are not listed on any U.S. government prohibited parties list.

16. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, integrations, technology, legal requirements, or business operations. We will notify you of material changes via email and a prominent notice on the Service no fewer than 14 days before the change takes effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

17. Contact and Data Protection Inquiries

AtmosAI, Inc. dba Marketing Titan
Privacy inquiries: privacy@marketingtitan.ai
Legal inquiries: legal@marketingtitan.ai
GDPR/DPA requests: privacy@marketingtitan.ai