Legal

Terms of Service

Last Updated: April 18, 2026  ·  Includes: Acceptable Use Policy & Data Processing Agreement

Permitted
  • Enrich B2B email lists for outreach
  • Use enriched data in your CRM or sales tools
  • Integrate with n8n, Zapier, HubSpot, and similar platforms
  • Build products on our API with a written reseller agreement
Prohibited
  • Sending spam, phishing, or unsolicited bulk email
  • Reselling enriched data to third parties
  • Using the service for illegal or harmful purposes
  • Reverse-engineering our data sources or scoring models
Required
  • Comply with CAN-SPAM, GDPR, and applicable email laws
  • Independently verify enriched data before relying on it
  • Keep your API key confidential
  • Honour recipient opt-out and deletion requests promptly

01 Agreement to Terms

By accessing or using the Leadvar website (leadvar.com) or API service, you confirm that you have read, understood, and agree to be bound by these Terms of Service ("Terms"). If you do not agree, do not access or use the Service.

The Service is operated by Daniil Shurko, an individual based in Belgium, trading as Leadvar ("Leadvar", "we", "us"). These Terms apply to all visitors, registered users, and anyone who accesses or uses the Service in any capacity. Use of the Service by an entity constitutes acceptance of these Terms on behalf of that entity. The individual accepting these Terms represents that they have authority to bind the entity to this agreement.

Business users only. This Service is intended exclusively for business users acting in a professional or commercial capacity. By using the Service you confirm you are not acting as a consumer. Statutory consumer rights and cooling-off periods under EU and Belgian consumer law do not apply to this agreement.

You must be at least 18 years of age to use the Service. By using the Service you represent that you meet this requirement.

02 Use License

Leadvar grants you a limited, non-exclusive, non-transferable, revocable licence to use the Service for lawful business purposes, subject to these Terms.

Permitted uses

Reseller enquiries

If you wish to build a product or service on top of the Leadvar API, or redistribute enriched data to third parties, a separate written reseller agreement is required. To enquire, email hello@leadvar.com with the subject line "Reseller Enquiry".

Upstream data sources

Enriched data returned by the API is sourced from licensed third-party providers including ZeroBounce and Apollo. Your use of enriched data is subject to any applicable restrictions in those providers' own terms of service in addition to these Terms. Leadvar makes no warranty that upstream provider terms permit any specific use case beyond what is expressly permitted here.

Prohibited uses

03 Credits & Billing

Credit system

One credit equals one API enrichment call. A credit is deducted only on a successful HTTP 200 response. No credit is deducted for error responses (4xx/5xx) or invalid requests.

Trial & onboarding

Pricing & payment

Subscriptions

Failed payments

Refunds

Prepaid credits are non-refundable. If you believe you were charged in error, contact hello@leadvar.com within 14 days and we will review the case in good faith. We reserve the right to issue service credits rather than cash refunds.

04 Data Accuracy Disclaimer

Enriched data is probabilistic and not guaranteed to be accurate, current, or complete. Do not rely on it for legally binding decisions without independent verification.

05 Acceptable Use Policy

Use of the API or enriched data for any of the following purposes is strictly prohibited. Violations may result in immediate account suspension, forfeiture of prepaid credits, and referral to relevant authorities.

Phishing & fraudImpersonating organisations or individuals, or deceiving recipients into disclosing credentials or financial information
Spam & unsolicited messagingSending bulk commercial messages without consent, in violation of CAN-SPAM, GDPR, CASL, or equivalent regulations in any jurisdiction
Harassment & abuseTargeting individuals with threatening, abusive, defamatory, or malicious communications of any kind
Illegal activityMoney laundering, drug or weapons trafficking, financial fraud, sanctions violations (OFAC/EU), or any other purpose contrary to applicable law
Unauthorised data resaleDistributing, selling, or licensing enriched data to third parties without a separate written reseller agreement with Leadvar
Rate limit circumventionAttempting to bypass API rate limits, authentication controls, or quota systems through any technical or procedural means
Competitive intelligence scrapingUsing the API to harvest data with the intent to replicate Leadvar's service, database, or scoring methodology
Malware & infrastructure attacksInjecting malicious payloads, conducting denial-of-service attacks, or exploiting vulnerabilities in Leadvar's systems

06 User Responsibilities

Legal compliance

You are solely responsible for ensuring your use of enriched data complies with all applicable laws, including the laws of recipient jurisdictions:

Leadvar provides data enrichment only. We do not send communications on your behalf. You are the data controller responsible for all outreach activity.

API key security

Account security

You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account. Notify us immediately at hello@leadvar.com if you suspect any unauthorised access.

07 Data Processing Agreement

This section constitutes the Data Processing Agreement ("DPA") between Leadvar (Data Processor) and you (Data Controller) as required by GDPR Article 28. By using the Service you enter into this DPA without requiring a separate signature.

Subject matter

Leadvar processes the email addresses you submit via the API solely to return enrichment data (validation status, person details, company firmographics, lead score). No further processing is performed on your data for any other purpose.

Documented instructions

Leadvar processes personal data only on your documented instructions, which are defined by the nature of the Service: you submit an email address and receive an enrichment response. Leadvar will not process your data beyond this scope.

Confidentiality

All Leadvar personnel authorised to process personal data are bound by appropriate confidentiality obligations, either by contract or by operation of law.

Security measures

Leadvar implements appropriate technical and organisational measures, including: HTTPS/TLS 1.3 encryption in transit, encrypted storage at rest on Hetzner infrastructure (Germany), strict access controls limiting data access to authorised personnel, and API request logs retained for no more than 30 days.

Sub-processors

You provide general written authorisation for Leadvar to engage the following sub-processors. We will give at least 14 days' advance notice before adding or replacing any sub-processor, giving you the opportunity to object.

ZeroBounce Email validation — addresses are forwarded for real-time validation and not retained by ZeroBounce beyond the response United States
Apollo Person & company enrichment — addresses used as lookup keys; responses contain publicly sourced profile data United States
Hetzner Cloud infrastructure — hosts our API servers and encrypted database backups Germany (EU)
Stripe Payment processing — handles billing data; Leadvar does not store payment card numbers United States

International transfers

For transfers of personal data from the EU/EEA to US-based sub-processors (ZeroBounce, Apollo, Stripe), we rely on EU-US Data Privacy Framework (DPF) certification where applicable, and Standard Contractual Clauses (SCCs) under GDPR Article 46(2)(c) as a fallback, supplemented by Transfer Impact Assessments where required. Copies of applicable transfer mechanism documentation are available on request at hello@leadvar.com.

Data subject rights

If a data subject contacts Leadvar directly to exercise a right under GDPR (access, erasure, portability, restriction), we will notify you promptly and provide reasonable assistance. As data controller, you remain responsible for responding to such requests within statutory timeframes.

Data breach notification

In the event of a personal data breach affecting your data, Leadvar will notify you without undue delay — and in any case within 72 hours of becoming aware — providing sufficient information for you to fulfil your obligations under GDPR Articles 33 and 34.

Deletion on termination

Upon termination of your account or upon written request, Leadvar will securely delete all personal data relating to you within 30 days, except for API logs retained for fraud and compliance purposes, and financial records retained for the statutory seven-year period.

Audit rights

You may request a written summary of our security and processing measures once per calendar year at no charge. Physical or technical audits may be conducted by mutual agreement with at least 30 days' written notice, and at your reasonable cost.

Data Protection Impact Assessment

Where your use of the Service may require a Data Protection Impact Assessment (DPIA) under GDPR Article 35, Leadvar will provide reasonable assistance and documentation of our processing activities upon written request to hello@leadvar.com.

08 API Terms & Rate Limits

ParameterValue
Rate limit5 requests per second per API key
AuthenticationValid API key required in x-api-key header on every request
Uptime target99.9% monthly — best-effort; no binding SLA
Maintenance windowsCommunicated by email 7 days in advance where operationally possible

HTTP response codes

CodeMeaning
200Success — enrichment data returned
401Invalid or missing API key
402Insufficient credits — top up your balance to continue
422Invalid input — verify email address format
429Rate limit exceeded — retry after 1 second
500Server error — retry after 60 seconds; contact support if the issue persists

API access may be suspended without prior notice if we detect patterns consistent with abuse, excessive error generation, or rate limit circumvention.

09 Limitation of Liability

To the maximum extent permitted by applicable law, the following limitations apply to all claims arising from or related to the Service, regardless of the legal theory on which the claim is based.

Some jurisdictions do not allow the exclusion of certain implied warranties or the limitation of liability for incidental or consequential damages. In such jurisdictions, our liability will be limited to the maximum extent permitted by applicable law.

10 Warranties Disclaimer

Except as expressly stated in these Terms, the Service is provided on an "as is" and "as available" basis without warranty of any kind, express or implied. Leadvar specifically disclaims:

11 Indemnification

You agree to indemnify, defend, and hold harmless Leadvar and its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising from or related to:

12 Termination

Termination by Leadvar

We may suspend or terminate your account immediately and without prior notice if:

Upon termination by Leadvar for cause: API access is revoked immediately, prepaid credits are forfeited without refund, and we may retain logs for compliance and fraud-prevention purposes as permitted by our Privacy Policy.

Termination by you

You may cancel your subscription or close your account at any time via the account dashboard or by contacting hello@leadvar.com. Cancellation of a monthly subscription takes effect at the end of the current billing period.

13 Intellectual Property

14 Governing Law & Disputes

These Terms are governed by the laws of Belgium, without regard to its conflict-of-law provisions.

Any dispute arising from these Terms or the use of the Service shall first be subject to a 30-day good-faith negotiation period initiated by written notice to hello@leadvar.com. If unresolved, disputes shall be submitted to the competent courts of Belgium.

You waive any right to participate in class-action proceedings against Leadvar, to the extent permitted by applicable law.

Legal notices should be sent to: hello@leadvar.com

Force majeure

Leadvar is not liable for any failure or delay in performance caused by circumstances beyond our reasonable control, including but not limited to infrastructure or cloud provider outages, third-party API failures (ZeroBounce, Apollo, Stripe), natural disasters, acts of government, or internet disruptions. We will notify affected users and resume performance as soon as reasonably practicable.

15 Changes to These Terms

We may modify these Terms at any time. For material changes, we will notify registered users by email at least 14 days before the change takes effect. For non-material clarifications, the updated "Last Updated" date constitutes sufficient notice.

Continued use of the Service after the effective date of changes constitutes your acceptance of the revised Terms. If you do not accept the changes, you must discontinue use of the Service before the effective date.

16 Contact & Legal Notices

For questions, concerns, or legal notices regarding these Terms:

If any provision of these Terms is found to be unenforceable by a court of competent jurisdiction, the remaining provisions continue in full force and effect.

Leadvar's failure to enforce any right or provision of these Terms at any time shall not constitute a waiver of that right or provision. Any waiver must be made in writing and signed by Leadvar to be effective.

These Terms are drafted in English. The English version is the governing version of this agreement. In the event of any conflict between the English version and a translation, the English version prevails.