Security
LeadPilot CRM handles customer enquiries, Gmail data and calendar events, so the product is structured around protected app routes, workspace separation and secure integration handling.
LeadPilot CRM is structured around company workspaces. Users are linked to a workspace membership and app pages read data through the current workspace context.
Each company workspace is kept separate.
Team roles include owner, admin, user and read-only style workflows where available.
Private CRM routes are separate from public marketing pages.
Gmail and Google Calendar access is requested only when a user connects an account. Tokens are handled server-side and are not exposed in public pages or browser demo content.
Gmail is used for lead capture rules.
Calendar access is used for quote visits and won-job events.
Users can disconnect Google access from their Google Account permissions.
Real dashboard pages sit behind authenticated workspace context. API routes validate incoming data and use environment variables for secrets.
No hard-coded production API secrets.
Public demo uses dummy data only.
Public ingestion endpoints are separated from authenticated app pages.
The database is designed with workspaces, members, leads, customers, jobs, notifications, connected accounts, webhook events and audit logs. Supabase row-level security policies are part of the setup.
Workspace-level data model.
Audit logs for important actions where available.
Supabase RLS setup documented for production hardening.
Each company workspace is kept separate.
Private dashboards stay behind authentication.
Google data is used only for CRM workflows requested by the user.
OAuth tokens are handled server-side and are not exposed in the frontend.
Audit logs are used for important workspace actions where available.
Public demo pages use sample data only.
For deletion or privacy requests, contact dolans.uk@gmail.com.
Review privacy, terms, Google data use and deletion information.
Product demo
The demo uses dummy data only. Your real CRM stays protected behind login.
