Where leads can come from (and consent)

Leads enter a workspace in exactly three ways:

• Opt-in capture forms on your own site. The person must tick your consent checkbox; we store the exact text shown, the time and the page. A hidden honeypot field and rate limits block bots.
• CSV import of contacts you already have a lawful basis to process (for example consent you collected elsewhere, or an existing customer relationship). The importer must confirm this; we record who confirmed, the basis and when.
• API calls from your own systems with a key that has the leads:write scope, which must include the consent or basis text.

Purchased or scraped lists are not allowed under our terms. Erased or unsubscribed addresses are suppressed so they aren't re-imported.