Last updated: 2026-10-24 Version: 2026-10-24-draft עברית

Terms of service

These terms govern your use of Hotlead, whether you use it as a client who advertises and pays for verified sales, or as a provider who gives advertising space on its website (or delivers leads) and earns a share of those sales.

1. The service

Hotlead is a pay-per-conversion advertising marketplace operated by [LEGAL ENTITY NAME], company number [COMPANY NUMBER], registered address [REGISTERED ADDRESS] (“Hotlead”, “we”, “us”). Through our website at https://hotlead-app.netlify.app, the portal, our API, the site script, and the forms and links we host:

• Providers are owners of websites with advertising space. A provider registers its website, chooses the banner spots on it that it gives to Hotlead (“ad spaces”), installs the Hotlead site script on the website, sets its rules and the percentage of each sale it wants to receive, and earns a share of the success fee on the sales that its ad spaces bring. A provider that delivers leads itself may also send them through our API.
• Clients are businesses that advertise. A client uploads banner images, chooses where a click on a banner goes (its own website or a short form hosted by Hotlead), states the percentage of each sale it will pay, connects its CRM, payment, invoicing or store systems, and pays only for sales that are verified in those systems.
• Hotlead matches clients' banners with providers' ad spaces automatically, serves the banners on providers' websites, records clicks, attaches each click to the client's form, order or CRM record, detects sales from the client's connected systems, calculates fees and shares, and screens for fraud. A visitor who clicks a client's banner is that client's lead. Hotlead also supplies its own leads (“Hotlead Direct”) and can launch advertising and landing pages for a client.

Each match between a client and a provider, once both have approved it (or it is approved automatically, see section 6), forms a contract between them in the portal at the agreed rate; these terms apply together with it. If they conflict about the use of the platform, these terms prevail.

The service is for businesses. By creating an account, connecting a system, installing the site script or otherwise using the service you accept these terms on behalf of yourself or the business you represent, and you confirm you have the authority to do so. When you create an account yourself, you accept these terms and the Privacy policy by ticking the box at sign-up, and we record which version you accepted and when.

2. Accounts

• Give accurate information and keep it up to date, including, for a provider, the address of its website, what the website is about, its audience and its approximate number of monthly visitors. Use a notification email you can read.
• Credentials. You sign in to the portal with your email address and password. Your account may also have an API key, which is used to call our API (for example to send leads). Keep your password and API key secret: you are responsible for what is done with your account. Your API key is shown once and never sent by email, so store it safely when it is shown. If a key may have been exposed, replace it in the portal (you need your password), end the old key at once, and tell us. Signing in or resetting your password does not change your API key.
• The site script. The line of code that installs the site script carries a site identifier. That identifier is public by nature (it appears on every page of the website) and is not a password: it only lets the script show the ad spaces of that website and tell us that the script is installed. A one-time link to mark ad spaces visually on your own website works once and for a short time; do not share it.
• One-button installs. If you ask us to install the site script for you (section 4), you give us a limited access grant for your website, your website builder or your Google Tag Manager account. You may withdraw it at any time, as section 4 explains.
• New provider accounts are reviewed and approved by us. Until a provider is approved, no client banner is served on its website and it cannot be matched or earn a share. We may reject a provider, or suspend an account, where these terms are breached or we reasonably suspect fraud or misuse.
• Hotlead administrators can see data across accounts to run and support the service.

3. Acceptable use

Everyone. You must not, and must not help anyone to:

• submit leads that are fake, purchased without the person's consent, test data presented as real, or copies of the same person to inflate counts;
• submit a lead in a regulated industry (health, insurance, finance, mortgage) without recording the person's consent, or collect or use leads in breach of the law that applies to you, including marketing, consent and privacy law;
• set CRM record identifiers on leads yourself (only Hotlead's own provider may do this), or alter, delay or hide a sale, payment or deal stage in a connected system to avoid or change a fee;
• get around duplicate checks, fraud checks, daily or total caps, rate limits, click-rate controls, or the rules that stop the same customer being charged twice;
• probe the marketplace to learn other users' prices, ranges, limits or demand beyond what the portal shows you, or scrape it;
• use the service to send unsolicited email: an email campaign may only go to recipients who have agreed to receive it;
• interfere with, overload or attempt unauthorised access to the service or to another user's data, website or connected systems, or alter the site script or the click links we issue;
• use the service for anything unlawful.

Providers. A provider must not, and must not help anyone to:

• generate clicks or impressions that do not come from a real visitor's genuine interest: clicking banners on its own website, asking, paying or rewarding anyone to click, using automated tools, bots, scripts or click farms, or reloading pages automatically;
• inflate impressions: hide a banner, make it very small or invisible, stack it under other content, show it outside the visible page, or load the site script on pages, websites or apps that are not the registered website;
• place ad spaces dishonestly: misrepresent its website, topic, audience or visitor numbers; cover, crop, alter or reframe a banner or its “Ad” label; place a banner so that it can be mistaken for the website's own content or navigation; or place it next to content that is unlawful or that the provider's own rules would exclude.

Clients and banners. A banner must be a single image file (no HTML, scripts or other active content) in the size it is uploaded for. A client must make sure that each banner and its destination:

• are lawful in every country the client targets, and that the client has all rights needed in the image, text, trademarks and any person shown;
• contain no false or misleading claims about the product, price, offer or the advertiser, and no claim the client cannot substantiate; in a regulated industry, meet the rules of that industry;
• lead to the advertised offer of the client named on the account, with no hidden redirect, malware, or collection of data the visitor is not told about;
• do not imitate the provider's website, a system message, or another business.

A client must not remove, block or rename the click field that the site script adds to its forms, or strip the click from its orders, in order to avoid attribution while it keeps receiving banner traffic.

Blocking, reporting and removal. A provider may exclude fields (industries), block specific clients and, where the portal offers it, require its own approval before a new client's banner is shown. A provider may report any banner to us. We may refuse, pause or remove any banner, ad space, match or account, without prior notice, where we reasonably consider that it breaches these terms or the law, harms visitors or is reported with good reason.

4. Connecting third-party systems and websites

Clients: sales systems

Clients connect systems such as HubSpot, Salesforce, Zoho, Pipedrive, GoHighLevel, Close, ActiveCampaign, Stripe, PayPal, Intuit QuickBooks, Xero, Shopify, Wix and others listed in the portal. By connecting a system you:

• confirm that you own the account or are authorised to give us access, and that doing so does not breach your agreement with that vendor;
• authorise Hotlead to use the key, token or app permission you provide to write a lead reference (with the visitor's contact details where the visitor agreed, see below), the custom fields it needs and the webhooks or subscriptions it needs, and to read the structure of your system, the stage and amount of the deals we created, payment, invoice and order status and amounts, the click identifier we attached, and the payer's email and phone for matching, as described in our Privacy policy. Where you ask us to, we read contact email addresses so you can use them in an email campaign you send from your own email provider;
• understand that during onboarding we create one tagged test lead in your CRM and try to remove it again; if the vendor does not let us delete it, we tell you which record to delete;
• understand that the record Hotlead creates in your CRM is a lead reference that carries the lead identifier, the industry, the estimated value and a return address. For a lead from the Hotlead form whose visitor ticked the consent line that names your business, it also carries the visitor's name, phone number and email address, and you may contact that person about their enquiry by phone, email, SMS or WhatsApp under that consent; you must honour a withdrawal of it. Other leads carry no contact details. Contact details that a visitor types into a form on your own website go to your own systems, not through Hotlead.

Clients: your own website as the destination. If you choose your own website as the destination of a banner, the click is passed to your website in its address (the parameter ar_click). On Shopify and Wix the click is read from the order. On any other website you install the site script (by one-button install, or by pasting it), and the script adds the click, as a hidden field, to the forms on the page the visitor arrives on, so that the contact reaches your CRM with the click. You are responsible for your website, your forms and the systems they send to.

Providers: your website and the site script

• The scan. When you add your website, or ask for it, we read your home page once from our servers (identified as a Hotlead site scan) to find out which platform it is built on, whether Google Tag Manager is on it, and which banner spots it seems to have. We propose those spots; nothing becomes an ad space until you choose it. You confirm that you are entitled to have the website read in this way.
• Installing the script. You install one line of code on your whole website. You may paste it yourself, send it to your web developer, or ask us to install it with one button: on WordPress you approve an application password on your site's own “Authorize application” screen and we use it to install and activate the Hotlead plugin (published in the WordPress.org plugin directory) through your site's REST API; on Google Tag Manager you sign in with Google and grant access to Tag Manager, and we create the Hotlead tag and publish your container; on Wix and Shopify installing our app adds the script through the platform's app embed.
• What the grant allows. We use a one-button grant only to install, update, check and remove the Hotlead script, plugin or tag. Publishing a Google Tag Manager container publishes the whole container version, including changes that are already pending in your workspace: review those before you ask us to publish. Any change we make to your website is made at your request and on your behalf.
• Marking spaces. You can mark or adjust ad spaces on your own website with a Hotlead toolbar that a one-time link opens.
• Your responsibility. You are responsible for your website, its platform, its other code and its compliance (including section 9). We are not responsible for the effects on your website of themes, plugins, caches, consent tools or other code we do not control.

Revocation. You can disconnect any system in the portal at any time. We then ask the vendor to remove the webhooks we created, delete the stored credential, and stop reading from that system. For a Salesforce, Zoho, QuickBooks or Xero connection that holds a lasting access grant, we also ask the vendor to cancel that grant (best effort, as the Privacy policy explains). For every other system, and if that request fails, delete the key or remove the Hotlead app inside the vendor's own account to remove our access completely. A provider can remove the site script at any time (remove the line, the plugin, the tag or the app); it can withdraw a one-button grant in its WordPress user profile (application passwords), in its Google account (third-party access) or by removing our app. Without a working connection we cannot detect outcomes from that system, and without the script no banner is served.

If your setup is unclear. If we cannot confirm how your CRM is set up (for example which pipeline or stage to use), we hold new leads instead of writing them into the wrong place, and tell you in the portal. Leads held in this way are delivered once you confirm the setup.

Connected systems and website platforms are run by their vendors, who may change or withdraw their interfaces. We do not control them and are not responsible for their availability or accuracy.

5. Leads, conversions and verification

• The click is the lead. A visitor who clicks a client's banner is that client's lead. The click is recorded by Hotlead and passed on with the visitor: to the client's own website, or to the Hotlead form, where the lead is then delivered to the client's CRM (with the visitor's name and contact details only when the visitor agreed to that on the form, section 4).
• A conversion is recorded when a connected system of the client reports a sale that we can attribute to a click or lead: a deal reaching the won stage the client confirmed, or a payment, invoice or order. A sale is attributed through the click carried on the order or on the CRM record, or by comparing fingerprints (hashes) of the payer's email address and phone number with those stored on the lead. The period after a banner click within which a sale is attributed to it: [ATTRIBUTION WINDOW FOR BANNER CLICKS].
• Impressions and clicks are not charged. Test leads created during onboarding are marked as tests and are never charged.
• The same customer is not charged twice for the same contract, and one payment reported by two systems is charged once. If a sale cannot be attributed to a click or lead, no conversion is recorded for it.
• Outcomes in your connected systems are the evidence we rely on. You are responsible for keeping them accurate and for keeping the connection, and on your own website the site script and its click field, working.
• Matching by customer identity (DRAFT, pending legal review). A sale is also attributed to a lead when the customer in the client's connected system (a won deal, a payment, an invoice or an order) has the same email address or phone number as the lead, compared by fingerprints, including deals Hotlead did not create and records that were changed or removed. The first sale of a customer counts only within the attribution window: [ATTRIBUTION WINDOW: 180 DAYS, DRAFT] from the click that brought the customer (or from the lead's creation when there was no click), unless the contract sets another period; later sales follow the contract's term. A sale of a customer the client already had before the lead is reviewed by our staff before it is charged, and the client may dispute any charge (section 7).
• When a record Hotlead created can no longer be found in the client's system, we tell the client once, and the lead stays attributable by the customer's identity within the window.
• [NON-CIRCUMVENTION CLAUSE]
• [AUDIT RIGHT]
• [DUTY TO KEEP A SALES SYSTEM CONNECTED] If a client has no working connection that reports its sales for 72 hours, its Hotlead forms and banners pause until a system is connected again; leads already delivered stay attributable within the window.
• [ESTIMATED BILLING WHEN NO SYSTEM IS CONNECTED]

6. Fees and billing

How the price is set

• A percentage of each sale. The price is always a percentage of each verified sale. There is no charge for impressions, clicks or leads as such.
• Ranges. The client states the percentage of each sale it will pay and a negotiation range around it (for example 10% with 2 points either way, that is 8% to 12%). The provider states the percentage of each sale it wants to receive and a range around it.
• Platform fee. Hotlead's platform fee is a percentage of what the client pays and comes out of it: the provider receives the client's rate less the platform fee. For banner matches it is a platform default that Hotlead may set for a client or a provider individually; where both have their own, the lower one applies. The fee of a match is fixed when both sides approve it and does not change for that contract; a change of the fee re-prices only matches still waiting for approval, which are then proposed to both sides again. Each side's account shows the fee of each of its matches.
• Match. A match is possible only when the client's range, after the platform fee, overlaps the provider's range, and the other matching conditions are met (fields, countries, banner sizes, the provider's rules). The proposed rate is the middle of the overlap. If the ranges do not overlap, there is no match.
• Approval. Each match is proposed to both sides with the exact rate that applies to that side. Each side approves it, or has chosen to approve automatically any match whose rate is inside its range; an automatic approval binds that side in the same way as an approval given by hand. The contract is formed when both sides have approved.
• No unilateral change. Once a match is agreed, neither side may change its rate unilaterally. A change of a party's own percentage or range applies only to matches proposed after the change. A party may pause or end a match, and a provider may block a client, with effect for clicks made afterwards; sales attributed to earlier clicks are charged at the agreed rate (section 13).
• Contracts agreed before this version on another price basis (such as a fixed amount per converted lead) continue on their agreed terms until they end.

Clients

• You pay the agreed percentage of each verified sale attributed to a click on your banner or to a lead delivered to you: charged on each collected payment where you have a payment, invoicing or store system connected, otherwise on the won deal. A contract may have a term in months, counted per customer from that customer's first charged sale; sales after the term are not charged.
• A sale amount above a platform ceiling is not used as the basis for a charge.
• You see the rate you pay. How it is divided between the provider and Hotlead is not part of what you pay.
• Invoicing, payment method, payment due dates, currency, taxes and late payment: [FEES AND INVOICING TERMS].

Providers

• For each charged conversion, your share is the client's charge less the platform fee. For leads of Hotlead Direct, Hotlead keeps the whole success fee.
• Earnings shown in your dashboard are accrued on charges recorded to clients. They are not a promise of payment: a payout depends on Hotlead having collected the fee, on the payout terms below, and on payouts being switched on. A share may be withheld or reversed where the charge is reduced after a dispute, or where the click or sale is found to breach section 3 or 8. Payout method, timing, minimums and taxes: [PROVIDER PAYOUT TERMS].

7. Disputes and refunds

A client may dispute a conversion in the portal, giving a reason (duplicate, fraudulent, quality, already a customer, or other) and a description, and may request a refund amount. A Hotlead administrator reviews the dispute and decides it; where the dispute is upheld, the charge, and the provider's share, are reduced by the approved refund. Time limit and refund rules: [DISPUTE AND REFUND WINDOW].

8. Lead quality and fraud

• We screen leads with automatic rules (repeated email or phone, the same person across providers, bursts, repeated device or IP, known test data), and banner traffic with click controls (a limit on clicks from the same network address on the same ad space, clicks too soon after the banner was shown, ad spaces whose click rate is far above normal). A signal is a score for review. It does not by itself reject a lead or prove fraud, and we may act on it, including by not counting a click, refusing a lead, pausing an ad space or a banner, withholding a charge or share, rejecting or suspending a provider, or closing an account.
• We do not guarantee the quantity, quality or conversion rate of leads or clicks, the number of impressions, matches or sales, the performance of any banner or campaign, or that a lead will become a customer.

9. Data and privacy

• Our Privacy policy explains what we collect and how we use it, and how you can download your account data or ask for your account to be deleted.
• You give us the right to process the data you put into the service or connect to it, to the extent needed to provide the service and as the Privacy policy describes.
• You are responsible for having the consent, notices and legal grounds that your own use requires, including for the people whose leads you supply or receive, and for the recipients of any email campaign you send.
• Providers. The site script on your website causes your visitors' browsers to contact Hotlead to load banners, and a click takes the visitor to a client. You are responsible for giving your own visitors the information, and for obtaining any consent, that the law of your jurisdiction and of your visitors requires for the site script, the banners and the clicks (for example in your privacy notice and, where required, through your consent tool), and for describing Hotlead as the Privacy policy does.
• Clients. Where a click goes to your own website, you are responsible for the information and consent your website gives about the forms, the hidden click field and the systems your forms send to.
• Forms we host show the consent text the campaign carries. Where you supply that text or a form, you are responsible for its accuracy and lawfulness.

10. Intellectual property

Hotlead, the software, the portal, the API, the site script, the plugin and apps, the site and their content belong to [LEGAL ENTITY NAME] or its licensors. We give you a limited, non-exclusive, non-transferable right to use the service, and a provider the right to run the site script on its registered website, while your account is active and in line with these terms. You keep your rights in your data, banners and materials. A client gives Hotlead and the providers it is matched with a non-exclusive, royalty-free right to store, reproduce and display its banners (unchanged, at their size) on the providers' ad spaces and in the portal, and to link them to the chosen destination, for as long as the banner is active and as needed for reports and disputes afterwards. A provider gives Hotlead the right to show banners in its ad spaces and to read its website as section 4 describes. Do not copy, reverse engineer or resell the service.

11. Disclaimers

The service is provided “as is” and “as available”. We do not promise any level of availability, response time or support, that the service will be uninterrupted or error-free, that banners will be served in every ad space or at any volume, that the site script will work with every website, theme or plugin, that connections to third-party systems will keep working, or that outcomes will be detected in every case. To the extent the law allows, we exclude all other warranties. Nothing in these terms limits any right you have that cannot be limited by law.

12. Limitation of liability

[LIMITATION OF LIABILITY]

13. Termination

• You may stop using the service at any time: disconnect your systems, remove the site script from your website, remove ad spaces, banners or websites, end matches and contracts, and ask for your account to be deleted in the portal, or contact us. A deletion takes effect no sooner than 7 days after you confirm it, as the Privacy policy explains. Notice period, if any: [NOTICE PERIOD].
• We may suspend or end your access, reject a provider, stop serving banners or cancel a contract where you breach these terms, where we reasonably suspect fraud or misuse, or where the law requires.
• When a connection ends, the stored credential is deleted (see section 4). Charges and shares for conversions recorded before the end, for sales attributed (section 5) to clicks made before the end, and any dispute about them, stay in effect as set out in section 6 and [FEES AND INVOICING TERMS].
• What happens to data after closure, and what is kept as billing and dispute evidence, is described in the Privacy policy.

14. Changes

We may change these terms or the service. The date at the top shows the last update, and the version shows which text you accepted. If a change is significant, we will tell account holders by email or in the portal. Continued use after a change takes effect means you accept it; if you do not, stop using the service. A change does not alter the rate of a match already agreed.

15. Governing law

These terms are governed by the law and subject to the courts of: [GOVERNING LAW / JURISDICTION].

16. Contact

[LEGAL ENTITY NAME]
[REGISTERED ADDRESS]
Company number: [COMPANY NUMBER]
Email: [CONTACT EMAIL]