Privacy Policy

1. Who this policy covers

It covers (a) our customers, meaning businesses and their users who sign up for LeadSmart ("Customers"), and (b) the people whose details Customers capture through Meta lead ads ("Leads").

For Lead data, the Customer decides why and how it is processed and acts as the Data Fiduciary; we process it on the Customer's behalf as a Data Processor.

2. Data we process

• Account data: name, business name, email, phone number, login credentials (stored hashed) and billing details.
• Lead data from Meta: fields submitted by Leads in the Customer's Meta (Facebook/Instagram) lead-ad forms, such as name, phone, email and any custom questions, plus form, ad and campaign identifiers.
• Google Sheets data: when a Customer connects Google Sheets, we write Lead data to the sheet(s) they choose, using the access they grant.
• Customer-added data: labels, notes and status updates added in the dashboard.
• Integration settings: connected Meta pages and forms, Meta Pixel / Conversions API settings, WhatsApp Business API settings (the Customer's own Meta API keys) and webhook URLs.
• Usage and technical data: IP address, device and browser information, log data and cookies. We use Google Analytics, the Meta Pixel and OpenAI (ChatGPT) tracking pixels on our website; see Cookies below.
• Payment data: payments are processed by Razorpay. Card and payment details are handled by Razorpay and are not stored by LeadSmart.

3. How we use data

• To provide the Service: capturing leads, showing them in the dashboard, syncing to Google Sheets, sending WhatsApp alerts to the Customer's business number, and sending lead data to webhooks the Customer configures (for example, n8n).
• To send Meta Pixel / Conversions API event signals that the Customer configures, so Meta can measure which leads convert.
• To manage accounts, trials, billing and invoices, and to provide support.
• To secure, maintain and improve the Service, and to meet legal obligations.

We do not sell personal data. We do not use Lead data for our own marketing.

4. Meta Platform data

Data received through Meta's platforms (lead ads, Pages, Conversions API, WhatsApp Business API) is handled in line with the Meta Platform Terms and Developer Policies. We use it only to provide the Service to the Customer who connected it, do not sell or license it, and delete it when it is no longer needed for that purpose or when the Customer or Meta asks us to.

WhatsApp Business API messaging runs on each Customer's own Meta API keys. The Customer's relationship with Meta, including Meta's fees, which the Customer pays to Meta directly, is governed by Meta's terms.

5. Google user data

When a Customer connects Google Sheets, we request access only to the Google Sheets the Customer selects, and use it only to sync leads to those sheets. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

6. Sharing

We share personal data only with:

• Service providers that host or run the Service for us (hosting on Hostinger Cloud, payments through Razorpay, and analytics through Google, Meta and OpenAI);
• Meta, Google and webhook endpoints, when the Customer connects them;
• Authorities, when the law requires it.

7. Storage, transfers and security

Data is stored on Hostinger Cloud servers operated by Hostinger. Where data is transferred outside India, we do so as permitted under the DPDP Act. We use reasonable security practices, including encryption in transit (HTTPS), access controls and limited staff access.

8. Retention

We keep account data while the account is active and for 90 days after closure, except where the law requires longer (for example, tax and invoice records). Lead data is kept until the Customer deletes it or closes the account, and is then deleted within 30 days.

9. Your rights

Under the DPDP Act, you can ask to access a summary of your personal data, correct or update it, have it erased, withdraw consent, nominate another person to exercise your rights, and raise a grievance. Leads should contact the business that ran the ad first; we will help that business respond.

10. Data deletion requests

To request deletion of your account data or of Lead data held in LeadSmart (including data received from Facebook or Instagram):

1. Email support@leadsmart.pro with the subject "Data Deletion Request".
2. Include your name, the email or phone number linked to the data and, for Leads, the business whose ad you responded to.
3. We will verify the request and confirm receipt within 7 days.
4. We will complete the deletion within 30 days, except for data we must keep by law, and confirm by email.

Customers can also delete leads directly from their dashboard.

11. Cookies

We use essential cookies to keep you signed in, analytics and advertising cookies and pixels (Google Analytics, Meta Pixel and OpenAI (ChatGPT) tracking) to understand site usage and measure our ads. You can manage cookies in your browser settings.

12. Children

The Service is for businesses and is not meant for anyone under 18. We do not knowingly process children's data.

13. Grievance Officer

Name: Jaideep Chauhan
NDS STUDIO LLP, H33, IT Park, Udaipur, Rajasthan 313001, India
Email: support@leadsmart.pro
Phone: +91 98718 22778

We will acknowledge grievances within 48 hours and resolve them within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.

14. Changes

We may update this policy. We will post the new version here with a new effective date and, for significant changes, notify Customers by email.