Privacy Policy

This policy explains how LeadsDesk handles personal data in LeadsDesk, in line with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Information Technology Act, 2000.

1. Two kinds of data

• Your account data — your name, business name, e-mail, mobile number, GSTIN, billing details, and how you use the service. For this data we decide why and how it is used (we are the "Data Fiduciary").
• Data you put into your CRM — your leads, customers, staff, notes, call logs and attendance (including the location of a punch). For this data your business is the Data Fiduciary and we only process it on your instructions to run the service (we are your "Data Processor"). Your business is responsible for giving notice to and getting consent from those people where the law requires.

2. Why we use your account data

• To create and run your account, sign you in securely and keep it safe.
• To take payments and issue GST invoices.
• To send service messages (trial ending, payment due, security alerts). We send marketing only if you agree, and you can stop it any time.
• To meet legal duties such as tax records.

3. Who else handles data

We share data only with service providers that help us run LeadsDesk, under contract and only as needed: our hosting provider (servers and databases), Cashfree Payments (subscription payments — we never see or store your card or UPI details), e-mail delivery, and Google or Meta only when you connect your own Sheets or ad accounts. We do not sell personal data.

4. Security

Each company's data is kept in its own separate database. Connections are encrypted (HTTPS); passwords are stored only as secure hashes; secrets and backups are encrypted; access is logged. Two-step sign-in is available for every user.

5. How long we keep data

Account data is kept while your account is active and as long as tax law requires afterwards (invoices: 8 years). CRM data is kept while you subscribe and for 90 days after cancellation so you can return or export it; then it is deleted from live systems, and from backups as they expire.

6. Your rights

Under the DPDP Act you can ask to access, correct or erase your personal data, withdraw consent, and nominate someone to act for you. If you are a lead or employee of one of our customers, please contact that business first; we will help them answer you. To use your rights, write to us. We reply within 30 days.

7. Cookies

We use only the cookies needed to sign you in, remember your company code and keep the service secure. We do not use advertising cookies inside the CRM.

8. Grievance Officer

Grievance Officer, LeadsDesk. If you are not satisfied with our answer, you may complain to the Data Protection Board of India.

9. Changes

We will post any change on this page and, for important changes, tell account holders by e-mail before it applies.