Privacy Policy

1. Introduction

This Privacy Policy explains how LeadVexo (“LeadVexo”, “we”, “us”) collects, uses, shares and protects information when you visit our website, request a demo, or use the LeadVexo platform, including our CRM, AI Calling and WhatsApp features (together, the “Services”).

By using the Services you agree to the practices described in this policy. If you do not agree, please do not use the Services.

2. Our role: controller and processor

For information about our own website visitors, demo requests and account holders, LeadVexo acts as the data controller.

For information our customers upload or collect through the Services — for example their leads, contacts, call recordings and WhatsApp conversations (“Customer Data”) — our customer is the controller and LeadVexo processes that data on the customer’s behalf and according to their instructions. Customers are responsible for having a lawful basis and giving any notices required to collect and use Customer Data, including for calls and messages.

3. Information we collect

• Account information: name, work email, phone number, business name, password (stored hashed) and sign-in details, including Google sign-in if you choose it.
• Workspace and onboarding information: business type, team size, lead sources, settings and preferences.
• Customer Data: leads, contacts, notes, tasks, projects, custom fields and files you or your team add or import.
• Communication data: WhatsApp messages, Meta Lead Ads submissions, call logs, recordings, transcripts and AI-generated call summaries, where you enable these features.
• Integration credentials: WhatsApp Business API tokens, app secrets and calling provider keys you connect.
• Demo and contact requests: details you submit through our contact forms.
• Usage and device data: log data, IP address, browser type, pages visited and actions taken, used to operate and secure the Services.

4. How we use information

• To provide, operate and maintain the Services, including AI calling and WhatsApp features you enable.
• To authenticate users, keep sessions secure and prevent fraud or abuse.
• To respond to demo requests, support questions and other communications.
• To process billing and manage subscriptions.
• To monitor performance, fix errors and improve the Services.
• To send service-related notices, such as security alerts and changes to these terms.
• To comply with legal obligations and enforce our agreements.

5. AI calling and WhatsApp

When a customer enables AI Calling, LeadVexo places or receives calls on the customer’s behalf using a telephony and voice AI provider. Calls may be recorded and transcribed, and summaries are generated and stored in the customer’s workspace.

When a customer connects WhatsApp, messages are sent and received through Meta’s WhatsApp Business Platform using the customer’s own Meta account. Meta’s own terms and privacy policy also apply to those messages.

We do not use Customer Data to train general-purpose AI models for other customers.

6. How we share information

We do not sell personal information. We share information only as follows:

• Service providers that help us run the Services — such as cloud hosting, email delivery, telephony and voice AI providers, and payment processors — under contracts that limit their use of the data.
• Meta Platforms, when you connect WhatsApp or Meta Lead Ads, to deliver and receive messages and form submissions.
• Within your organisation, according to the roles and permissions your workspace administrators configure.
• When required by law, or to protect the rights, safety and security of LeadVexo, our customers or others.
• In connection with a merger, acquisition or sale of assets, subject to this policy.

7. Data security

We use industry-standard measures to protect information, including encrypted connections (HTTPS), hashed passwords, short-lived access tokens and httpOnly session cookies. WhatsApp and calling credentials are encrypted per workspace and are never returned to the browser after they are saved.

No method of transmission or storage is completely secure, but we work continuously to protect your information and will notify affected customers of a security incident as required by law.

8. Data retention

We keep account information for as long as your account is active. Customer Data is retained until the customer deletes it or closes their workspace, after which it is deleted or anonymised within a reasonable period, unless we must keep it to meet legal obligations, resolve disputes or enforce agreements.

9. Cookies

We use essential cookies to keep you signed in and to secure your session, and local storage to remember preferences such as light or dark theme. You can control cookies through your browser settings, but disabling essential cookies will prevent you from signing in.

10. Your rights

Depending on where you live — including under India’s Digital Personal Data Protection Act, 2023 — you may have the right to access, correct, update or erase your personal data, to withdraw consent, and to nominate another person to exercise these rights. To make a request, email us at the address below. If your data is held by one of our customers, please contact that customer directly; we will assist them in responding.

11. Children’s privacy

The Services are intended for businesses and are not directed at children. We do not knowingly collect personal information from anyone under 18.

12. Changes to this policy

We may update this policy from time to time. When we make material changes we will update the date at the top of this page and, where appropriate, notify account owners by email or in the app.

13. Contact us

If you have questions about this Privacy Policy or want to exercise your rights, email [email protected] or [email protected].