Privacy Policy

1. Introduction

This Privacy Policy explains how Sarita&Arvind ("LeadGo", "we", "us", "our"), a business with its registered office at 356/267/07, Alamnagar Road, Ashraf Nagar, Rajajipuram, Lucknow 226017, Uttar Pradesh, India, collects, uses, stores, shares and protects information when you use the LeadGo website, web application, mobile application and related services (together, the "Services"). LeadGo is a lead management and sales automation platform that helps businesses capture, assign, track and follow up on leads.

By accessing or using the Services, you agree to this Privacy Policy and our Terms & Conditions. If you do not agree, please do not use the Services.

This Policy is published in accordance with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 ("DPDP Act") and rules made under it.

2. Our Role: Fiduciary and Processor

• Account Data (information about you as our customer or user): LeadGo acts as the Data Fiduciary and decides why and how it is processed.
• Lead Data (information about your own leads, prospects and customers that you upload, import or capture through LeadGo): you (the business using LeadGo, the "Customer") are the Data Fiduciary, and LeadGo processes it on your behalf and on your instructions as a Data Processor.

3. Information We Collect

3.1 Information you provide to us

• Name, business name, designation, email address, mobile number, billing address and GST number.
• Login credentials and profile details of team members added by the Customer.
• Payment details. Card, UPI and bank details are handled by our payment partners; we do not store full card numbers.
• Messages, queries and feedback you send to our support team.

3.2 Lead Data processed on behalf of Customers

• Lead names, phone numbers, email IDs, city, source, status, notes, tags and follow-up details.
• Call logs, call duration, call recordings (where enabled by the Customer), WhatsApp, SMS and email message logs.
• Leads captured automatically through connected sources such as website forms, Facebook/Meta Lead Ads, Google Ads, landing pages, WhatsApp and other integrations authorised by the Customer.

3.3 Information collected automatically

• Device and browser type, operating system, IP address, app version, language and time zone.
• Log data such as pages viewed, features used, actions taken and error reports.
• With your permission, mobile app permissions such as phone state, call logs, contacts, microphone, notifications and storage, used only to deliver features you enable (for example, call tracking, click-to-call and call recording).
• Cookies and similar technologies (see Section 9).

3.4 Information from third parties

We may receive information from integrations you connect (for example Meta, Google, WhatsApp Business API providers, telephony and SMS providers, payment gateways) and from publicly available business sources, strictly as permitted by those platforms' terms and applicable law.

4. How We Use Information

We use information to:

• Create and manage your account and provide, operate and improve the Services.
• Capture, distribute, track and report leads and team activity as configured by the Customer.
• Enable calling, messaging, automation, reminders and analytics features.
• Process payments, issue invoices and manage subscriptions.
• Provide customer support, send service notices, security alerts and policy updates.
• Detect, prevent and investigate fraud, abuse, spam and security incidents.
• Comply with legal obligations and enforce our Terms.
• Send product updates and offers, where permitted. You may opt out at any time.

5. Consent and Lawful Use

We process personal data on the basis of your consent, for legitimate uses permitted by the DPDP Act (such as performing a contract with you or complying with law), or as required by law. You may withdraw consent at any time by writing to us, although this may limit or end your ability to use the Services.

Customer responsibility: Customers must ensure they have a lawful basis and, where required, valid consent from their leads before uploading Lead Data to LeadGo or contacting them through calls, SMS, WhatsApp or email.

6. Call Recording and Communications

• Call recording is a Customer-controlled feature. Customers must inform the person being called that the call may be recorded, as required by law.
• Customers are responsible for complying with TRAI regulations, including DLT registration and Do Not Disturb (DND) / NCPR rules, and with WhatsApp Business and Meta policies.
• LeadGo stores recordings and message logs only to provide the Services to the Customer and does not listen to or analyse them except for support, security, legal compliance, or features the Customer enables.

7. How We Share Information

We share information only in these situations:

• Service providers: cloud hosting, telephony and SMS operators, WhatsApp Business API providers, payment gateways, email and analytics providers, who are bound by confidentiality and data protection obligations.
• Within the Customer's account: administrators and team members see Lead Data according to the roles and permissions set by the Customer.
• Integrations you enable: data is shared with third-party platforms you connect, under their terms and privacy policies.
• Legal reasons: to comply with law, court orders or lawful requests from government or law-enforcement authorities, or to protect rights, property and safety.
• Business transfers: in a merger, acquisition or sale of assets, with notice to affected users.

8. Third-Party Services

The Services may link to or integrate with third-party websites and platforms. We are not responsible for their privacy practices. Please read their policies before using them.

9. Cookies and Tracking

We use cookies and similar technologies to keep you signed in, remember preferences, understand usage and improve performance. We also use third-party analytics tools (Google Analytics) and advertising pixels (Meta Pixel) to measure ad campaign performance and improve our marketing. These tools may set cookies on your device.

You can control or delete cookies through your browser settings, but some features may not work properly if cookies are disabled. We currently do not respond to browser Do-Not-Track signals.

10. Data Retention

• We retain Account Data for as long as your account is active and for a reasonable period afterwards for legal, tax, accounting and dispute purposes.
• Lead Data is retained for as long as the Customer's subscription is active. After termination, it is retained for 30 days to allow export and then deleted or anonymised, unless law requires longer retention.
• Call recordings and logs are retained according to the Customer's settings and plan, and deleted after the applicable period.
• Backups are overwritten in the ordinary course within 90 days.

11. Data Security

We use reasonable security measures including encryption in transit (HTTPS/TLS), access controls, role-based permissions, secure cloud infrastructure, monitoring and regular backups. No system is completely secure, and we cannot guarantee absolute security. Please keep your login credentials confidential and notify us immediately of any unauthorised access.

In the event of a personal data breach, we will notify affected parties and the Data Protection Board of India as required by law.

12. Storage Location and Cross-Border Transfers

Data is primarily stored on servers located in India. If data is transferred outside India, we do so only to countries or service providers permitted under the DPDP Act and with appropriate safeguards.

13. Your Rights

Subject to applicable law, you have the right to:

• Access a summary of the personal data we process about you.
• Correct, complete or update inaccurate or incomplete data.
• Request erasure of your personal data when it is no longer needed or when you withdraw consent.
• Withdraw consent at any time.
• Nominate another person to exercise your rights in case of death or incapacity.
• Seek redressal of grievances, and approach the Data Protection Board of India if unresolved.

If you are a lead of one of our Customers, please contact that business first, as it controls your data. We will assist the Customer in responding to your request.

To exercise your rights, email us at privacy@leadgo.in. We may need to verify your identity before acting on a request.

14. Children's Privacy

The Services are meant for businesses and are not directed at individuals under 18 years of age. We do not knowingly collect personal data of children. Customers must not upload children's personal data without verifiable parental consent as required by law. If you believe a child's data has been collected, contact us and we will delete it.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new "Last Updated" date. Material changes will be notified by email or in-app notice. Continued use of the Services after changes means you accept the updated Policy.

16. Grievance Officer and Contact

In accordance with the IT Act and the DPDP Act, our Grievance Officer / Data Protection contact is:

We will acknowledge complaints within 48 hours and aim to resolve them within 30 days.