Privacy Policy

Last updated: April 2026  ·  Effective: April 2026

1. Who We Are

LeadLab ("we", "us", "our") is a CRM software product operated under Indian law. Our registered contact is: support@leadlabcrm.in. Our website is www.leadlabcrm.in.

2. What Information We Collect

We collect the following categories of information:

• Account information: Name, email address, and password when you register a workspace.
• Business data: Deal records, lead contact information, notes, pipeline data that you enter into the CRM.
• Team data: Names and email addresses of team members you invite to your workspace.
• Payment information: Processed securely by Razorpay. We do not store card numbers, UPI IDs, or bank account details on our servers.
• Usage data: Anonymised analytics data collected via Google Analytics (GA4) including page views, session duration, and general usage patterns. No personally identifiable information is included in analytics.
• Technical data: Browser type, device type, IP address (for security purposes), and general geographic location.

3. How We Use Your Information

• To create and maintain your LeadLab workspace.
• To provide, operate, and improve the CRM application.
• To send transactional emails (password resets, account notifications).
• To process payments and issue GST invoices through Razorpay.
• To respond to support requests sent to our helpdesk.
• To detect and prevent fraud, abuse, and security threats.
• To comply with applicable laws including the Information Technology Act, 2000 (India).

4. Data Storage and Security

Your data is stored on Google Firebase (Firestore) — a globally trusted, enterprise-grade cloud platform. Data is:

• Encrypted in transit using TLS/HTTPS.
• Encrypted at rest using AES-256 encryption.
• Stored in Google's Firebase infrastructure with 99.9% uptime SLA.
• Isolated per workspace — no other company can read or access your records.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We share data only with the following service providers who process it on our behalf:

• Google Firebase: Cloud database and authentication.
• Razorpay: Payment processing (PCI-DSS compliant).
• Google Analytics (GA4): Anonymous usage analytics.
• Netlify: Website hosting.
• Hostinger: Email infrastructure for support communications.

All the above providers are bound by their own privacy policies and applicable data protection standards.

6. Google Calendar Integration

LeadLab offers an optional feature that lets you add your sales follow-ups to your Google Calendar. If you choose to connect your Google account, LeadLab requests permission to view and create events on your calendar (the https://www.googleapis.com/auth/calendar.events scope) for the sole purpose of creating follow-up reminder events that you initiate.

• We only create or read calendar events as a direct result of an action you take in LeadLab (saving a follow-up).
• The only data written to your calendar is the follow-up's title, date/time, and the related prospect details you entered in LeadLab.
• We do not read, store, scan, or share the contents of your existing calendar events.
• Connecting Google Calendar is entirely optional and can be disconnected at any time from Settings, or revoked at your Google Account permissions.

Limited Use disclosure: LeadLab's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not allow humans to read this data unless required for security, to comply with applicable law, or with your explicit consent.

7. Your Rights

As a user of LeadLab, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request corrections to inaccurate data.
• Deletion: Request deletion of your account and associated data. We will process this within 30 days.
• Export: Export all your CRM data as CSV at any time from within the application.
• Objection: Object to processing of your data for marketing purposes.

To exercise any of these rights, write to us at support@leadlabcrm.in.

8. Cookies

We use minimal cookies required for authentication (to keep you logged in) and for Google Analytics (anonymised, non-identifying). You may disable cookies in your browser settings, but this may affect application functionality.

9. Children's Privacy

LeadLab is a business tool intended for users 18 years and older. We do not knowingly collect information from children under 18. If you believe we have inadvertently collected such data, please contact us immediately.

10. Retention

We retain your data for as long as your account is active. After account deletion or subscription expiry beyond 90 days, data is permanently deleted from our systems. Backup copies are purged within 30 additional days.

11. Grievance Officer (India)

In compliance with the Information Technology Act, 2000 and IT (Amendment) Act, 2008, the Grievance Officer for LeadLab is reachable at:

Email: support@leadlabcrm.in
Response time: Within 30 days of receiving a complaint.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email to the registered account email. Continued use of LeadLab after changes are posted constitutes acceptance of the updated policy.

13. Contact

For any privacy-related questions, contact us at support@leadlabcrm.in.