Leadluence Privacy Policy

We use data to:

• Provide and operate the Service
• Enforce permissions and security
• Enable communications and automations
• Track usage, limits, and billing
• Improve reliability and performance
• Detect abuse, fraud, or system failures

Leadluence acts as a data processor on behalf of its clients (the data controllers). Lead and contact data entered or received through integrations belongs to the client's business. Leadluence processes this data solely to provide the Service as instructed by the client.

Leadluence integrates with Meta platforms including WhatsApp Business API and Meta Lead Ads to provide messaging and lead management services on behalf of its clients.

Data received from Meta platforms is:

• Used solely to provide the Service to the business that authorized the integration
• Not sold, rented, or shared for advertising purposes
• Not used to build user profiles for third-party targeting
• Stored securely with encryption at rest and in transit
• Deleted upon account closure or disconnection of the Meta integration

Each business explicitly authorizes the connection to their Meta accounts and can disconnect at any time, which stops all further data collection from that integration.

Leadluence enables businesses to communicate with their customers via email and the WhatsApp Business API.

All communications are sent on behalf of the business using their connected WhatsApp Business Account.

• Message content and metadata are stored to provide conversation history, delivery tracking, and compliance
• Older message content may be sanitized or truncated to reduce storage risk

We track:

• Delivery status and read receipts
• Opt-out requests and user preferences
• Quality and compliance metrics

Leadluence does not initiate communication with end users without prior consent obtained by the client business.

Leadluence sends messages only in response to user enquiries or where the user has provided consent to be contacted.

We do not sell personal data.

We may share data only with:

• Infrastructure providers (hosting, database services)
• Messaging providers (WhatsApp Business API, email delivery services)
• Error monitoring and logging services

All providers are bound by confidentiality and security obligations. Data received from Meta platforms is not transferred to any provider that is not necessary for operating the Service.

Leadluence implements:

• Token-based authentication and refresh flows
• Role-based and row-level access controls
• AES-256 encryption for stored credentials and access tokens
• Encrypted data transport (TLS)
• Sanitized logging and error monitoring
• Audit trails and access enforcement

Data is retained while your account is active and for up to 90 days after account closure to allow for recovery. After this period, personal data is permanently deleted unless retention is required by law.

WhatsApp message data is retained for up to 12 months for compliance and dispute resolution purposes.

Data received from Meta platforms is deleted upon disconnection of the integration or account closure, whichever occurs first, unless retention is required by law.

You may:

• Access and review your personal data
• Update or correct inaccurate data
• Request export of your data in a portable format
• Request deletion of your data (subject to legal or operational requirements)
• Control communication preferences and opt out of automated messages

These rights are provided in accordance with applicable data protection laws, including the Digital Personal Data Protection Act, 2023 (India).

Requests can be sent to support@leadluence.com. We will respond within 30 days.

Leadluence uses cookies and local storage for:

• Authentication
• Session management
• User preferences

Leadluence does not use third-party advertising or tracking cookies.

Disabling cookies may affect functionality.

Data may be processed in countries where our service providers operate, including the United States and South Korea, with appropriate safeguards in place in accordance with applicable data protection laws.

Leadluence is not intended for users under 18 years of age. We do not knowingly collect personal data from children.

We may update this Privacy Policy periodically. For material changes, we will notify you via email or in-product notification at least 14 days before the changes take effect. Continued use after the effective date constitutes acceptance of the updated policy.

Leadluence processes personal data on behalf of its clients.

Our clients are responsible for ensuring that they have obtained appropriate user consent before collecting or sharing personal data through Meta Lead Ads, WhatsApp, website forms, or any other channels.

Leadluence does not independently contact end users without such consent.

End users may opt out of communications at any time, including through WhatsApp opt-out mechanisms.

For questions about this Privacy Policy or to exercise your data rights:

📧 support@leadluence.com