We operate Leadzaro, a platform for conversion tracking, lead management (CRM), and messaging automation for advertisers and agencies. By using the Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.
1. Controller and processor roles
Leadzaro processes three broad categories of personal information, and our role differs for each:
- Account Data — information about the customers who sign up for and use Leadzaro (for example, your name, email, and account settings). For this data, we act as the data controller.
- Customer Data — information about leads, contacts, and end users that our customers capture, import, or process through the Service (for example, a lead's name, email, phone number, messages, and attribution identifiers). For this data, our customers are the controller and we act as a data processor, handling it on their behalf and under their instructions.
- Billing Data — the details we need to bill you, take payments and keep tax records. For this data, we act as the data controller.
2. Information we collect
2.1 Information you provide
- Account and profile details such as name, email address, and password.
- Business information such as company name, role, and account preferences.
- Communications you send us, including support requests and feedback.
2.2 Customer Data you process through the Service
- Contact and lead records, including names, email addresses, and phone numbers.
- Pipeline, opportunity, tag, note, and custom-field data you create.
- Messaging content and metadata from connected channels, including WhatsApp conversations.
- Advertising attribution identifiers, such as click identifiers (including click-to-WhatsApp identifiers), ad and campaign references, and source URLs.
2.3 Information collected automatically
- Log and device data such as IP address, browser type, and pages viewed.
- Usage data about how you interact with the Service, collected via cookies and similar technologies.
2.4 Information from connected platforms
When you connect third-party accounts (such as Meta Ads or WhatsApp Business), we receive information from those platforms as needed to provide the Service — for example, account identifiers, ad and conversion metadata, and access tokens, which are stored in encrypted form.
2.5 Billing and payment information
Your business's legal name and billing address, its State, its GSTIN if you give one, and the billing email address. When you pay, our payment partner Razorpay tells us the payment's reference numbers, the method used and, for a card, only its last four digits, its network and its issuer. We never receive or store your full card number. For a bank transfer, we record the amount, any TDS deducted and the bank reference.
2.6 Sign-in records
Each time someone signs in or tries to, we record the time, the IP address, the browser, how they signed in and whether it worked. We never record a password.
2.7 Lead counts
To bill plans by leads, we record each lead that arrives in a workspace, with how it arrived and when.
3. How we use information
- Provide, operate, maintain, and secure the Service.
- Send conversion and event data to advertising platforms (such as Meta) through their conversion interfaces, at your direction, to measure and improve ad performance.
- Capture, attribute, organize, and route leads within your CRM and pipelines.
- Enable messaging features, including WhatsApp inbox and lead capture.
- Provide dashboards, reporting, and exports.
- Respond to support requests and communicate about the Service.
- Detect, prevent, and address fraud, abuse, and security issues.
- Comply with legal obligations and enforce our Terms of Service.
- Billing you, taking payments, issuing GST invoices and credit notes, and keeping tax records.
- Answering payment disputes, using your bill, your invoice, the version of our terms you accepted and your sign-in records.
4. Advertising platforms and conversion data
A core function of Leadzaro is sending server-side conversion events to advertising platforms so they can measure and optimize your campaigns. When you configure this, we transmit event data — which may include hashed customer identifiers and attribution parameters — to the relevant platform (such as Meta) through their Conversion API or equivalent. Those platforms process that data as independent controllers under their own terms and privacy policies. You are responsible for ensuring you have a lawful basis and any required consent before sending such data.
5. Messaging and WhatsApp
Where you connect a WhatsApp Business account, we process inbound and outbound messages and related metadata to provide inbox, automation, and lead-capture features. Use of these features is also subject to the applicable messaging platform's policies and messaging windows.
6. Cookies and similar technologies
We use cookies and similar technologies to keep you signed in, remember preferences, secure the Service, and understand usage. You can control cookies through your browser settings; disabling some cookies may affect how the Service works.
7. Legal bases for processing
Where applicable law requires a legal basis, we rely on one or more of the following: the performance of a contract with you; your consent; our legitimate interests in operating and improving the Service; and compliance with legal obligations. For Customer Data processed on behalf of our customers, the customer is responsible for establishing the lawful basis.
8. How we share information
We do not sell personal information. We share information only as described below:
- Service providers / subprocessors — vendors that help us run the Service (such as cloud hosting, database, and infrastructure providers), bound by confidentiality and data-protection obligations.
- Payments — Razorpay Software Private Limited, our payment partner, processes your payment under its own terms and privacy policy.
- Advertising and messaging platforms — as described in Sections 4 and 5, at your direction.
- Tax authorities — where the law requires it.
- Legal and safety — where required by law, or to protect the rights, property, or safety of Leadzaro, our customers, or others.
- Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.
9. Data retention
We keep information only as long as we need it:
- Billing records (bills, invoices, credit notes, payment and TDS records, and the billing details on them): at least 8 years, because tax and company law require it, even if your account is deleted.
- Sign-in records: at least 1 year.
- The activity history in your workspace: at least 1 year.
- Our server logs: 30 days.
- Your account and Customer Data: while your account exists. If your plan ends, we keep them for 90 days so you can come back or export them, then delete them. You can ask us to delete them sooner.
10. Security
We use technical and organizational measures designed to protect information, including encryption of sensitive credentials, access controls, and tenant isolation. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
11. International data transfers
We are based in India and may process information in India and other countries where we or our service providers operate. Where information is transferred across borders, we take steps to ensure appropriate safeguards consistent with applicable law.
12. Your rights
Depending on your location and applicable law — including the Digital Personal Data Protection Act, 2023 of India — you may have rights to access, correct, update, or delete your personal information, and to withdraw consent. To exercise these rights with respect to Account Data, contact us at info@tuffleiq.com. If your request concerns Customer Data that a Leadzaro customer controls, we will refer you to, or act on the instructions of, that customer.
Our privacy contact is our grievance officer, Devansh Soni (info@tuffleiq.com). We acknowledge a request within 48 hours and answer it within one month.
13. Children's privacy
The Service is not directed to children under the age of 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us so we can take appropriate action.
14. Third-party links and services
The Service may link to or integrate with third-party services that we do not control. This Policy does not apply to those services, and we encourage you to review their privacy policies.
15. Changes to this Policy
We may update this Policy from time to time. When we do, we will publish a new numbered version and its effective date above, keep earlier versions online, and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.
16. Contact us
Leadzaro is operated by TuffleIQ Technologies Private Limited (CIN U62091MP2025PTC074441, GSTIN 23AALCT5381P1ZN), registered office 257, MIG, Mukharjee Nagar, Dewas, Madhya Pradesh 455001, India. Questions: info@tuffleiq.com. Complaints: our grievance officer, Devansh Soni, as set out on our Contact page.