Your Privacy Matters to Us

Effective Date: 22 June 2026  ·  Last Updated: 22 June 2026

1. Who Uses This App

Leadhouris a business tool used by store owners and their team members (managers, sales agents) to manage leads, follow-ups, contacts, and product catalog for their store. It is provisioned by a business administrator (the "Owner") who invites team members — it is not a consumer social or messaging app, and is not directed at the general public or at children.

2. Information We Collect

a) Account & Business Information

• Owner/team member name, store code, mobile number, email address
• Business type, GST/PAN number (optional), address and city
• Login credentials (password stored as an encrypted hash — never plain text)
• Role and permission settings assigned to each team member

b) Lead, Contact & CRM Data

• Lead names, phone numbers, emails, and notes you enter into the app
• Lead source information (WhatsApp, Meta Ads, manual entry, etc.)
• Contacts/parties, pipeline stages, follow-up tasks and deal values you create
• Product catalog data — names, prices, categories, brands, units, and product photos you capture or upload

c) Camera & Photo Library Access

• The app requests Camera permission only when you choose to take or attach a photo for a product in your catalog. Photos are uploaded to your store's account and are not accessed for any other purpose.
• We do not access your photo library in the background, and we do not scan or use your photos for any purpose other than the catalog image you select.

d) Push Notifications

• With your permission (Notifications), we use Firebase Cloud Messaging (FCM) to send follow-up reminders and account alerts.
• We store a device FCM token linked to your account so we can deliver these notifications. The token is removed when you log out or disable notifications.

e) Device & Usage Data

• Device type, operating system version, app version, and crash/error logs to help us fix bugs and improve reliability
• IP address and approximate network information when the app communicates with our servers
• In-app activity such as screens visited and features used, for diagnostics and product improvement
• We do not access your device's precise location, contacts list, SMS, call logs, or files outside the app.

f) Locally Stored Data

• Login session tokens are stored securely on your device (via encrypted app storage) so you stay logged in between sessions.

g) Payment Information (Web Portal Only)

• Subscription plan and billing cycle, managed by the store Owner via the web portal
• Payments are processed by Razorpay. We do not store your card number, CVV, or full bank account details — Razorpay handles that securely. The mobile app itself does not process payments.

h) Meta / Facebook Lead Ads Data

• If the store Owner connects Meta Ads via the web portal, lead data submitted by ad respondents (name, email, phone) is received via Meta's webhook and stored in your store's database — this data may then appear in the mobile app's lead list.

3. App Permissions at a Glance

You can deny or revoke any of these permissions from your device settings at any time. Denying Camera or Notifications permission only disables that specific feature — the rest of the app continues to work normally.

4. How We Use Your Information

• To create and manage your account and store workspace
• To provide CRM features: lead tracking, pipeline management, follow-ups, contacts, catalog, and team collaboration
• To send push and transactional notifications (follow-up reminders, OTP verification, account alerts)
• To enforce role-based permissions so team members only see the data their role allows
• To improve app performance, fix bugs, and develop new features
• To respond to support requests and enquiries
• To comply with legal obligations under Indian law

We do not sell your personal data to third parties. We do not use your CRM data (your leads' or contacts' information) for our own marketing purposes.

5. Data Sharing

We may share your data only in these limited circumstances:

• Service Providers: Firebase / Google (push notifications, crash diagnostics), cloud hosting (for operating the platform), Razorpay (payments, web portal only). These parties are contractually bound to protect your data.
• Meta / Facebook: When the Owner connects Meta Lead Ads, we exchange data with Meta's Graph API strictly to import lead data into the store's account.
• Legal Requirements: If required by Indian law, court order, or government authorities, we may disclose data as legally required.
• Business Transfer: If Proftcode merges or is acquired, your data may transfer to the new entity, subject to the same privacy commitments.

6. Data Storage and Security

Your data is stored on servers located in India. Each store's CRM data is stored in an isolated database. We implement the following security measures:

• Passwords hashed using bcrypt (industry-standard one-way hashing)
• HTTPS/TLS encryption for all data in transit between the app and our servers
• JWT-based authentication with short-lived, auto-refreshing session tokens
• Role-based access controls — team members see only what their role permits
• Regular database backups

No method of electronic storage is 100% secure. While we take commercially reasonable steps to protect your data, we cannot guarantee absolute security.

7. Data Retention

• Account data is retained while your subscription is active.
• Logging out of the app clears your locally stored session token and removes your device's notification token from our records.
• After account cancellation, data is retained for 30 days and then permanently deleted, unless you request earlier deletion.
• Payment and invoice records are retained for 7 years as required under Indian accounting and tax law.
• You may request deletion of your data at any time by emailing hello@leadhour.in.

8. Your Rights

Under the Digital Personal Data Protection Act, 2023 (India), and applicable laws, you have the right to:

• Access: Request a copy of personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data (subject to legal retention obligations)
• Portability: Request your data in a structured, machine-readable format
• Withdraw Consent: Revoke Camera or Notification permissions from your device settings, or opt out of non-essential communications, at any time

To exercise any of these rights, email us at hello@leadhour.in. We will respond within 30 days.

9. Children's Privacy

Leadhour is a business tool intended for use by store owners and their staff aged 18 and above. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, please contact us immediately at hello@leadhour.in.

10. Third-Party Links & Services

Our app and website may link to or rely on third-party services (Firebase/Google, Meta, Razorpay, Proftcode website). We are not responsible for the privacy practices of those services. Please review their individual privacy policies.

11. Changes to This Policy

We may update this Privacy Policy periodically, including to reflect changes in the mobile app. Material changes will be notified via email or an in-app notice. Continued use of LeadHour after the effective date constitutes acceptance of the revised policy.

12. Contact Us

For privacy-related questions, data requests, or complaints:

• Company: Proftcode
• Product: LeadHour (Leadhour app — com.proftcode.leadhour)
• Email: hello@leadhour.in
• Website: https://leadhour.in