This Privacy Policy explains how Cyberframe Infotech Pvt. Ltd. ("we", "us", "our"), the operator of LeadX (the "Service"), collects, uses, discloses and safeguards information when you visit our website or use the Service. By using LeadX you agree to this Policy.
1. Information we collect
- Account & contact data — name, email, phone number, company name and role, provided when you sign up or contact us.
- Customer content — the lead, contact, activity, message and file data you and your team enter into or import into LeadX.
- Billing data — plan, billing cycle and payment status. Card and bank details are collected and processed directly by our payment gateway (Razorpay); we do not store your full card details.
- Usage & device data — log data, IP address, browser type, pages viewed and actions taken, used to operate and secure the Service.
- Cookies — we use essential cookies to keep you signed in and to remember preferences.
2. How we use information
- To provide, maintain and improve the Service and its features.
- To process subscriptions, payments and invoices, and to prevent fraud.
- To send transactional messages (e.g. account, billing and security notices) and, where permitted, product updates.
- To provide support and respond to your requests.
- To comply with legal obligations and enforce our Terms & Conditions.
3. Third-party services
We share data with trusted processors only as needed to run the Service, including: Razorpay (payments), and — where you connect them — Meta (Facebook/Instagram), Google (Sheets/Ads), WhatsApp Business and email/SMS providers. Each processes data under its own terms. We do not sell your personal data.
4. Data from Facebook and Instagram
When you connect a Facebook Page, an Instagram professional account or a Meta ad account to LeadX, you sign in with Facebook Login or Instagram Login and choose which permissions to grant. We use that access only to provide the features you switch on, and only for the Pages and accounts you select.
What we access and why
- Your Pages and Instagram accounts — the name, ID, profile picture and username of the Pages and Instagram professional accounts you select, so you can pick them inside LeadX.
- Lead ads — the answers people submit on your Facebook and Instagram lead forms, which we add to your leads in LeadX, and the list of your Page's lead forms so you can choose which to connect.
- Publishing — we publish posts, photos, carousels and Reels to your Page or Instagram account only when you click "Post now" or when a time you scheduled arrives. We never post anything you did not write or approve.
- Comments and messages — comments on your Page's posts, so you can reply to or hide them from the LeadX inbox.
- Ads — on ad accounts you connect, we create and manage the campaigns you set up in LeadX, and read their results (spend, reach, leads, cost per lead, clicks) to show you in the Ad performance report. Ad spend is always billed to your own ad account.
- Insights — reach, impressions and engagement for your Page and for posts you published through LeadX, shown in Social reporting.
What we do not do
- We do not sell data received from Meta, share it with advertisers or data brokers, or use it to build profiles of the people who interact with your Page.
- We do not use it for any purpose other than the features described above, and we do not share it with other LeadX customers.
How we store it
Access tokens from Facebook and Instagram are encrypted at rest and are never shown in the app. Ad performance figures and Page insights are fetched from Meta when you open a report and are not stored long-term; the engagement figures for a published post are saved with that post. Leads you receive from lead ads become part of your customer data in LeadX and follow the retention terms in section 5.
Disconnecting and deleting
- In LeadX: disconnect a Page or Instagram account from Social → Connections at any time. We delete its access token, its lead-form links and any posts still waiting to be published.
- On Facebook or Instagram: if you remove LeadX from your Facebook or Instagram settings, Meta notifies us and we revoke every access token we hold for you straight away.
- Deletion request: if you ask Meta to have your data deleted, we delete your connected Pages, Instagram accounts, ad accounts and Facebook login, along with their lead-form links, scheduled posts and comment rules. You receive a confirmation code and can check the status of your request at the link Meta gives you. You can also request deletion by writing to [email protected].
5. Data retention
We retain account and customer content for as long as your account is active and as required to provide the Service. After account closure we delete or anonymise data within a reasonable period, unless we must retain it to meet legal, tax or accounting obligations.
6. Data security
We use industry-standard measures — encryption in transit, access controls and regular backups — to protect your information. No method of transmission or storage is 100% secure, but we work to protect your data and to notify you of material incidents where required by law.
7. Your rights
You may request access to, correction of, or deletion of your personal data, and you may object to or restrict certain processing. To exercise these rights, contact us using the details below. Account owners can also export or delete customer content from within the app.
8. Children
LeadX is a business tool and is not directed to individuals under 18. We do not knowingly collect data from children.
9. Changes to this Policy
We may update this Policy from time to time. The "Last updated" date above reflects the latest revision. Material changes will be communicated through the Service or by email.
10. Contact
Questions about this Policy or your data? Contact Cyberframe Infotech Pvt. Ltd., Ludhiana, Punjab, India — [email protected], +91 84279 49944. See also our Contact page.