Privacy policy

For your own account and billing, we decide how your data is used. For the leads and customers you keep in LeadRoom, your business decides, and we handle that data on your behalf, only to provide the service to you.

• Your account: your name and email address, a securely hashed password, or your Google profile if you sign in with Google.
• Your workspace: the leads you add, import or capture (names, emails, phone numbers, companies, notes, calls, tasks, deal values and services), your pipeline, your team members and your settings.
• Where leads came from: when a lead fills in a LeadRoom form or arrives through our API, the ad campaign details in the link (such as UTM tags and ad click IDs), the page address, the visitor's IP address and browser type.
• Connected ad accounts: when you connect Meta Ads, the names and IDs of your ad accounts and campaigns, their daily spend, impressions and clicks, your Facebook Page names, and leads from your Meta lead forms.
• Billing: your plan and subscription status. Card and bank details are entered with Razorpay and never reach us.
• Security and operations: sign-in attempts, IP addresses used to limit repeated attempts, and technical logs of errors.

• To run LeadRoom: showing your leads, pipeline, tasks, ad results and reports.
• To send the emails you ask for, such as new-lead alerts, reminders, daily summaries and password resets.
• To report conversions to Meta, but only when an owner of your workspace sets up a conversion rule, and only for leads that came from Meta's own ads.
• To take payment for paid plans, and to keep LeadRoom secure and working.

We don't sell personal data, use it for advertising of our own, or share it with anyone who doesn't need it to provide the service.

When you connect Meta, you sign in with Facebook and choose one ad account and one Page. With your permission we then receive that ad account's campaigns and results, and the leads from that Page's lead forms, directly from Meta. We use it only to show your own leads and ad results back to you and your team, and to send the conversions you set up. We don't sell it, combine it with other businesses' data, or use it for any other purpose. Disconnecting an account from Connections removes our access in Meta and deletes its campaigns and ad results from LeadRoom; you can also ask us to delete its leads (see data deletion).

We use these providers to run LeadRoom. Each handles data only to provide their part of the service:

• Meta: when you connect it, and for conversions you choose to send. Email addresses and phone numbers are hashed before they reach Meta.
• Neon: database hosting.
• Razorpay: payments for paid plans.
• Our email provider: sending the emails described above.
• Our hosting provider: running the servers LeadRoom is served from.

LeadRoom uses one cookie to keep you signed in, and a short-lived one during Google sign-in. We don't use advertising or tracking cookies. The website form you can add to your own site remembers, in the visitor's browser, which ad first brought them, so the lead is credited correctly.

We keep your data while your account is active. When you ask us to delete it, we delete it within 30 days, apart from records we must keep by law, such as payment records. Database backups roll over and are gone within a further 30 days.

You can see and change most of your data in LeadRoom itself. You can also ask us for a copy of your data, to correct it, or to delete it. If you're a lead held by a business that uses LeadRoom, please contact that business first; we'll help them with your request.

All traffic is encrypted with HTTPS. Passwords are stored only as secure hashes. Each workspace's data is kept separate, and only its members can see it. Payment details are handled entirely by Razorpay.

LeadRoom is a business tool and isn't meant for anyone under 18.

If we change this policy, we'll update the date at the top, and tell account owners by email about any significant change.

Questions about privacy, or a request about your data: write to support@katlyzt.com.