Skip to content
Leadzaro
Back to home
Legal

Privacy Policy

This Privacy Policy explains how TuffleIQ Technologies Private Limited ("Leadzaro", "we", "us", or "our") collects, uses, shares, and protects information when you use the Leadzaro website and platform (the "Service").

Version 1 · Effective 7 Jul 2026

This is an earlier version, in force from 7 Jul 2026 until 20 Oct 2026. The current version is here.

We operate Leadzaro, a platform for conversion tracking, lead management (CRM), and messaging automation for advertisers and agencies. By using the Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.

1. Controller and processor roles

Leadzaro processes two broad categories of personal information, and our role differs for each:

  • Account Data — information about the customers who sign up for and use Leadzaro (for example, your name, email, and account settings). For this data, we act as the data controller.
  • Customer Data — information about leads, contacts, and end users that our customers capture, import, or process through the Service (for example, a lead's name, email, phone number, messages, and attribution identifiers). For this data, our customers are the controller and we act as a data processor, handling it on their behalf and under their instructions.

2. Information we collect

2.1 Information you provide

  • Account and profile details such as name, email address, and password.
  • Business information such as company name, role, and account preferences.
  • Communications you send us, including support requests and feedback.

2.2 Customer Data you process through the Service

  • Contact and lead records, including names, email addresses, and phone numbers.
  • Pipeline, opportunity, tag, note, and custom-field data you create.
  • Messaging content and metadata from connected channels, including WhatsApp conversations.
  • Advertising attribution identifiers, such as click identifiers (including click-to-WhatsApp identifiers), ad and campaign references, and source URLs.

2.3 Information collected automatically

  • Log and device data such as IP address, browser type, and pages viewed.
  • Usage data about how you interact with the Service, collected via cookies and similar technologies.

2.4 Information from connected platforms

When you connect third-party accounts (such as Meta Ads, Google Ads, or WhatsApp Business), we receive information from those platforms as needed to provide the Service — for example, account identifiers, ad and conversion metadata, and access tokens, which are stored in encrypted form.

3. How we use information

  • Provide, operate, maintain, and secure the Service.
  • Send conversion and event data to advertising platforms (such as Meta and Google) through their conversion interfaces, at your direction, to measure and improve ad performance.
  • Capture, attribute, organize, and route leads within your CRM and pipelines.
  • Enable messaging features, including WhatsApp inbox and lead capture.
  • Provide dashboards, reporting, and exports.
  • Respond to support requests and communicate about the Service.
  • Detect, prevent, and address fraud, abuse, and security issues.
  • Comply with legal obligations and enforce our Terms of Service.

4. Advertising platforms and conversion data

A core function of Leadzaro is sending server-side conversion events to advertising platforms so they can measure and optimize your campaigns. When you configure this, we transmit event data — which may include hashed customer identifiers and attribution parameters — to the relevant platform (such as Meta or Google) through their Conversion API or equivalent. Those platforms process that data as independent controllers under their own terms and privacy policies. You are responsible for ensuring you have a lawful basis and any required consent before sending such data.

5. Messaging and WhatsApp

Where you connect a WhatsApp Business account, we process inbound and outbound messages and related metadata to provide inbox, automation, and lead-capture features. Use of these features is also subject to the applicable messaging platform's policies and messaging windows.

6. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember preferences, secure the Service, and understand usage. You can control cookies through your browser settings; disabling some cookies may affect how the Service works.

Where applicable law requires a legal basis, we rely on one or more of the following: the performance of a contract with you; your consent; our legitimate interests in operating and improving the Service; and compliance with legal obligations. For Customer Data processed on behalf of our customers, the customer is responsible for establishing the lawful basis.

8. How we share information

We do not sell personal information. We share information only as described below:

  • Service providers / subprocessors — vendors that help us run the Service (such as cloud hosting, database, and infrastructure providers), bound by confidentiality and data-protection obligations.
  • Advertising and messaging platforms — as described in Sections 4 and 5, at your direction.
  • Legal and safety — where required by law, or to protect the rights, property, or safety of Leadzaro, our customers, or others.
  • Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

9. Data retention

We retain Account Data for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Customer Data is retained according to your configuration and instructions, and is deleted or returned upon termination as described in our Terms, subject to legal requirements and routine backups.

10. Security

We use technical and organizational measures designed to protect information, including encryption of sensitive credentials, access controls, and tenant isolation. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. International data transfers

We are based in India and may process information in India and other countries where we or our service providers operate. Where information is transferred across borders, we take steps to ensure appropriate safeguards consistent with applicable law.

12. Your rights

Depending on your location and applicable law — including the Digital Personal Data Protection Act, 2023 of India — you may have rights to access, correct, update, or delete your personal information, and to withdraw consent. To exercise these rights with respect to Account Data, contact us at info@tuffleiq.com. If your request concerns Customer Data that a Leadzaro customer controls, we will refer you to, or act on the instructions of, that customer.

13. Children's privacy

The Service is not directed to children under the age of 18, and we do not knowingly collect personal information from children. If you believe a child has provided us information, contact us so we can take appropriate action.

14. Third-party links and services

The Service may link to or integrate with third-party services that we do not control. This Policy does not apply to those services, and we encourage you to review their privacy policies.

15. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

16. Contact us

This Service is operated by TuffleIQ Technologies Private Limited. If you have questions or requests regarding this Policy or your personal information, contact us at info@tuffleiq.com.

Versions

  • Version 1 (this page) · effective 7 Jul 2026

Questions about this document? Reach us at info@tuffleiq.com.