This Privacy Policy explains how OMNIVALL ("we", "us"), the owner of Leadora (leadora.omnivall.in), collects, uses, shares and protects personal data. It is published under the Information Technology Act, 2000, the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 ("DPDP Act").
1. Who this policy covers
- Account holders — businesses and their team members who sign up for and use Leadora.
- Leads — people whose details reach a Leadora customer through Meta (Facebook/Instagram) lead forms, Click-to-WhatsApp ads, WhatsApp messages, website forms, imports or manual entry.
- Website visitors to leadora.omnivall.in.
2. Our role
- For account data (your name, email, phone, billing details) we are the Data Fiduciary.
- For lead data that you bring into Leadora, you (our customer) are the Data Fiduciary and we act only as your Data Processor: we store and process it on your instructions to provide the service. See our Data Processing Addendum.
3. What we collect
- Account details: name, business name, email, mobile number (verified on WhatsApp), password (stored only as a secure hash).
- Billing details: plan, amount, payment reference and invoice details. Card/UPI/bank details are handled by Razorpay; we never see or store them.
- Connected platforms: when you connect Facebook, WhatsApp Business or Meta Conversions API, we store the access tokens and IDs needed to receive your leads and send messages and conversion events. Tokens are encrypted and never shown in full.
- Lead data you process: name, phone, email, city, enquiry details, form answers, ad/campaign references, WhatsApp messages, notes, stage and deal value.
- Usage and technical data: log-in times, IP address, browser/device, pages used and error logs, to keep the service secure and working.
- Website data: cookies and similar technologies — see our Cookie Policy.
4. Why we use it
- To create and run your account and provide Leadora's features.
- To receive leads from Meta, send WhatsApp messages you or your automations trigger, and send conversion events to Meta on your behalf.
- To verify your email and phone, keep accounts secure and prevent fraud and spam.
- To process payments, issue invoices and send service messages (payment receipts, plan reminders, security alerts) by email and WhatsApp.
- To give support and improve the product.
- To meet legal obligations.
We do not sell personal data, and we do not use your leads' data for our own marketing.
5. Who we share it with
Only with service providers who help us run Leadora, under confidentiality and security obligations:
- Meta Platforms (Facebook Lead Ads, WhatsApp Business Platform, Conversions API) — only as needed for the features you connect.
- Razorpay — payments.
- Hosting, database and email providers — to run the service and send emails.
- Google — only if you choose "Continue with Google" to sign in.
We may also disclose data when required by law, a court order or a government authority.
6. Where and how long we keep data
- Data is stored on secure servers. We use encryption in transit (HTTPS), hashed passwords, access controls and separation between customer workspaces.
- Account data is kept while your account is active and for up to 180 days after closure, unless the law requires longer (for example, invoices are kept for the period required by tax law).
- Lead data is kept while your account is active. When you delete a lead or close your account, it is deleted from active systems within 30 days, and from backups within 90 days.
7. Your rights (DPDP Act)
You can ask us to:
- access a summary of your personal data and how it is used;
- correct or update inaccurate data;
- erase your data (subject to legal retention needs);
- withdraw consent you gave (this may stop parts of the service);
- nominate another person to exercise these rights on your behalf.
If you are a lead of one of our customers, please contact that business first — they control your data. If you cannot reach them, contact us and we will help.
To make a request, email leadoracrm@gmail.com from your registered email address. We respond within 15 days.
Facebook / Meta data deletion: email leadoracrm@gmail.com with the subject "Data Deletion Request", and we delete the Meta data linked to your account within 30 days.
8. Children
Leadora is a business tool and is not meant for anyone under 18. We do not knowingly collect data from children.
9. Changes to this policy
We may update this policy. The effective date at the top shows the latest version. For important changes we will tell account holders by email or in the app.
10. Grievance Officer
Grievance Officer: Chintesh Thakkar
Address: C-10, Second Floor, New Bus Port, Palanpur, Gujarat 385001, India
Phone: +91 95100 98338
Email: leadoracrm@gmail.com
Hours: Monday to Saturday, 10:00 AM – 8:00 PM IST
We acknowledge every complaint within 24 hours and resolve it within 15 days of receipt.
11. Contact
OMNIVALL (partnership firm, Udyam registered)
C-10, Second Floor, New Bus Port, Palanpur, Gujarat 385001, India
Phone / WhatsApp: +91 95100 98338
Email: leadoracrm@gmail.com