Privacy Policy

1. Introduction

Welcome to IndyLead, a B2B lead management and automation software developed by IndiaExcite IT Solutions Private Limited ("we," "our," or "us"). We are committed to protecting your privacy and ensuring that your personal and business data is handled securely, in compliance with the Digital Personal Data Protection (DPDP) Act, 2023 (India) and the General Data Protection Regulation (GDPR). This policy explains how we collect, use, and protect your data when you use the IndyLead platform.

2. Information We Collect

To provide our automated lead management services, we collect the following categories of data:

• Account Information: Name, business email, phone number, company details, and billing information when you register for an IndyLead account.
• Integration Data (API): We securely store your IndiaMART API keys and WhatsApp Business API credentials to facilitate lead fetching and message dispatching.
• End-User / Lead Data: Data fetched from your IndiaMART account (e.g., buyer names, phone numbers, inquiry details) to generate automated replies.
• Product Catalog Data: Product names, descriptions, synonyms, and images uploaded by you for AI matching.
• Usage & Device Data: First-party analytical data such as IP addresses, browser types, and dashboard interaction logs to monitor software performance.

3. How We Use Your Information

We use your data strictly to operate and improve the IndyLead platform:

• To automatically fetch leads from IndiaMART.
• To utilize our internal AI engines to draft relevant product-based replies.
• To dispatch messages via the WhatsApp Business API.
• To provide you with analytics, delivery logs, and Excel reports.
• To bill you for subscription services and provide technical support.

4. AI Processing & Data Confidentiality

IndyLead utilizes Artificial Intelligence to match buyer inquiries with your product catalog. We do not use your proprietary product data or your lead data to train public AI models. All AI processing is isolated to your specific account to ensure strict B2B confidentiality.

5. Third-Party Sharing & Sub-Processors

We do not sell or rent your data. We only share data with trusted sub-processors necessary to run the service:

• Meta Platforms, Inc.: For processing and delivering WhatsApp Business messages.
• Cloud Hosting Providers: Secure server infrastructure (e.g., AWS, Contabo) hosted within compliant regions.
• Payment Gateways: For processing subscription payments securely.

6. Data Security & Retention

We implement enterprise-grade security, including end-to-end encryption for API credentials and SSL for data in transit. We retain your Lead Data and Reply Logs only for as long as your account is active or as required to fulfill legal obligations. Upon account termination, all fetched lead data is permanently deleted within 30 days.

7. Your Rights

Depending on your jurisdiction, you have the right to access, correct, export, or request the deletion of your personal data. To exercise these rights, please contact our Data Protection Officer at our official support email.