Privacy Policy

Last updated: August 2026

BLeadX ("BLeadX", "we", "us", "our") provides a customer relationship management (CRM) platform at bleadx.com and its subsidiary domains ("the Service"). This policy explains what information we collect, how we use it, and the choices you have. It describes our practices only -- it is not a contract and doesn't create rights beyond what applicable law already requires; our contractual relationship with you is governed by our Terms of Service.

1. Information We Collect

• Account information: name, email address, mobile number, and organization details you provide when registering, plus information from Google or Facebook if you sign in that way.
• Customer/lead data you enter: when you use BLeadX to manage your own leads and contacts, the names, contact details, notes, and activity you or your team enter about them. This data belongs to you (see Terms of Service) -- we process it only to provide the Service to you.
• Payment information: subscription payments are processed by Razorpay. We do not store your card, UPI, or bank details ourselves -- Razorpay handles that in accordance with its own privacy policy and PCI-DSS obligations. We retain the transaction records (amount, plan, date, status) needed for billing and support.
• Usage data: log-in activity, IP address, browser and device information, and how you interact with the Service, used for security, troubleshooting, and improving the product.
• Cookies and session data: used to keep you signed in and remember basic preferences. We don't use cookies for third-party advertising.

2. How We Use Information

• To provide, maintain, and secure the Service.
• To process payments and manage your subscription.
• To send account, billing, and service-related emails (password resets, receipts, feature updates).
• To provide customer support and respond to your requests.
• To detect and prevent fraud, abuse, or security incidents.
• To enforce our Terms of Service and protect the rights, property, and safety of BLeadX, our customers, and the public.

We do not sell your personal information or your customers'/leads' data to third parties.

3. Who We Share Information With

• Razorpay -- payment processing.
• Google / Facebook -- only if you choose to sign in using those services.
• Email and messaging providers (including WhatsApp Business messaging and MSG91 for SMS, where you've enabled them) -- to deliver notifications and the bulk-messaging features you configure and trigger yourself.
• Law enforcement, regulators, or courts -- where required by law, legal process, or a good-faith belief that disclosure is necessary to protect the rights, property, or safety of BLeadX, our customers, or the public.
• A successor entity -- if BLeadX is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this policy or a successor policy the acquiring party notifies you of.

Each third-party service listed above processes data under its own privacy policy, which is outside our control. We do not share your data with third parties for their own marketing purposes.

4. Your Role as Data Controller for Lead Data

For the lead and contact data you or your team enter into BLeadX about your own customers and prospects, you (not BLeadX) are the data controller -- you decide what data to collect and why. BLeadX acts only as a data processor, storing and processing that data on your instructions to provide the Service. You're responsible for having a valid legal basis to collect and use that data and for responding to any data-subject requests concerning it, consistent with Section 4 of our Terms of Service.

5. Data Retention & Deletion

We retain account and lead data for as long as your account is active, and for a reasonable period afterward to comply with legal, tax, and accounting obligations. You can request deletion of your account and associated data by contacting us at the address below; we'll action it except where we're legally required to retain specific records (e.g. payment/tax records).

6. Security

We use industry-standard measures to protect your data, including encrypted password storage, encrypted connections (HTTPS), and access controls limiting who on our team can see customer data. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we'll notify you within a reasonable time and as required by applicable law.

7. Your Rights

You can access, correct, export, or request deletion of your personal information at any time by contacting us. If you're located somewhere with specific statutory data-protection rights (such as the EU/UK), those rights apply in addition to what's described here.

8. Children's Privacy

The Service is intended for business use and is not directed at individuals under 18. We do not knowingly collect personal information from children.

9. International Users

BLeadX is operated from India and our servers are located in India. If you access the Service from outside India, your information will be processed in India.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

11. Contact Us

Questions about this policy or your data? Email us at support@bleadx.com.