Privacy policy

Who we are

Leadzura is operated by HMH LABZ LLP, Senate Space, W-32/117, Plot No. C-10, 2nd Floor, 3rd Avenue, Anna Nagar, Chennai, Tamil Nadu, India 600040 ("we"). This policy explains how we handle personal data when you use the Leadzura apps, dashboard and public card pages.

Our role

For the business cards, leads and contacts your company collects, your company is the controller (data fiduciary) and we are its processor: we handle that data only on its instructions, as set out in the Data processing agreement. For your own account details, and for visitors to our website, we are the controller.

What we collect

Account details: name, email, phone (optional), language and time zone. Company details: name, billing contact, address and tax number. Content your company adds: card photos, the details read from them, notes, events and digital cards. Payment records: plan, amounts and invoice details; card and bank details are handled by the payment provider, not by us. Technical data: device push tokens, IP address and request logs, kept for security.

Visitors who share their details on a digital card page provide their name, email or phone, company and an optional message, which go to the card owner.

Why we use it

To provide the service and support you, to bill your company and keep tax records, to keep accounts secure and prevent abuse, and to send service emails such as receipts, sign-in codes and reminders. We do not sell personal data, show advertising, or use your content to train AI models.

How card photos are read

Card photos are sent to Anthropic’s API to read the text on the card. Anthropic processes them in the United States, does not use API data to train its models, and deletes it after a short retention period. Only the photo and the text needed to read it are sent.

Where data is stored and who processes it

Company data and files are stored on Amazon Web Services in the US East (N. Virginia) region. We use these service providers, each bound to protect the data and use it only for us: Amazon Web Services (hosting, file storage and email delivery), Cloudflare (network security and bot protection), Anthropic (reading card photos), Cashfree Payments and Stripe (payments), and Expo (mobile push notifications). Where data leaves your country, it is protected by contract and by the safeguards described here.

How long we keep data

Company data is kept while the company has an account. Companies can set card photos to be deleted automatically after a period. When a company is deleted, its data is permanently removed after 30 days, except tax invoices and security audit records that the law requires us to keep.

Security

Each company’s data is isolated in the database, data is encrypted in transit and at rest, file links expire quickly, and staff access is limited, logged and visible to the company.

Your rights

You can see and correct your details, export your company data, and delete your account from the app or dashboard, or ask us to do it. People whose details a company collected should contact that company first; we help companies answer such requests. Depending on where you live (for example India’s DPDP Act, the GDPR, the UAE and Saudi PDPL or Singapore’s PDPA), you may also have the right to complain to your data protection authority.

Changes

We will post changes to this policy here and notify account owners by email of material changes.

Contact and grievances

For privacy questions or complaints, including under India’s Digital Personal Data Protection Act, write to our Grievance Officer at [email protected]. We acknowledge complaints within 48 hours and resolve them within 30 days.