Privacy Policy

Last updated: July 30, 2026

This Privacy Policy explains how LeadGridd (“we”, “us”, “our”) collects, uses, shares, and protects personal data. LeadGridd is a customer-communication and CRM platform that businesses (“Customers”) use to talk with their own customers and contacts (“End Users”) across channels such as WhatsApp, Instagram, Facebook Messenger, email, and website live chat. This policy applies to our website and platform.

For most End-User data, we act as a data processor on behalf of the business you contacted, which controls that data. If you are an End User, please also refer to that business’s own privacy policy.

Information we collect

• Account data. When a Customer signs up, we collect names, email addresses, passwords (hashed), and profile details of their team members.
• Conversation & contact data. Messages, attachments, contact profiles, phone numbers, email addresses, labels, notes, and related metadata that flow through the platform when businesses communicate with their End Users.
• Data from connected platforms. When a Customer connects a channel (e.g. WhatsApp Business, Facebook, or Instagram), we receive messages and basic profile information (such as a display name or username) needed to deliver and reply to those conversations, in accordance with the platform’s terms.
• Usage & technical data. Log data, device/browser information, IP address, and product usage needed to operate and secure the service.

How we use information

• To provide, maintain, and improve the platform and its features.
• To route, deliver, and display messages between businesses and their End Users.
• To authenticate users, secure accounts, and prevent abuse or fraud.
• To provide support and respond to requests.
• To comply with legal obligations.

Google user data (Sign-in and Google Meet)

If you sign in with Google, we receive your name, email address, and profile picture to create and secure your LeadGridd account.

When a Customer connects Google Meet, LeadGridd accesses a limited set of Google account data solely to provide that feature: your Google account email and basic profile (to identify the account meetings are created under); the Google Meet spaces we create and manage for meetings you schedule from LeadGridd; and, with your permission, Meet conference records (such as recording links and transcripts) shown alongside the related conversation. We store the associated OAuth tokens encrypted, use this data only to operate the Google Meet features you enable, never sell it, and never use it for advertising. You can disconnect Google Meet at any time in Settings → Integrations, which revokes our access.

LeadGridd’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data obtained from Meta platforms

Data we receive from Facebook, Instagram, or WhatsApp is used solely to operate the messaging features a Customer has enabled — that is, to deliver, display, and respond to conversations between the business and its End Users. We do not sell this data, and we do not use it for advertising or for any purpose incompatible with the applicable Meta platform terms and policies.

How information is shared

We do not sell personal data. We share it only:

• With the business you contacted, which controls the conversation.
• With service providers (e.g. hosting, infrastructure, and messaging platforms) that process data on our behalf under appropriate safeguards.
• Where required by law, or to protect the rights, safety, and security of our users and the service.

Data retention

We retain personal data for as long as needed to provide the service to the relevant Customer, and thereafter only as required to meet legal, tax, or security obligations. A Customer may delete contacts and conversations from within the platform, and End Users may request deletion as described below.

Your rights & choices

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To request deletion of your data, follow the steps on our Data Deletion Instructions page. For other requests, contact us at dev.team@thinksurfmedia.info. Because we often act as a processor, some requests may be routed to the business that controls your data.

Security

We use technical and organizational measures — including encryption in transit, access controls, and hashed credentials — to protect personal data. No method of transmission or storage is completely secure, but we work to protect your information and continually improve our safeguards.

International transfers

Your data may be processed in countries other than your own. Where it is transferred, we take steps to ensure it remains protected in line with this policy and applicable law.

Children’s privacy

The platform is intended for use by businesses and is not directed to children. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above, and where appropriate we will provide additional notice.