Lead Airo
1. Summary
- We collect only what is needed to run Lead Airo: your account details, the CRM data your company enters, and security logs.
- We do not sell personal data, show ads, or use advertising or analytics trackers in our apps or on this website.
- The leads and contacts in a company's CRM belong to that company. We store and process them on the company's behalf.
- You can ask us to delete your account at any time. See section 11.
This Privacy Policy explains how DXG Softs ("we", "us", "our") handles personal data in Lead Airo: the web application, the Lead Airo apps for Android and iOS, the public lead forms and this website (the "Service"). It should be read with our Terms and Conditions.
2. Who we are and our role
Lead Airo is provided by DXG Softs, India. Our role depends on the data:
- Customer Data (leads, contacts, notes, tasks, attachments and form submissions in a company's workspace): the company that uses Lead Airo (our "Customer") decides why and how this data is processed and is the Data Fiduciary under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"). We act as its Data Processor and handle this data only on its instructions.
- Account and website data (your sign-in details, security logs, and messages you send us): we are responsible for this data.
If you are a lead or contact in a company's CRM and have questions about your data, please contact that company first. We will help them respond to your request.
3. What we collect
| Category | Examples | Source |
|---|---|---|
| Account details | Name, work email, phone number (optional), role, company, password (stored only as a secure hash) | You, or your company's administrator |
| CRM data | Lead names, phone numbers, email addresses, company, job title, location, deal value, notes, tasks, attachments, custom fields, activity history | Users of the Customer's workspace, imports |
| Form submissions | Whatever the form asks for (such as name, phone, email and message), time of consent, campaign (UTM) parameters, browser type | Visitors who fill in a Customer's lead form |
| Security and audit logs | Sign-in events and important changes, with time, IP address and browser or app details | Automatically, when you use the Service |
| Communications | Emails and support requests you send us | You |
For public lead forms, the visitor's IP address is not stored as-is; we keep only a keyed hash of it to block spam and duplicate submissions.
4. The mobile app
- The app needs only internet access. It does not read your contacts, call logs, SMS, location, photos, camera or microphone.
- When you tap Call, WhatsApp or Email on a lead, the app opens your phone's dialler, WhatsApp or email app. It does not record calls. If you choose to log a call outcome, that note is saved to the lead.
- On your device, the app stores your company's server address, your sign-in token (in the Android Keystore or iOS Keychain) and your company's logo and colours, so it can open in your company's look.
- The app contains no advertising, analytics or crash-reporting SDKs.
5. How we use data
- To provide the Service: sign you in, show your company's leads and tasks, send reminders and notification emails, and keep data in sync between the web and the apps.
- To keep the Service secure: detect and prevent fraud, abuse, spam and unauthorised access, and keep an audit trail.
- To support you: answer your questions and fix problems.
- To meet legal obligations, such as tax records and lawful requests from authorities.
We process Customer Data on the Customer's instructions under our agreement with them. We process account data to provide the Service you or your company signed up for, and for the legitimate uses permitted by the DPDP Act. We do not use any personal data for advertising or sell it.
6. Who we share it with
We share personal data only with:
- Your company: its administrators can see the accounts and data in its workspace.
- Service providers who help us run the Service and are bound by confidentiality and data protection obligations: server hosting, email delivery, and (if enabled) error monitoring that is configured not to receive personal details.
- Authorities, when the law requires it.
- A successor, if DXG Softs is involved in a merger or acquisition, subject to this Policy.
7. Cookies and local storage
- This website uses no cookies and no tracking.
- The Lead Airo web app uses one essential cookie to keep you signed in securely. It cannot be read by scripts on the page. The app also keeps your selected company and display preferences in your browser's local storage.
- We do not use advertising or analytics cookies.
8. How long we keep data
| Data | Kept for |
|---|---|
| Account details | While your account is active, then deleted as described in section 11 |
| CRM data | As long as the Customer keeps it, and up to 30 days after its subscription ends |
| In-app notifications and email delivery logs | 180 days |
| Uploaded import files | 30 days |
| Form spam-protection fingerprints | 365 days |
| Records of deleted items (for app sync) | 90 days |
| Audit log | As long as the Customer's workspace exists, as a security record |
| Backups | Overwritten on a rolling basis, normally within 14 days |
We may keep some data longer if the law requires it, for example invoices for tax purposes.
9. Security
- All connections use HTTPS encryption.
- Passwords are stored only as salted hashes; sign-in tokens expire and are revoked when you sign out or change your password.
- Each company's data is separated, and role-based permissions are checked on the server for every request.
- Uploaded files are checked, stored privately and served only to signed-in users with access.
- Sign-in attempts are rate-limited, and important actions are recorded in an audit log that cannot be edited.
No system is perfectly secure. If we become aware of a personal data breach, we will inform affected Customers and the Data Protection Board of India as the law requires.
10. Your rights
Subject to the DPDP Act and other applicable law, you can:
- ask for a summary of the personal data we hold about you and how we process it;
- ask us to correct, complete or update it;
- ask us to erase it, where it is no longer needed or you withdraw consent;
- withdraw any consent you have given;
- nominate another person to exercise your rights if you die or become incapacitated;
- raise a grievance with us, and if you are not satisfied, with the Data Protection Board of India.
You can update your name, phone and password yourself from your profile in Lead Airo. For anything else, email projects@dxgsofts.com. For data in a company's CRM, we will pass your request to that company, as it decides how its data is handled.
11. Delete your account
You can ask to delete your Lead Airo account and its data at any time:
- Email projects@dxgsofts.com from the email address you use to sign in, with the subject "Delete my Lead Airo account". Include your company's server address if you know it.
- We will confirm your request within 7 days, and may ask you to verify that you own the account.
- We will delete your account within 30 days of confirmation.
What is deleted and what is kept:
- Deleted: your sign-in account, your name, email address, phone number and password, and your access to every workspace.
- Kept by your company: leads, notes and tasks you created belong to your company's CRM and stay there, without your account details. To delete those, ask your company's administrator.
- Kept for a limited time: audit log entries, as a security record for your company, and backups, which expire within 14 days. Data we must keep by law is retained only as long as required.
If you only want to leave one company's workspace, ask that company's administrator to deactivate your access.
12. Children
Lead Airo is a business service and is not meant for anyone under 18. We do not knowingly collect personal data from children. If you believe a child's data has been entered into the Service, contact us and we will help remove it.
13. Changes to this Policy
We may update this Policy as the Service changes. We will post the updated version here and change the effective date. If the changes are significant, we will also tell Customers by email or in the Service before they take effect.
14. Contact and grievances
DXG Softs
[REGISTERED ADDRESS]
Email: projects@dxgsofts.com
Grievance Officer: [NAME], DXG Softs, projects@dxgsofts.com. We will acknowledge your complaint within 24 hours and respond within 15 days.