Privacy Policy

1. Introduction

This Privacy Policy explains how AiLeadMs (operated by Trebta Services Pvt. Ltd., a company registered in India, doing business as AiLeadMs at aileadms.com — referred to as "AiLeadMs", "Trebta", "we", "us", or "our") collects, uses, shares, and protects information when you visit our website, request a demo, or use the AiLeadMs platform as a tenant, tenant user, or lead.

By using the Service, you consent to the practices described in this Policy. If you are a lead contacted through a tenant's use of AiLeadMs, please also refer to the tenant organization's own privacy notice, as they are the data controller for their campaigns.

2. Information We Collect

• Account & tenant data: organization name, contact name, email, phone number, company size, and Tenant ID.
• Campaign & lead data: audience targeting criteria, connected ad account identifiers, UTM parameters, and lead details you upload or capture (name, phone, email, source campaign).
• IVR call data: call metadata (time, duration, outcome) and, where enabled, call recordings and AI-generated transcripts.
• AI generation inputs: prompts, images, or brand assets you provide to generate campaign creatives.
• Usage & device data: pages visited, browser type, IP address, and cookies (see our Cookie Policy).
• Booking data: information you submit through our demo-booking form, such as name, phone, email, website, and your message.
• Connected-account data: when you connect a social, advertising, or Google account, the name and email of that account, the pages, channels, calendars, or ad accounts you choose for a project, and the access tokens we need to act for you (stored encrypted). For Google accounts, see "Google User Data We Access" below.

3. How We Use Information

• To provide, operate, and improve the Service, including running campaigns, generating creatives, and scheduling demos.
• To attribute leads to the correct campaign via UTM tracking and to place and transcribe IVR calls on your behalf.
• To communicate with you about your account, billing, support requests, and product updates.
• To monitor platform security, prevent abuse, and comply with legal obligations.
• To train and improve AI features, using de-identified or aggregated data where feasible; we do not sell your Tenant Content. Data we receive from Google APIs is never used for this (see "Sharing and Limited Use of Google User Data" below).

4. AI Processing of Data

Some inputs (campaign briefs, images, call transcripts) may be processed by AI models — operated by us or by trusted AI infrastructure providers — to generate creatives, score leads, or produce transcripts. These providers process data under contractual confidentiality and data-protection obligations and do not use your Tenant Content to train models for other customers.

5. Google User Data We Access

If you connect a Google account to AiLeadMs, we receive data from Google only after you sign in on Google's own page and approve the permissions listed there. We never see or store your Google password. Each Google product (YouTube, Google Calendar, Google Ads) connects separately, and you can connect one without the others.

• Your Google account: your name and email address, so we can show which account is connected (permissions: openid, email, profile).
• YouTube: the channels you manage (name, channel ID, and subscriber, view, and video counts), your videos and their details, comments on your videos, and analytics reports for your channel and videos (views, watch time, subscribers gained and lost, traffic sources, countries, devices, audience age and gender). We also upload videos to your channel when you ask us to publish them (permissions: youtube.upload, youtube.readonly, yt-analytics.readonly).
• Google Calendar: the list of your calendars, and your availability and events when you use meeting-scheduling features, including creating events you ask for (permissions: calendar.readonly, calendar.events).
• Google Ads: the list of Google Ads accounts you can access and, when you use ad-management features, the campaign actions you request (permission: adwords).

6. How We Use Google User Data

We use Google user data only to provide the features you use inside AiLeadMs that depend on it, and to keep them working and secure:

• Publishing videos to your YouTube channel at the time you choose.
• Showing you your channel's and each video's figures and comments, read from Google when you open the page.
• Scheduling meetings on the calendar you choose.
• Showing and managing the Google Ads accounts you select, when you use ad features.
• Keeping your connection working (renewing access with Google) and protecting it against misuse.

7. How We Store and Protect Google User Data

AiLeadMs stores a connection record (the connected account's name and email, which channel, calendar, or ad account you chose for each project, and the permissions you granted), your access and refresh tokens, and records of the videos we published for you (video ID, title, and status). Access and refresh tokens are encrypted at rest with AES-256-GCM, are never sent to your browser, and are kept in your tenant's own database, separate from other tenants.

Channel and video figures, comments, and calendar details shown on screen are read from Google when you open the page and are not copied into our database. Data is encrypted in transit (HTTPS/TLS), and access inside AiLeadMs is limited to the people and systems that need it.

8. Sharing and Limited Use of Google User Data

AiLeadMs's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

• We do not sell Google user data, and we do not use it for advertising or to serve ads.
• We do not use data received from Google APIs to develop, improve, or train generalized AI or machine-learning models.
• We do not allow people to read your Google user data, unless you ask us to for support, it is needed for security or to follow the law, or it is aggregated and anonymized for internal operations.
• We transfer Google user data only as needed to provide the features you use (for example, sending your video to YouTube), to follow the law, or in a merger or sale where it stays under this policy, and to hosting and infrastructure providers who process it for us under confidentiality obligations.

9. Revoking Access and Deleting Google User Data

You can disconnect Google at any time in AiLeadMs: open Integrations, choose Manage on the connected product, and press Disconnect. The stored access and refresh tokens for that connection are deleted immediately. We recommend also removing AiLeadMs's access from your Google Account at https://myaccount.google.com/permissions, because disconnecting in AiLeadMs does not itself remove the permission you gave on Google's side.

To have the remaining connection record and any other Google-related data we hold about you deleted, follow the steps on our Data Deletion Instructions page (https://aileadms.com/data-deletion). We complete verified requests within 30 days, and Google user data is deleted together with your tenant account, subject to the limited exceptions described on that page.

10. YouTube API Services

AiLeadMs uses YouTube API Services. By connecting a YouTube channel you also agree to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms) and acknowledge the Google Privacy Policy (https://policies.google.com/privacy). You can revoke AiLeadMs's access to your YouTube data at any time through the Google security settings page (https://security.google.com/settings/security/permissions).

11. Data From Meta, LinkedIn, X, Reddit and Microsoft

If you connect a Meta, LinkedIn, X, Reddit, or Microsoft account, we receive data from that platform only after you sign in on the platform's own page and approve the permissions it lists. We never see or store your password for any of them. What we receive depends on the platform and on the features you use:

• Meta (Facebook Pages, Instagram, Threads, WhatsApp Business, Meta Ads): the Pages, Instagram professional accounts, Threads profile, WhatsApp Business account, and ad accounts you can manage and choose for a project (names and IDs); the content we publish for you; and, where you use those features, engagement and analytics for your own posts and the leads and messages received by your own Pages, forms, and numbers.
• LinkedIn: your name and email address, the company Pages you administer, the content we publish for you, and, where you use those features, post engagement and the ad accounts you select.
• X: your account's username and ID, and the posts we publish for you.
• Reddit: your account's username, the communities you choose for research or posting, and the posts we publish for you.
• Microsoft (Outlook Calendar): your name and email address, your calendars, and your availability and events when you use meeting-scheduling features.

12. Platform Rules That Also Apply

For every connected platform we use this data only to provide the features you use. We do not sell it, we do not use it for advertising, and we do not use it to train generalized AI or machine-learning models. Access tokens are encrypted at rest, are never sent to your browser, and are deleted immediately when you disconnect the integration in AiLeadMs (Integrations → Manage → Disconnect). To also remove our access on the platform itself, see our Data Deletion Instructions page (https://aileadms.com/data-deletion).

Each platform's own terms also apply to the data it gives us: the Meta Platform Terms (https://developers.facebook.com/terms), the LinkedIn API Terms of Use (https://legal.linkedin.com/api-terms-of-use), the X Developer Agreement and Policy (https://developer.x.com/en/developer-terms/agreement-and-policy), the Reddit Data API Terms (https://redditinc.com/policies/data-api-terms), and the Microsoft Services Agreement (https://www.microsoft.com/servicesagreement).

13. How We Share Information

• With connected third-party platforms (Meta/Facebook, Instagram, WhatsApp Business, YouTube/Google, LinkedIn, Google Ads) as needed to publish and run the campaigns you configure.
• With IVR/telephony and AI infrastructure providers who help us deliver calling, transcription, and content-generation features.
• With service providers who support hosting, analytics, payments, and customer support, under confidentiality obligations.
• When required by law, regulation, legal process, or to protect the rights, property, or safety of AiLeadMs, our users, or the public.
• We do not sell personal information to third parties for their own marketing purposes.

14. Data Retention

We retain tenant, campaign, lead, and call data for as long as your tenant account is active, and for a reasonable period afterward to comply with legal, accounting, or dispute-resolution obligations, after which it is deleted or anonymized.

You may request earlier deletion of specific lead or call data, subject to any legal retention requirements.

15. Data Security

We use technical and organizational measures — including encryption in transit, access controls, and tenant data isolation — to protect information against unauthorized access, alteration, or loss. See our Security Policy for more detail. No system is completely secure, and we cannot guarantee absolute security.

16. Your Rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. Residents of the European Economic Area have rights under the GDPR; residents of India have rights under the Digital Personal Data Protection Act, 2023 (DPDP Act) — see our GDPR & Data Protection page for details.

To exercise these rights, contact us using the details below or in your dashboard's account settings. For step-by-step deletion instructions — including how to remove AiLeadMs' access to a connected Facebook, Instagram, WhatsApp, YouTube, or Google account — see our Data Deletion Instructions page.

17. International Data Transfers

AiLeadMs primarily hosts data in India. Where data is transferred to or processed in other countries (for example, by an AI or infrastructure sub-processor), we take steps to ensure an adequate level of protection consistent with applicable law.

18. Children's Privacy

The Service is intended for business use by adults and organizations. We do not knowingly collect personal information from children under 18.

19. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy with an updated "Last updated" date and, for material changes, notify tenants via email or the dashboard.

20. Contact & Grievance Officer

For privacy questions, data requests, or grievances, please email hello@aileadms.com or reach out via our Contact page. In accordance with Indian law, we designate a Grievance Officer to address complaints related to personal data; contact details are available on request.