1. Who we are
Leadnest Marketing Co. (OPC) Pvt. Ltd. ("Leadnest", "we", "us", "our") is a real estate performance marketing company based in Hyderabad, Telangana, India. We run Meta Ads and Google Ads campaigns for builders, developers, channel partners and real estate agents, and we operate the Leadnest CRM, a lead management tool that collects leads from advertising platforms and delivers them to our clients.
This policy is written to comply with India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Information Technology Act, 2000 and its rules, and the Meta Platform Terms and Developer Policies.
2. Scope of this policy
This policy applies to:
- Our website leadnestmarketingco.com and its forms;
- Our advertising, creative, landing page and lead routing services for clients;
- The Leadnest CRM and the Leadnest Meta app, which connects to Facebook Pages and ad accounts to retrieve lead ad submissions.
Our two roles. When you contact us directly (for example, through our website), we decide how your data is used and act as a Data Fiduciary. When we process leads generated by a client's ads (for example, a person who fills in a builder's Facebook lead form), we act on behalf of that client as a Data Processor. In that case the client's own privacy policy, shown on its lead form, also applies, and requests about that data may be directed to the client or to us.
3. Data we collect
| Source | Data |
|---|---|
| Website enquiry and strategy-call forms | Name, phone / WhatsApp number, company or project name, your role (builder, agent, etc.), project type, ad budget range and any message you send. |
| Lead ad forms run for our clients (Meta, Google) | Information the person chose to submit on the client's form, such as name, phone number, email, city, budget, property preference, preferred site-visit time and answers to custom questions, plus the date, form, ad and campaign the lead came from. |
| Landing pages we build for clients | Enquiry form details as above, and technical data such as page visited and referral source. |
| Leadnest CRM users (our clients and their team members) | Name, email, phone, company, login details, user role, notes and activity within the CRM. |
| Facebook Login / account connection | Your public profile name and ID, the list of Facebook Pages and ad accounts you choose to connect, and access tokens that let our app retrieve leads for those Pages. See section 4. |
| Automatically collected | IP address, device and browser type, pages viewed and similar usage data, collected through cookies and analytics or advertising pixels. |
We do not intentionally collect sensitive data such as financial account numbers, government ID numbers, health information or biometric data.
4. Data from Meta platforms
The Leadnest Meta app uses Meta's Marketing API and Webhooks so that, when a person submits a lead form on a client's Facebook or Instagram ad, the lead is delivered to that client's Leadnest CRM in real time. Depending on what a client authorises, the app may request the following permissions:
- leads_retrieval: to read lead form submissions for Pages the client has connected;
- pages_manage_metadata: to subscribe the client's Page to lead notifications (webhooks);
- pages_show_list and pages_read_engagement: to show the client which Pages they can connect and read basic Page details;
- pages_manage_ads: required by Meta to read lead details from the Page's lead forms;
- ads_management / ads_read: to show the campaign, ad set and ad name a lead came from, and related reporting.
Our commitments on Meta Platform Data: we use it only to deliver leads and reporting to the business that owns the connected Page or ad account. We do not sell it, rent it, use it to build profiles for any other purpose, share it with data brokers, or use it for advertising outside that client's own campaigns. We comply with the Meta Platform Terms and Developer Policies, and we delete Meta Platform Data when it is no longer needed for the purpose it was obtained for, when a client disconnects, or when Meta or the user requests it.
5. How we use data
- To respond to your enquiry, schedule a strategy call and send proposals you request;
- To deliver leads to the correct client in the Leadnest CRM, by WhatsApp, email or other channels the client sets up, so their sales team can contact the person who enquired;
- To plan, run, measure and improve advertising campaigns for our clients, including lead quality and cost-per-lead reporting;
- To provide, secure, maintain and support the Leadnest CRM, and to authenticate users;
- To send service messages such as account, billing and security notices;
- To comply with legal obligations and enforce our terms.
We process personal data on the basis of your consent (for example, when you submit a form) and for legitimate uses permitted under the DPDP Act. You can withdraw consent at any time as described in section 9.
7. Data retention
- Lead data is kept for as long as the client's account is active, or as the client instructs, and is deleted within 30 days after the client disconnects the data source or closes the account, unless law requires longer retention;
- Facebook access tokens are deleted or revoked as soon as a Page is disconnected or the app is removed;
- Website enquiries are kept for up to 24 months after our last contact with you;
- Billing and tax records are kept for the period required by Indian law.
8. Security
We use reasonable technical and organisational safeguards, including encryption in transit (HTTPS/TLS), access controls so each client sees only its own leads, restricted staff access, verification of webhook signatures and secure storage of access tokens. No system is completely secure; if a personal data breach occurs, we will notify affected clients, users and the Data Protection Board of India as required by law.
9. Your rights
Subject to applicable law, you may:
- Ask what personal data we hold about you and how it is used;
- Ask us to correct, complete or update it;
- Ask us to erase it, or withdraw your consent;
- Nominate another person to exercise your rights in case of death or incapacity;
- Raise a grievance with us, and if unresolved, with the Data Protection Board of India.
To make a request, email contact@leadnestmarketingco.com. We will respond within 30 days. If your request is about a lead you submitted to one of our clients, we may coordinate with that client.
10. Data deletion instructions
You can ask us to delete your data, including any data received through the Leadnest Meta app, in either of these ways:
Remove the app from Facebook
- Open Facebook and go to Settings & privacy → Settings → Business integrations (or Apps and websites);
- Find Leadnest CRM, select it and click Remove;
- Page admins can also remove the app from the Page's settings. Once removed, we stop receiving new data and delete stored access tokens.
Email us
- Send an email to contact@leadnestmarketingco.com with the subject "Data deletion request";
- Include your name and the phone number or email you used, and, if relevant, the Facebook Page or project name;
- We will confirm your request and delete your data within 30 days, except where we must keep certain records by law. We will tell you once deletion is complete.
12. Children
Our services are meant for adults and businesses. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.
13. International transfers
Some of our service providers may store or process data outside India. Where this happens, we transfer data only as permitted under the DPDP Act and take steps to ensure it remains protected.
14. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top shows when it was last changed. For significant changes, we will notify CRM users by email or in the app.
15. Contact & grievance officer
Leadnest Marketing Co. (OPC) Pvt. Ltd.
Hyderabad, Telangana, India
Email: contact@leadnestmarketingco.com
Phone / WhatsApp: +91 73308 04558
Grievance Officer: Anush, Founder
Email: contact@leadnestmarketingco.com
We acknowledge grievances within 48 hours and aim to resolve them within 30 days.