Privacy Policy

Last updated: 23 October 2026

This policy explains how SRMG Consulting LLP ("we") handles personal data for LeadRad. We follow India's data protection laws, including the Digital Personal Data Protection Act, 2023 and its Rules, as they take effect.

1. Whose data this covers

1. Data we decide about: the people who use LeadRad for a customer (users), people who contact us or chat with our support, and visitors to leadrad.srmgc.in.

2. Data we handle for customers: the leads, contacts and messages a customer keeps in LeadRad. For this data the customer decides why and how it is used, and we act only on its instructions (Data Processing Terms). If you are someone a LeadRad customer has contacted, please contact that business first; we will help it answer you.

2. What we collect

Account and user details: name, work email, phone number, role and sign-in records; and the sign-in details and connection tokens for the mailboxes and WhatsApp numbers you connect. We store these encrypted, use them only to send and read messages for you, and never share them or show them to our staff. Customer messages may contain sensitive information; we use it only to provide LeadRad.
Business and billing details: business name, address, GSTIN, invoices and payment records. Card and UPI details are entered on our payment partner's pages; we do not see or store full card numbers.
Usage data: which screens and buttons are used, errors and performance. This never includes the content of leads or messages.
Support data: support chats, emails and calls, and the log of any access you grant us.
Website data: only the cookies needed to sign in and keep you signed in. We use no advertising or tracking cookies.

3. Why we use it

To provide LeadRad, sign you in and keep it secure.
To bill you, issue GST invoices and keep tax records.
To give support and fix problems.
To improve LeadRad, using usage data that holds no lead content.
To send service messages (for example billing, security and changes to terms). We send news about LeadRad only if you agree, and you can stop it at any time.
To meet legal duties.

We use personal data with your consent, or for uses the law allows without consent, such as meeting legal duties.

4. AI and your data

1. AI features send the text a task needs (for example, a lead's message to sort) to the AI model provider doing that task. Depending on the AI service the customer chooses, this may be processed outside India.

2. We use AI model providers on business terms under which they may not use this data to train their models.

3. We test AI models on our own test data. At a customer's request, we can also test AI models on a sample of its own messages, to recommend or build a more customised AI setup for it. The sample goes only to the AI model providers the customer approves and is deleted after the test.

5. Who we share data with

We never sell personal data. We share it only with the kinds of service providers below, who work for us under contract, and with authorities where the law requires.

AI model providers. What they do for us: Run the AI for AI features and our support resources. Where: Outside India, depending on the AI service chosen.
Speech-to-text provider. What they do for us: Turns call recordings into text. Where: India, or outside India for some calls.
Hosting provider. What they do for us: Hosts LeadRad, its databases and backups. Where: India.
Payment partner. What they do for us: Takes payments. Where: India.
Email service. What they do for us: Our email, including support and invoice emails. Where: India and abroad.
Website host. What they do for us: Hosts our public website. Where: India.

Customers can ask us for the current list of named providers. Services a customer connects to LeadRad, such as Meta's WhatsApp or the customer's own mailbox or Google account, are the customer's own providers and handle data under their own terms.

6. Where data is kept

LeadRad's databases and backups are kept on servers in India. Some of our providers, such as AI model, email and speech-to-text providers, may process data outside India; the list of named providers shows which. India's law allows transfers abroad except to countries the government restricts; we will follow any such restriction.

7. How long we keep it

We keep personal data only as long as the law requires or the service needs:

Invoices, payment and accounting records: 8 years from the date each record is made (LLP Rules), or 72 months from the due date of the GST annual return for that year, whichever ends later, or longer if a tax proceeding or dispute requires.
Account and user sign-up details (names, emails and phone numbers of a customer's users): 180 days after that user is removed or the account closes, as the IT Rules require. Customer registration details listed in the CERT-In directions (names, contact details, ownership, the period of service, IP addresses allotted or used, the email and time of registration, and the purpose of use): 5 years after the account closes, if those directions apply to LeadRad.
Records of each acceptance of these terms ("I agree"): 3 years after the account closes, or longer while a dispute is open.
Logs of all our IT systems, including any access to a customer's app: 180 days on a rolling basis, kept in India. From 13 May 2027, the personal data, traffic data and processing logs that India's data protection rules require are kept for at least 1 year from the processing.
Content removed after a complaint or order, and the related records: 180 days after removal, or longer if the law requires.
Support chats and usage data: deleted when the account closes, except anonymous totals and records of complaints, access grants and incidents, which we keep while a dispute is possible.
Customers' leads, contacts and messages: deleted 30 days after the account closes, including backups. Records the law requires us to keep, or that are needed for an open dispute, are kept apart, used only for that purpose and deleted when no longer needed.

8. How we protect it

Each customer has a private copy of LeadRad with its own database and encryption key. Data is encrypted in transit, and daily backups are encrypted. Our staff can enter a customer's app only with the customer's grant, where the law requires it, or to contain a security incident; every such access is shown to the customer and logged. If a breach affects personal data, we inform those affected and the Data Protection Board of India as the law requires, and we report cyber security incidents to CERT-In within 6 hours.

9. Your rights

These rights are our promise to you now, and become legal rights when India's data protection rules apply (about May 2027). You may ask us to:

give you a summary of your personal data we hold and how we use it;
correct, complete or update it;
erase it, where we are not required to keep it;
withdraw consent you gave (this does not affect what was done before);
nominate someone to act for you if you die or cannot act.

Write to leadrad@srmgc.in, or to SRMG Consulting LLP, #26/c, IIITB-IC, IIIT Bangalore Innovation Centre, Hosur Road, Electronic City, Bengaluru 560100, Karnataka. We will reply within 48 working hours. If you are not satisfied, you may complain to the Data Protection Board of India.

10. Grievance Officer

Sadhasivam Thangavel, Authorised Officer, SRMG Consulting LLP, P-1102, Ajmera Infinity, Neeladri Road, Electronic City, Bangalore South, Bangalore 560100, Karnataka. Email admin@srmgc.in; phone +91 90194 65108. We acknowledge complaints within 24 hours and resolve them within 7 days. Shorter legal deadlines apply to urgent cases, such as unlawful content and court or government orders. If you are not satisfied with our decision, you may appeal to the Grievance Appellate Committee within 30 days, as the IT Rules allow.

11. Children

LeadRad is for businesses. It is not meant for anyone under 18, and we do not knowingly collect children's data.

12. Google user data

This section applies when a user connects a Google account to LeadRad. LeadRad's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

What LeadRad accesses, and why. It asks only for:

your Google account's name and email address, to show which account is connected;
Google Calendar: to create, move and cancel the meetings you book in LeadRad (with Google Meet links) on your primary calendar, and to read upcoming events so meetings are not double-booked;
Google Contacts: to add your sales leads to a contact group LeadRad creates, and to read your contacts only to avoid duplicates. LeadRad never changes contacts you created;
Google Tasks: to keep your follow-up actions in one task list LeadRad creates, and mark them done both ways;
Google Drive: only the files you choose in Google's file picker, to import lead lists.

LeadRad does not access Gmail through Google's APIs.

How we use it. Only to provide and improve these features for you. We do not sell it, use it for advertising, use it to decide credit or lending, or use it to develop, improve or train general AI or machine-learning models, and our AI model providers may not do so. Where you ask for an AI feature, the text that task needs is sent to the AI model provider doing it, as section 4 explains.

If you connect your own AI tool to LeadRad (MCP), LeadRad passes it only what you ask it to, and only after you switch the link on; that tool's use of the data is governed by its own terms with you.

Who can see it. Nobody at SRMG reads your Google data unless you ask us to (for example for support), to investigate security or abuse, to comply with the law, or in aggregated and anonymised form to run the service.

How we store and keep it. In your firm's private copy of LeadRad; Google access tokens are stored encrypted. We keep it while your Google account stays connected and your firm uses LeadRad.

How to remove it. Disconnect at any time at myaccount.google.com/permissions. To have the data LeadRad holds from your Google account deleted, write to leadrad@srmgc.in; we delete it within 30 days. Meetings, contacts and tasks LeadRad added to your Google account stay there until you delete them in Google.

13. Changes

We will post changes here and tell customers in the app and by email at least 30 days before a change that matters takes effect.