Privacy policy.

Who we are

Leadz is a product of Noetic Laboratories (OPC) Private Limited, Pandian Nagar, East Coast Road, Vettuvankeni, Chennai 600115, Tamil Nadu, India ("Noetic", "we"). This policy covers two things: this website, and the Leadz software that a business runs to track its customer calls.

This website

The website does not ask you to create an account, does not have a sign-up or contact form, and we do not run advertising or analytics scripts on it. We do not set cookies. The home page uses your browser's session storage only to remember, for that visit, that you have already seen its opening animation; this stays in your browser and is not sent to us.

Our servers or hosting provider may keep ordinary technical logs of requests (such as IP address, time and page requested) for security and reliability. We do not use them to identify visitors.

If you choose to contact us by WhatsApp, email or phone, we receive what you send: your name, number or address, and your message. We use it only to reply, to arrange a demo or quote, and to keep a record of that conversation. WhatsApp and your email provider process those messages under their own policies. We do not sell your details or add you to a mailing list without asking.

The Leadz software

When a business uses Leadz, it records information about its own customers and calls: names, phone numbers, notes, follow-up dates, call times and outcomes, and, where a phone records calls, the call recording files. It also holds the names and sign-in details of the business's own team members.

That information belongs to the business. Noetic does not use it for its own purposes, does not sell it, and does not use it to advertise.

Where the data lives

Setup	Where data is stored
Self-hosted	On the business's own computer or server. We install it remotely and train the team, but the data is not copied to Noetic. If you ask us for help and give us remote access, we can see what is on screen during that session; see "Support access" below.
Cloud	On a private copy of Leadz set up for the business, with its own database and storage, run by us.

Call recordings are stored where the business chooses: on its own computer, in storage it controls, or in our cloud storage. Recordings are made by the caller's phone, not by Leadz. For calls placed from Leadz, the Leadz Phone app attaches the phone's recording to the call. It matches the phone's recording files against the list of calls placed from Leadz; a recording that matches none of them, such as a personal call, is not uploaded, and its number and time are not sent. Recordings are compressed on the phone before upload.

Who is responsible for the data

Under India's Digital Personal Data Protection Act, 2023 ("DPDP Act"):

• The business using Leadz decides why and how its customers' personal data is used. It is the Data Fiduciary for that data. It is responsible for having a lawful basis, giving notice, getting any consent required (including for recording calls), and answering requests from its customers.
• When we host Leadz on our cloud for a business, Noetic acts as a Data Processor: we store and process the data on the business's behalf and on its instructions only.
• When a business self-hosts, Noetic does not hold the data and is not a processor of it, except to the limited extent of a support session the business starts.
• For the information we receive directly through the website or from people who contact us, Noetic is the Data Fiduciary.

The business's recording notice and consent are covered separately in our recording consent guide.

Support access

Setup and support are done remotely. We access a customer's system only when the customer asks for help and allows it, and we use that access only for the task requested. On the cloud plan, our staff may need to access a business's instance to keep it running or to fix a problem; we limit this to what is necessary.

Retention and deletion

• Self-hosted: the business controls retention. It can delete customers, notes and recordings in Leadz or from its own storage at any time. Nothing is retained by us.
• Cloud: data stays for as long as the business's plan is active. The business can export its customers to a spreadsheet at any time. When a plan ends, or when the business asks us to delete its instance, we delete its database and recordings from our systems. Backups are removed on their normal rotation. We will confirm to the business in writing when deletion is done.
• Website enquiries: we keep messages for as long as needed to deal with your enquiry and for ordinary business records, and delete them on request unless we are required to keep them.

Security

• People sign in with a short ID and a time-based code from an authenticator app. There are no passwords to leak or guess. Sign-in attempts are rate limited.
• Access inside Leadz follows a hierarchy of owner, manager and caller, so people see only the customers in their own team.
• Connections to the cloud service are encrypted in transit.
• A self-hosted installation is only as secure as the computer it runs on. The business is responsible for keeping that computer updated, protected and backed up.

No system is completely secure. If we learn of a personal data breach affecting data we process on a business's behalf, we will tell that business without undue delay so it can meet its own obligations.

Sharing

We do not sell personal data. We share it only with service providers who help us run the cloud service (such as hosting and storage), under terms that limit their use of it, or when the law requires.

Children

Leadz is a business tool and the website is not directed at children. We do not knowingly collect children's data through the website.

Your rights and requests

Under the DPDP Act you may ask to access, correct, update or erase your personal data, and to have a grievance addressed. If your data is in a business's Leadz (for example, you were a customer of that business and it recorded a call), please contact that business first, because it is the Data Fiduciary. If you tell us, we will pass your request to the business, and we will help it carry out the request where we host its data. For anything about this website or messages sent to us, contact us directly.

Contact for privacy requests and grievances: contact@noeticlaboratories.com, +91 81222 43620, or WhatsApp +91 99949 08702. We aim to reply within 7 days.

Changes

If we change this policy we will update the date at the top of the page. For material changes affecting customers on the cloud plan, we will tell them directly.