1. Overview
This policy explains what personal data Hemlead ("Hemlead," "we," "us," or "our") collects, why we collect it, who we share it with, and the rights you have over it. It applies to https://hemlead.com (our marketing site) and to the Hemlead application at https://app.hemlead.com.
Hemlead is a CRM built for sales teams running Meta and Google lead ads. Because of what the product does, this policy covers two different kinds of data: data about you if you visit our site or use our product, and data about your leads that you and your team store inside Hemlead. Section 4 explains that second part specifically, since it works a little differently.
2. Who we are
Hemlead operates https://hemlead.com and the Hemlead CRM application. For any privacy question, you can reach us at support@hemlead.com or through our contact page.
3. Data we collect
From visitors to our website
- Standard technical data (IP address, browser type, pages visited, referring site) collected automatically for analytics and security.
- Information you submit through a form on our site — the contact form, the demo booking form, or the exit-intent popup — which typically includes your name, email, phone number, company name, and team size.
From trial and paying customers
- Account information: name, work email, phone number, company name, and billing details when you subscribe to a paid plan.
- Usage data about how you use the CRM, used to improve the product and provide support.
The short version: if you're browsing our site or evaluating Hemlead, we collect what you'd expect — contact details you give us, and standard site analytics. If you're a customer, your own leads' data is handled differently — see the next section.
4. Lead data you upload to Hemlead
When you and your team use Hemlead to manage leads captured from Meta or Google ads, your website, or other sources, that lead data — names, phone numbers, email addresses, and notes your reps add — belongs to you, our customer. In this relationship, you are the data controller (or "data fiduciary" under India's Digital Personal Data Protection Act, 2023) for your leads' information, and Hemlead acts as a data processor on your behalf, storing and processing that data only to provide the service you've signed up for.
This means:
- We don't sell, rent, or use your leads' data for our own marketing purposes.
- We only access it to provide support, maintain the platform, or as needed to operate features you've turned on (like Meta CAPI sync).
- You're responsible for having a lawful basis to collect and process your own leads' data — Hemlead is the tool, not the party responsible for how your business collects consent from the people you're contacting.
5. How we use data
- To provide, maintain, and improve the Hemlead product and website.
- To respond to support requests, demo bookings, and contact form submissions.
- To send account-related emails (like trial reminders or billing notices) and, where you've agreed to receive them, product updates or marketing emails.
- To detect, prevent, and address technical issues, fraud, or abuse of the platform.
- To meet legal obligations where required.
6. Third parties we share data with
We use a small number of third-party services to run Hemlead. We only share what each service needs to do its job, and we don't sell data to anyone.
| Who | What for | What's shared |
|---|---|---|
| Meta (Facebook/Instagram) | Capturing Instant Form leads, and Meta CAPI sync | Email and phone number, hashed with SHA-256 before it ever leaves Hemlead — Meta never receives this data in plain text |
| Brevo | Sending account and marketing emails | Name and email address, for customers who use email features or have opted into marketing |
| Interakt | WhatsApp messaging features | Phone number and message content, only for teams who enable WhatsApp integration |
| Telephony providers (e.g. Exotel) | Click-to-call and call logging | Phone number and call metadata, only for teams who enable telephony integration |
| Hosting & infrastructure providers | Storing data and running the application | All account and lead data is stored on our hosting infrastructure |
We may also disclose data where required by law, to protect our legal rights, or in connection with a merger, acquisition, or sale of assets — in which case we'd notify affected customers before any transfer of their data.
7. Cookies and tracking
Our website uses a small number of cookies and similar technologies for essential site functionality (like remembering your session) and basic analytics (to understand how visitors use our site). We do not use cookies to build advertising profiles of website visitors.
8. How we protect your data
- Email and phone numbers are hashed with SHA-256 before being sent to Meta — Meta never sees this data in readable form.
- Data is encrypted in transit between your browser and our servers.
- Access to customer data within Hemlead is restricted by role — admins and reps only see what their permissions allow.
- We limit internal access to production data to what's necessary for support and engineering work.
No system is completely immune to risk, and we can't guarantee absolute security — but these are the concrete practices we follow to keep data protected.
9. How long we keep data
We keep account and lead data for as long as your account is active, so the product keeps working the way you expect. If you cancel your subscription, we retain your data for a limited period afterward in case you want to reactivate, and then delete it — see Section 11 for how to request deletion sooner. Website contact form submissions are kept only as long as needed to respond to your enquiry.
10. Your rights
Depending on where you're located, you may have rights under applicable data protection law — including India's Digital Personal Data Protection Act, 2023 — to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Request deletion of your data.
- Withdraw consent for marketing communications at any time.
- Ask how your data has been used or shared.
To exercise any of these rights, contact us at support@hemlead.com.
11. Deleting your account
If you'd like to delete your Hemlead account and associated data, you can submit a request directly through our account deletion page. We'll process verified requests within a reasonable timeframe and confirm once it's complete.
12. Children's privacy
Hemlead is a business tool intended for use by adults running sales teams. It is not directed at children, and we do not knowingly collect personal data from anyone under 18.
13. International data transfers
Hemlead is based in India, and data may be stored and processed on servers located in India or other countries where our hosting and service providers operate. Where data is transferred internationally, we take steps to ensure it's handled consistently with this policy.
14. Changes to this policy
We may update this policy from time to time as our product, integrations, or legal obligations change. We'll update the "Effective date" at the top of this page when we do, and for significant changes, we'll make a reasonable effort to notify customers directly.
15. Contact us
Questions about this policy or how we handle your data? Reach us at support@hemlead.com, by phone at +91 90000 00000, or via our contact page.