Privacy Policy

Last updated: 2026-11-13

Template with placeholder company details. Have it reviewed by a lawyer and fill in company.ts before launch.

This policy explains how LeadGiva Technologies Pvt. Ltd. ("LeadGiva", "we") processes personal data when you visit https://leadgiva.com and use our service, and which rights you have under the EU General Data Protection Regulation (GDPR) and similar laws.

1. Controller

LeadGiva Technologies Pvt. Ltd.
101 Demo Business Park, Baner Road, 411045 Pune, India
Email: privacy@leadgiva.example

2. What data we process and why

a) Your account

Company name, email address, password (stored only as a secure hash), country and, optionally, a WhatsApp number. Your email address is stored encrypted. We need this data to provide your account and the service you signed up for (legal basis: Art. 6(1)(b) GDPR — contract).

b) Searches and results

The business types and locations you search for, and the business listings found, are saved in your search history so you can open, filter and export them later (Art. 6(1)(b) GDPR). You can delete any search in your history.

c) Payments

Paid plans are processed by our payment provider. We store the order (plan, amount, status, date) but never your card or bank details (Art. 6(1)(b) and (c) GDPR — contract and tax/accounting duties).

d) Password reset codes

If you reset your password, we send a one-time code by email or, if you provided it, by WhatsApp (Art. 6(1)(b) GDPR).

e) Contact form

Your name, email address and message, to answer your request (Art. 6(1)(b) or (f) GDPR).

f) Technical data and security

When you use the site, our servers process your IP address, browser information and request logs to deliver pages, prevent abuse (for example limiting login attempts) and fix errors (Art. 6(1)(f) GDPR — legitimate interest in a secure, working service).

g) Analytics

We use Google Analytics 4 to count visits and see which pages are used. For visitors from the EU/EEA, the United Kingdom and Switzerland, analytics cookies are switched off by default; only cookieless, aggregated signals are sent unless you give consent (Art. 6(1)(a) GDPR — consent). For other visitors the legal basis is our legitimate interest in improving the site (Art. 6(1)(f) GDPR).

3. Business data in search results

Search results contain publicly listed business information (name, address, phone number, website, rating), provided through the Google Maps Platform. Where a listing relates to an identifiable person (for example a sole trader), we process it based on our and our users' legitimate interest in finding business contacts (Art. 6(1)(f) GDPR, Art. 14 GDPR). If you want your business removed from results stored by us, or object to the processing, email privacy@leadgiva.example.

Users who contact businesses found with LeadGiva are themselves responsible for complying with marketing laws in their country (for example rules on cold calls and emails).

4. Cookies and browser storage

Login session (browser local storage) — keeps you signed in. Necessary.
Search country and dismissed notices (local storage) — remembers your choices. Necessary.
Google Analytics cookies (_ga, _ga_*) — visit statistics; off by default for EU/EEA, UK and Swiss visitors.

5. Service providers (recipients)

We share personal data only with these categories of service providers, bound by data processing agreements, and only as far as needed to run the service:

Cloud hosting provider — servers, database and cache.
Maps and analytics provider — business search data and visit statistics (see sections 2g and 3).
Payment provider — payment processing.
Messaging and email providers — sending one-time codes and service emails.

The names and locations of these providers are available on request at privacy@leadgiva.example; customers can also find them in our Data Processing Agreement after signing in.

We do not sell your personal data.

6. Transfers outside the EU

Our servers are currently located in India, and some providers process data in the USA. For these transfers we rely on EU Standard Contractual Clauses (Art. 46 GDPR) or, where available, an adequacy decision (for example the EU–US Data Privacy Framework).

7. How long we keep data

Account data and search history: while your account exists; deleted when you delete your account or ask us to.
Login sessions: refresh tokens expire after 14 days.
Payment records: as long as tax and accounting laws require (usually up to 10 years).
Contact messages: until your request is resolved, then deleted within 12 months.
Server logs: short term, only for security and error analysis.

8. Your rights

You have the right to:

access the data we hold about you (Art. 15 GDPR),
have it corrected (Art. 16) or deleted (Art. 17),
restrict processing (Art. 18) and receive your data in a portable format (Art. 20),
object to processing based on legitimate interest (Art. 21),
withdraw consent at any time, without affecting earlier processing (Art. 7(3)),
complain to a data protection supervisory authority, in particular in your EU country of residence (Art. 77).

To use these rights, email privacy@leadgiva.example. We answer within one month.

9. Security

We use HTTPS encryption, hashed passwords, encrypted email addresses, access control and rate limiting to protect your data.

10. Changes

We update this policy when our service changes. The date at the top shows the latest version.