Privacy policy

Last updated: 22 Oct 2026

Purplead ("we") runs Purplead, a lead management CRM used by businesses ("clients") to manage enquiries from their customers ("leads"). This policy explains what data we handle and why.

Data we collect

Account data: name, email, phone and password (stored encrypted) of our clients and their team members.
Lead data: details that leads share with our clients through Facebook/Instagram lead forms, website forms, imports or manual entry — usually name, phone, email, city and form answers.
Billing data: invoice details and payment status. Card/UPI details are handled by Razorpay; we never see or store them.
Usage data: login times, actions inside the app (activity log) and technical logs for security.

Facebook / Meta data

When a client connects their Facebook page, we use Meta permissions only to read leads from the lead forms they choose, show ad and campaign names on those leads, read ad spend for reports, and send lead-stage updates back to Meta (Conversions API) when the client switches this on. Phone numbers and emails sent to Meta are hashed (SHA-256). We do not sell or share this data with anyone else.

How we use data

To provide the CRM, send leads to the right team member, send alerts, invoices and service emails, provide support, and keep the service secure. Lead data belongs to our client; we process it on their behalf and on their instructions.

Sharing

We share data only with service providers needed to run the service (hosting, email delivery, Razorpay for payments, Meta when the client connects it, Google Gemini for the help assistant questions) or when the law requires it.

Storage and security

Data is stored on our hosting provider's servers. Passwords are stored as one-way hashes and access tokens are encrypted. Each client can see only its own data. No system is perfectly secure; if we learn of a breach that affects your data, we will inform you and the authorities as the law requires.

How long we keep data

Lead and account data is kept while the account is active. After an account is closed, we delete its data within 30 days, except invoices and payment records, which we keep for 8 years as Indian tax law requires. Website demo requests are kept for up to 12 months.

Cookies

The app uses one session cookie to keep you logged in. If the website owner turns on the Meta Pixel, the public website also uses Meta's cookies to measure ad results.

Children

Purplead is a business tool and is not meant for anyone under 18.

Your rights

You can ask to access, correct or delete your data, or withdraw consent. Business owners can download all their leads any time (Leads → Export) and request account closure from Account → Close account. Others can see our Data deletion page or write to help@purplead.in.

Grievance officer

For any privacy complaint, write to our grievance officer at help@purplead.in. We reply within 7 days and resolve within 30 days.

Contact

Purplead, Surat · help@purplead.in