Effective 14 October 2026

Privacy policy

Who we are

Leadbot is a lead management service. Businesses connect their messaging channels to it, and it reads the conversations on those channels, drafts replies for the business to approve, and sends the approved replies back through the same channel. This policy describes what Leadbot collects, why, and what you can ask of us.

What we collect

Account details you give us when you sign up: your name, email address and organization.

Channel data from the accounts you connect, such as an Instagram professional account or a Gmail mailbox: the account's identifier and username, the access tokens the platform issues so we can act on your behalf, and the messages in that account's conversations, including the names and identifiers of the people who wrote to you.

Operational records: when you signed in, what you approved, and technical logs needed to run and secure the service.

How we use it

To sync your conversations into one inbox, to draft replies for your approval, to send the replies you approve, and to summarise and score conversations so you can see which leads need you.

Drafting and summarising are done with an AI model provider that processes the conversation text on our behalf. We do not use your conversations to train models, and we do not sell any of your data.

Data from Meta platforms

When you connect an Instagram account, we use Meta's Instagram API with the permissions you grant to read your direct messages and send replies. We use that data only to provide the service described above, we keep it only as long as described below, and we do not share it with anyone except the processors named in this policy.

Who else sees it

Our hosting provider, which stores the data, and our AI model provider, which processes conversation text to draft and summarise. Both act on our instructions. We disclose data to no one else unless the law requires it.

How long we keep it

Removing a connected channel in the app stops syncing at once and deletes the access token we held for it. The conversations already imported stay in your inbox until you ask us to delete them. Deleting your account, or asking us to, deletes your account details, channels, tokens and conversations.

Your rights and data deletion

You can ask us to show you, correct, export or delete the data we hold about you or about an account you connected. Write to admin@ldbot.net from the email address on your Leadbot account, or, for data about a connected channel, from an address that controls that channel. We act on a deletion request within 30 days and confirm when it is done.

If you wrote to a business that uses the service and want your messages removed, the same address works; we will confirm the request with the business whose channel holds them.

Security

Data is encrypted in transit. Access tokens are stored server-side and never shown in the app. Access to production systems is limited to the people who operate the service.

Changes to this policy

We will update this page when our practices change and note the new effective date at the top. A change that affects how we use data you already gave us will be announced in the app before it takes effect.

Contact

Questions about this policy go to admin@ldbot.net.