Privacy Policy

Last updated: June 18, 2026

Operated by GIT Consulting and Services Inc. (“Leadnex”, “we”, “us”). Questions: Legal@Leadnex.io.

This Privacy Policy explains how GIT Consulting and Services Inc. (“Leadnex”, “we”, “us”) collects, uses, discloses, and safeguards personal data when you use the Leadnex platform, websites, and related services (the “Services”), and when you interact with a business that uses Leadnex to power its AI agent on WhatsApp, Facebook Messenger, or the web. We act as a data controller for our own account holders and as a data processor for the end-customer conversations our business customers run through us.

1. Who we are

The data controller is GIT Consulting and Services Inc., operating the Leadnex service. For any privacy request or question, contact Legal@Leadnex.io.

2. Data we collect

a. Account & billing data (you, our customer)

• Name, business name, email address, and password (stored only as a secure hash).
• Workspace settings, agent configuration, and uploaded knowledge/catalog content.
• Billing details processed by our payment provider (we do not store full card numbers).
• Usage, log, and device data (IP address, browser, timestamps) for security and analytics.

b. End-customer conversation data (processed on behalf of our customers)

• Messages exchanged with the AI agent on WhatsApp, Facebook Messenger, or the web.
• Profile identifiers provided by the channel (e.g., a Messenger-scoped Page user ID, WhatsApp number, display name).
• Information a contact volunteers (interests, budget, booking details) to receive a response.

3. Data we receive from Meta (WhatsApp & Messenger)

When a business connects its Facebook Page or WhatsApp number, we receive messages and the sender’s channel-scoped identifier from Meta solely to deliver and respond to that conversation. We do not use Meta platform data for advertising, sell it, or share it except as needed to operate the Services. Our use of information received from Meta APIs adheres to the Meta Platform Terms and Developer Policies. You can remove this access at any time by disconnecting the channel in your Leadnex dashboard or removing the app from your Facebook Page settings, and you can request deletion via our Data Deletion process.

4. How we use data

• To provide, operate, secure, and improve the Services.
• To generate AI responses grounded only in the connecting business’s own knowledge and catalog.
• To authenticate users, process billing, and prevent fraud and abuse.
• To send service communications and, where permitted, product updates (you can opt out).
• To comply with legal obligations and enforce our terms.

We do not sell personal data, and we do not use end-customer conversation content to train third-party foundation models.

5. Legal bases (EU/UK)

Where the GDPR/UK GDPR applies, we rely on: contract (to provide the Services), legitimate interests (security, improvement, fraud prevention), consent (optional marketing, certain cookies), and legal obligation (compliance, accounting).

6. AI processing

The Services use large-language-model providers to generate replies. Prompts are constructed from the relevant business’s knowledge/catalog and the current conversation. We send only the minimum content required to produce a response and do not permit our model providers to use that content to train their models where such controls are available.

7. Sharing & sub-processors

We share data only with vendors that help us run the Services, under contractual confidentiality and data-protection terms:

We may also disclose data to comply with law or to protect rights, safety, and the integrity of the Services.

8. International transfers

We host primarily in Canada. Where data is transferred across borders (e.g., to model or messaging providers), we rely on appropriate safeguards such as Standard Contractual Clauses and equivalent mechanisms.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, port, or restrict your data, to object to certain processing, and to withdraw consent.

• EU/UK (GDPR): the rights above, plus the right to lodge a complaint with your supervisory authority.
• Canada (PIPEDA / Law 25): access and correction rights and the right to complain to the Office of the Privacy Commissioner.
• California (CCPA/CPRA): the right to know, delete, correct, and opt out of “sale”/“sharing” — we do not sell or share personal data as defined by the CCPA.
• Gulf (UAE/KSA PDPL): access, correction, deletion, and objection rights under applicable local law.

To exercise any right, email Legal@Leadnex.io or use the Data Deletion page. If you are an end-customer of a business using Leadnex, we will route your request to that business (the controller) and assist them.

10. Data retention

We keep account data for as long as your account is active and as needed to provide the Services, then delete or anonymize it within a reasonable period unless a longer term is required by law. Conversation data is retained per the connecting business’s settings; deletion requests are honored as described in our Data Deletion policy.

11. Security

We use encryption in transit, hashed credentials, strict per-tenant data isolation, signed webhooks, and access controls. No system is perfectly secure, but we work to protect your data and will notify you and regulators of material breaches as required by law.

12. Children

The Services are not directed to children under 16, and we do not knowingly collect their personal data.

13. Changes

We may update this policy; we will revise the “Last updated” date and, for material changes, provide additional notice.

14. Contact

GIT Consulting and Services Inc. — Legal@Leadnex.io