Privacy Policy

Who we are and how to reach us

Leadnox operates this website and decides how the information described below is handled. Our technical operations are based in Chennai, India, and our clients are based in the United States.

For any privacy question, or to exercise any of the rights described in this policy, email contact@leadnox.io. We aim to respond within 30 days.

Information you give us directly

The only place this site asks for personal information is the contact form on our Contact page. When you submit it, we receive and store the name you enter, your business name, your email address, your phone number including the country code you select, the industry you pick, the service you are interested in, your indicated budget range, and the description of your challenge that you write in your own words.

We also record the page address the form was submitted from, and the time of submission, so we know which page prompted the enquiry.

Please do not include sensitive personal information in the free-text field. We do not need it, and we ask you not to send it.

Information collected automatically

The two analytics tools described here, Google Analytics and Microsoft Clarity, load only after you click Accept on the cookie banner. Until then, and if you decline, neither of them runs and none of their cookies are set.

With your consent, we use Google Analytics 4 to measure visits: which pages are viewed, how visitors arrive, roughly where they are, and which device and browser they use. It also records that a contact form was submitted, as a count, without any of the form's contents. Google processes this data under the Google Privacy Policy.

With your consent, we also use Microsoft Clarity, an analytics product from Microsoft, to understand how visitors use this site. Clarity records how you interact with pages, including mouse movement, scrolling, clicks and the pages you visit, and combines that with standard technical details such as your approximate location derived from your IP address, your browser and device type, your operating system, your screen size, and the site that referred you.

This means your visit may be captured as a session recording and shown to us as a replay, and that your activity contributes to aggregated heatmaps. Clarity is configured to mask text you type into form fields, so the content of what you type is not intended to be captured in recordings, but we cannot guarantee that every element on every page is masked in every circumstance.

Microsoft acts as an independent controller for some of this data and may use it for its own purposes, including advertising. Microsoft explains this in the Microsoft Privacy Statement. You can read more about the product at clarity.microsoft.com.

Our hosting provider also keeps standard server logs, which include IP addresses and requested pages, for security and reliability.

Cookies and similar technologies

A cookie is a small file a site stores in your browser. This site uses analytics cookies and a small amount of browser storage of its own, and we think it is fairer to name them individually than to describe them in the abstract.

The Google Analytics and Microsoft Clarity cookies above are non-essential and are only set after you click Accept. This website sets three browser entries of its own: lx-consent-v1, which remembers your cookie choice for 12 months so we do not ask on every page, lx-theme, which remembers whether you chose the light or dark version of the site and is never sent anywhere, and lx-chat-v1, which holds your chat assistant conversation while you move between pages and is deleted when you close the tab.

Our fonts and icons are served from this website itself, so loading a page does not contact Google Fonts or any other font service.

You can clear or block cookies in your browser settings at any time. Blocking them will not stop you using this site, though your theme choice will not be remembered.

Your choices and how to opt out

On your first visit a banner asks whether you accept analytics. Accept and Decline carry equal weight, and nothing optional loads unless you accept. You can change your answer at any time with the Cookie settings link at the bottom of every page. If you withdraw consent, we delete the Google Analytics and Clarity cookies this site set and stop loading both tools.

If your browser or an extension sends a Global Privacy Control signal, we treat it as Decline: the banner is not shown, Microsoft Clarity and Google Analytics are not loaded, and none of their cookies are set. Global Privacy Control is a recognised opt-out signal under California law and several other United States state privacy laws. You can enable it in a browser that supports it, or by installing an extension that sends it. You do not need to contact us to use it.

You may also opt out by emailing us, by blocking cookies in your browser, or by using Microsoft's own opt-out choices described in the Microsoft Privacy Statement.

The AI chat assistant

The Leadnox AI assistant on this website answers questions using the content of these pages. It is an automated system, not a person, and its answers can be wrong. For anything that matters to your business, confirm it with our team through the contact page.

When you send a message, your question, the earlier messages in the same conversation and the address of the page you are on are passed through a small server we run on Cloudflare to Google's Gemini API, which writes the answer. When Gemini is busy or slow, the same information goes instead to an open AI model that Cloudflare runs for us (Cloudflare Workers AI). Phone numbers and email addresses you type are removed by our server before your message reaches either AI service. We do not store your conversations on our own systems, and our server does not log what you type.

We use Google's free Gemini API tier. Under Google's terms for that tier, Google may use the questions and answers to improve its products, and human reviewers may read them. Google's terms state that for users in the European Economic Area, Switzerland and the United Kingdom, its paid-service data terms apply instead. For these reasons, please do not type personal, confidential or sensitive information into the chat. The assistant is designed not to ask for it, and to send you to the contact form when you want to reach us.

Your conversation stays in your browser tab so it survives moving between pages, and it is deleted when you close the tab. The Start over button clears it at any time. Microsoft Clarity is configured not to record the contents of the chat window.

To protect the service from abuse, the chat server uses your IP address to limit how many messages can be sent in a short period. It is held briefly in memory for that purpose and is not stored.

Why we use your information

We use the details you submit through the contact form to reply to you, to prepare for and hold a conversation about your business, to send you the audit or proposal you asked for, and to keep a record of our correspondence. If we begin working together, we use them to provide and administer that work.

We use analytics information to understand which pages are useful, where visitors get stuck, and how to improve the site. We do not use it to make any automated decision that produces a legal or similarly significant effect about you.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising as those terms are used in United States state privacy laws. Note that Microsoft may use the analytics data it collects for its own advertising purposes, as described above and in its own privacy statement.

The legal basis for using your information

Where the UK GDPR or the EU GDPR applies to you, we rely on our legitimate interest in responding to business enquiries and in operating and improving our website, and on your consent where consent is required for non-essential cookies and analytics. Where we have entered into a contract with you, we rely on the necessity of performing that contract.

Where India's Digital Personal Data Protection Act, 2023 applies, we process your personal data for the lawful purpose for which you provided it, namely responding to your enquiry and providing the services you request.

You can withdraw consent at any time by contacting us. Withdrawing it does not affect anything we did before you withdrew it.

Who we share information with

We do not sell your information. We share it only with the service providers that make this site and our business work, and only so far as they need it:

• Google Analytics. Website analytics. Receives the visit and device data described above.
• Google Gemini API. Writes the chat assistant's answers. Receives the questions you type into the chat, the earlier messages in that conversation, and relevant excerpts from this website.
• Cloudflare. Runs the small server that connects the chat assistant to Google, and the backup AI model (Cloudflare Workers AI) that answers when Gemini is busy. Handles your chat messages and your IP address for abuse protection, and does not store the conversation.
• Microsoft Clarity. Website analytics and session recording. Receives the interaction and technical data described above.
• Web3Forms. Delivers your contact form submission to our inbox as an email. Receives the form fields you complete.
• Google Firebase. Hosts this website and stores contact form submissions in a Firestore database so our team can respond. Receives the form fields listed above.

We may also disclose information if the law requires it, if we need to establish or defend a legal claim, or to protect the rights and safety of people using this site.

International transfers

Our team operates from Chennai, India, while most of the people who contact us are in the United States. That means information you submit will be accessed from India, and the providers we use may store and process it in the United States or elsewhere. Where the law requires a safeguard for such a transfer, we rely on the appropriate mechanism for the jurisdiction in question, including standard contractual clauses where they apply.

How long we keep it

We keep contact form submissions for as long as we are in conversation with you and for up to 24 months afterwards, so that we have a record of what was discussed. If we work together, we keep records for as long as the relationship lasts and for the period afterwards that our tax and legal obligations require.

Analytics data is retained by Microsoft under its own retention schedule for Clarity. You can ask us to delete your enquiry at any time and we will do so unless we are required to keep it.

Your rights

Depending on where you live, you may have the right to ask us for a copy of the personal information we hold about you, to correct it if it is wrong, to delete it, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent you previously gave.

If you are in California, you also have the right to know what categories of personal information we collect and to whom we disclose them, the right to delete, the right to correct, and the right not to be discriminated against for exercising any of these rights. As stated above, we do not sell your personal information.

If you are in the United Kingdom or the European Economic Area, you have the right to lodge a complaint with your data protection authority. If you are in India, you may raise a grievance with us using the contact address above.

To exercise any right, email contact@leadnox.io. We may need to confirm your identity before we act, so that we do not hand your information to someone else.

Security

Access to enquiry records is restricted to named Leadnox accounts and is enforced on the server, not merely hidden in the interface. The site is served over HTTPS only, and it applies a strict content security policy that blocks unauthorised scripts.

No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security, but we take these measures seriously and review them.

Children

This site is aimed at business owners and is not directed at children. We do not knowingly collect information from anyone under 18. If you believe a child has sent us information, contact us and we will delete it.

Other websites

Our site links to other websites, including social media profiles and the sites of the tools we mention. We are not responsible for how those sites handle your information, and we encourage you to read their privacy policies.

Information we do not collect

We want to be equally clear about what this website does not do. We do not ask for or store payment card details on this site. We do not collect government identifiers. We do not run advertising pixels from Meta, LinkedIn, TikTok or any similar network on this website. We do not buy personal information about you from data brokers, and we do not append or enrich the details you give us with data purchased from third parties.

We also do not operate a login, a shopping cart or a comment system on this site, so there are no account credentials or public posts to worry about. The only account on this domain is the private admin area our own team uses, which visitors cannot reach and which carries no analytics at all.

Automated decisions and profiling

We do not make any decision about you purely by automated means that produces a legal effect or a similarly significant effect. When we review an enquiry and decide whether we are a good fit for your business, a person at Leadnox makes that judgement.

Marketing and how to stop it

If you submit the contact form, we will reply about your enquiry. That is a direct response to a request you made, not marketing.

We will only add you to any wider mailing list if you ask us to. If we ever send you marketing email, every message will carry a one-click unsubscribe, and you can also simply reply asking us to stop. We will action it without argument and without asking why.

If you are an existing client

This policy covers this website. When you become a client, we handle information belonging to your business and sometimes to your own customers, for example inside advertising platforms, your CRM or your call tracking. That work is governed by the agreement we sign with you, not by this page. In that context you are the controller of your customers' data and we act on your instructions.

Data breaches

If a breach occurs that is likely to result in a risk to your rights, we will notify the relevant supervisory authority within the deadline the applicable law sets, and we will tell you directly without undue delay where the law requires it or where we judge that you would want to know.

Accessibility of this policy

If you need this policy in a different format in order to read it, email us and we will provide one.

Changes to this policy

If we change how we handle personal information, we will update this page and change the effective date at the top. If the change is significant, we will make that clear on the page.