Privacy policy

• Businesses that subscribe to MyLeadToday, and their staff who log in.
• People who message those businesses on Facebook Messenger or WhatsApp. For their information we act on the business's behalf: the business decides what to record about its customers, and we store and process it so the business can serve them.

• Business details: business name, address, phone, email, PAN/VAT number and the package it subscribes to.
• Staff accounts: name, email, phone number and role. Passwords are stored only as a one-way hash.
• Connected channels: the Facebook Page or WhatsApp Business number a business connects (its ID, name and picture) and the access token Meta issues for it.
• Conversations: messages, photos and other attachments exchanged with the business, and the sender's profile name and, for WhatsApp, phone number.
• Business records: customers, products, orders, invoices, payments and deliveries that the business enters.
• Security and usage logs: sign-ins, IP address, browser type and a record of important changes, kept to protect accounts and investigate problems.

We never ask for or see a Facebook password. We do not read anyone's personal timeline, friends list, posts or personal messages. We only receive messages sent to the Pages and WhatsApp numbers a business has connected.

• To provide the service: show chats in the inbox, send the business's replies, and keep its orders, invoices, payments and deliveries.
• To run accounts and subscriptions, and to contact businesses about their account.
• To keep the service secure, prevent misuse and fix problems.

We do not sell personal information and we do not use it for advertising.

• Meta Platforms (Facebook Messenger and WhatsApp), to receive and send messages for connected businesses.
• Service providers that host our servers, store files and deliver email, only as needed to run the service.
• Authorities, when the law requires it.

Each business sees only its own data. Staff of one business cannot see another business's chats or records.

• All traffic is encrypted with HTTPS.
• Facebook and WhatsApp access tokens are stored encrypted and are never shown to anyone.
• Each business's data is kept separate at the database level.
• Staff only see what their role allows, and important actions are logged.

• Business data is kept while the business's account is open, so it can see its history.
• Raw message notifications from Meta are deleted after 30 days; the messages themselves stay in the business's inbox.
• When a business closes its account, we delete or anonymise its data, except records the law requires us or the business to keep, such as invoices.

• If you messaged a business: ask that business to correct or delete your information. You can also use our contact page.
• If you connected a Facebook Page: you can remove MyLeadToday in Facebook under Settings → Business integrations. Facebook then tells us, and we stop receiving that Page's messages and remove your Facebook user ID. See data deletion.
• Staff and business owners: contact us to see, correct or delete your account information.

MyLeadToday is a tool for businesses and is not meant for children under 16.

If we change this policy we will update the date above, and tell businesses about important changes.

Please use our contact page.