This Privacy Policy explains how Magnet Leads ("we", "us") collects, uses, shares and protects personal data when you use Magnet Leads (the "Service"), and the choices and rights you have. It is written to meet the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and its rules.
1. Data we collect
Information you give us
- Account details: your name, user ID, email address, company name and a securely hashed password, or your Google profile (name, email, picture) if you sign in with Google.
- Workspace content: the contacts, companies, deals, notes, tasks, files and project boards you create.
- Messages you send us: through the contact form, feature requests or email.
Information from services you connect
- Gmail: if you connect a mailbox, we store an OAuth token (encrypted) and read, send and organise email only so you can do so inside the Service.
- WhatsApp: if you link a number, we store the session needed to keep it connected and the messages that pass through it.
- AI providers: API keys you add are stored encrypted and used only to make the requests you ask for.
Information collected automatically
- Usage data: the lead searches you run and when, used to apply your plan's search allowance and show your history.
- Technical data: IP address, browser and device type, and log data needed to run and secure the Service.
- Cookies: a strictly necessary cookie keeps you signed in. If analytics is switched on, analytics cookies help us understand how the site is used.
Payment data
Payments are handled by Stripe. Your card details go directly to Stripe and are never stored on our servers. We keep your Stripe customer reference, subscription status, plan, billing period and invoice records, and the billing name and address you give at checkout.
2. How we use it
- to provide, maintain and secure the Service and your account;
- to process payments, issue invoices and apply your plan's limits;
- to send service messages — receipts, renewal and pre-debit notices, security alerts;
- to respond to support requests and complaints;
- to improve the Service using aggregated, de-identified information; and
- to meet legal, tax and accounting obligations.
We process your personal data on the basis of your consent, or for legitimate uses permitted by law such as performing our contract with you and complying with legal obligations. We do not sell your personal data.
3. Google user data
Magnet Leads's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to provide the email features you use; it is not used for advertising, not sold, and not read by people except with your permission, for security or legal reasons, or where it has been aggregated and anonymised.
4. Who we share it with
- Service providers who process data on our behalf under contract: Stripe (payments), Google (sign-in and Gmail), our hosting and database providers, and analytics if enabled.
- Authorities, when required by law or to protect rights, safety and security.
- A successor, if our business is merged or sold, under this Policy.
Some providers process data outside India. Where they do, we rely on their contractual and security commitments.
5. Lead data about businesses
The business listings shown in lead search come from open datasets and third-party providers and describe businesses — names, categories, addresses, phone numbers and websites. If you represent a business and want its listing corrected or removed, contact us using the details below.
6. How long we keep it
We keep account and workspace data while your account is open. When you delete your account, we delete your workspace data, except records we must keep by law — such as invoices and payment records, which are retained for the period tax law requires. Security logs are kept for a limited period.
7. Security
We use HTTPS, hash passwords, encrypt stored credentials and tokens at rest, and restrict access to personal data. No system is perfectly secure; if a breach affects your data we will notify you and the authorities as the law requires.
8. Your rights
Under the Digital Personal Data Protection Act, 2023 you can:
- ask for a summary of the personal data we process about you;
- ask us to correct, complete, update or erase it;
- withdraw consent where processing is based on consent;
- nominate someone to exercise your rights if you die or become incapacitated; and
- have your grievance addressed by our grievance officer, and escalate to the Data Protection Board of India if you are not satisfied.
Most of your data can be edited or deleted directly in the Service. For anything else, contact us below.
9. Children
The Service is for businesses and is not intended for anyone under 18. We do not knowingly collect children's data.
10. Changes to this Policy
We will post any changes here with a new effective date and tell you about material changes by email or in the app.
11. Contact and grievance officer
- Magnet Leads (sole proprietorship)
- Support hours: Monday to Friday, 10:00–18:00 IST
- Contact form: /contact
Grievance officer:
- Designation: Grievance Officer
We acknowledge requests within 48 hours and respond within 30 days.
Last updated 24 October 2026. Questions about this policy? Contact us.