1. Introduction
This Privacy Policy ("Policy") describes how ANALYSTT AI TECHNOLOGY PRIVATE LIMITED, a company incorporated under the Companies Act, 2013 and having its registered office at Pantomath Nucleus House, Saki Vihar Road, Andheri (East), Mumbai – 400072 ("Analystt.ai", "Company", "we", "our" or "us"), collects, receives, stores, processes, uses, discloses and protects personal information when you access or use the Leadzen.ai Browser Extension ("Extension") and any related websites, applications, products or services offered by the Company.
The Extension is a business-to-business ("B2B") software solution designed to assist sales professionals, enterprises and business users in enriching business contact information, analysing publicly available professional profiles and facilitating customer relationship management activities.
By installing, accessing or using the Extension, you acknowledge that you have read, understood and agree to the practices described in this Policy. This Privacy Policy should be read together with the Company's Terms of Service, which govern the access to and use of the Extension.
2. Scope
This Policy applies to all personal information collected or processed through:
- the Leadzen.ai Browser Extension;
- your Leadzen.ai account;
- the Company's website;
- customer support interactions;
- subscription management;
- communications between you and the Company; and
- any other services provided in connection with the Extension.
This Policy applies only to business users of the Extension and does not apply to third-party websites, applications or services that may be linked through the Extension.
3. Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings assigned to them below:
3.1 "Account" means the registered user account created by a User to access and use the Leadzen.ai Browser Extension and the related services provided by the Company.
3.2 "Browser Extension" or "Extension" means the Leadzen.ai browser extension, including all associated software, features, functionalities, updates, enhancements, interfaces, documentation and related services developed, owned and operated by ANALYSTT AI TECHNOLOGY PRIVATE LIMITED.
3.3 "User" or "You" means any individual, organisation, enterprise, employee, authorised representative or other person who registers for, accesses or uses the Extension pursuant to a valid subscription.
3.4 "Subscription" means the paid or otherwise authorised access granted by the Company to a User for the use of the Extension in accordance with the applicable subscription plan and the Terms of Service.
3.5 "Credits" means the usage-based units allocated to a User under the applicable subscription plan, which may be consumed for accessing, unlocking or exporting specific contact information, business information or other features available through the Extension.
3.6 "Personal Data" or "Personal Information" means any information relating to an identified or identifiable natural person and shall include such information as is recognised under applicable data protection laws, including the Digital Personal Data Protection Act, 2023, the General Data Protection Regulation (GDPR) and any other applicable privacy legislation.
3.7 "Processing" means any operation or set of operations performed on Personal Data, whether by automated or non-automated means, including collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, consultation, use, analysis, disclosure, transmission, dissemination, alignment, combination, restriction, erasure or destruction.
3.8 "Exported Data" means any contact information, business information, professional profile information or other data accessed, unlocked, downloaded, copied, synchronised, transferred or exported by the User from the Extension to any external application, customer relationship management (CRM) system, database, device or storage medium.
3.9 "Third-Party Data Provider" means any independent third party, data vendor, information provider, business intelligence provider or licensed data source from whom the Company obtains or licenses contact information, business information or other data displayed through the Extension.
3.10 "Applicable Data Protection Laws" means all applicable laws, rules, regulations, notifications, guidelines, directions and legally binding requirements relating to the collection, receipt, access, processing, storage, use, disclosure, transfer, protection, retention and deletion of Personal Data in force in India from time to time, including the Digital Personal Data Protection Act, 2023, the rules, regulations, notifications and amendments made thereunder, and any other applicable data protection or privacy laws in force from time to time. Where the processing of Personal Data is subject to any applicable foreign data protection laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Company shall process such Personal Data in accordance with the requirements of such laws to the extent applicable.
4.Information We Collect
The Company collects and processes information that is necessary to provide, operate, maintain and improve the Extension and related services. The categories of information collected include the following:
4.1 Information Provided by Users
When you register for an Account or use the Extension, the Company may collect information voluntarily provided by you, including but not limited to:
Full name;
Official or personal email address;
Login credentials and authentication information;
Organisation or company name;
Designation or business role (where provided);
Subscription plan details;
Billing and payment-related information (processed through authorised payment service providers, where applicable);
Communications, feedback, support requests or other correspondence submitted to the Company.
You represent and warrant that all information provided by you is true, accurate, complete and up to date and that you shall promptly notify the Company of any changes to such information.
4.2 Information Collected Automatically
When you access or use the Extension, certain technical and usage-related information may be collected automatically, including:
Browser type and version;
Device type and operating system;
Internet Protocol (IP) address, where collected;
Extension version and configuration details;
Date and time of access;
Login timestamps and session information;
Diagnostic information, crash reports and error logs;
Usage statistics, feature interactions and performance analytics;
Security logs maintained for fraud detection, abuse prevention and system monitoring.
Such information is collected to ensure the proper functioning, security, maintenance and continuous improvement of the Extension and related services.
4.3 Information Processed Through the Extension
Subject to the permissions granted by the User, the Extension may process information displayed on supported websites solely for providing the requested functionality, including:
Publicly available professional profile information, including profiles displayed on professional networking platforms;
Publicly available company profile information;
Business contact information displayed on supported websites;
Information requested by the User through the Company's credit-based contact enrichment services;
Information necessary to analyse business profiles and facilitate customer relationship management activities.
The Company processes such information only to provide the services requested by the User and does not access or process information beyond what is reasonably necessary for the operation of the Extension.
4.4 Information Received from Third-Party Sources
The Company may obtain business contact information, company information and other relevant business intelligence from licensed third-party data providers. Such information is integrated into the Extension solely for the purpose of providing contact enrichment and related services. The Company does not independently verify the completeness or accuracy of information supplied by such third-party providers.
4.5 Data Minimisation
The Company is committed to the principle of data minimisation and collects, processes and retains only such information as is reasonably necessary to provide, administer, secure and improve the Extension and related services, comply with applicable legal obligations and fulfil the purposes described in this Privacy Policy.
5. Browser Permissions
The Extension requires certain browser permissions in order to provide its intended functionality. Such permissions are requested and used solely for the purpose of enabling the features and services initiated or requested by the User and are not used for any unrelated purpose.
The permissions requested by the Extension may include, without limitation:
- (a)activeTab: Enables the Extension to temporarily access the content of the active browser tab when expressly invoked by the User, solely for analysing supported webpages, enriching business contact information and providing the requested functionality.
- (b)storage: Permits the Extension to securely store user preferences, authentication tokens, configuration settings, session information and other data necessary for the efficient operation and performance of the Extension.
- (c)scripting: Allows the Extension to execute scripts on supported webpages solely for extracting, analysing and processing information required to provide the services requested by the User.
The Company requests only those permissions that are reasonably necessary for the operation of the Extension and continuously reviews such permissions to ensure compliance with the principle of data minimisation.
The Extension does not continuously monitor, track or record the User's browsing activity. It accesses webpage content only when the User actively invokes the Extension or where such access is reasonably necessary to provide the requested functionality. The Company does not access, collect or process webpage content beyond what is required for the legitimate operation of the Extension.
Any information accessed or processed through the Extension is handled in accordance with this Privacy Policy and the Company's applicable security and data protection practices.
6. How We Use Information
The Company processes the information collected through the Extension for legitimate business purposes and only to the extent necessary for providing, operating, maintaining and improving the Extension and related services. The Company may use such information for the following purposes:
6.1 Account Authentication and Access Management
To create and manage User Accounts, verify User identity, authenticate login credentials, enable secure access to the Extension and administer User accounts.
6.2 Subscription Administration
To manage subscriptions, process renewals, administer subscription plans, maintain account records and provide access to features and services associated with the applicable subscription.
6.3 Credit Management
To allocate, monitor, deduct and administer Credits consumed by the User while accessing contact enrichment services or other features available through the Extension.
6.4 Contact Enrichment and Service Delivery
To retrieve, process, analyse and display business contact information, publicly available professional profile information and other business intelligence requested by the User through the Extension.
6.5 Customer Support
To respond to enquiries, provide technical assistance, investigate complaints, troubleshoot issues and improve the quality of customer support services.
6.6 Analytics and Service Improvement
To analyse usage patterns, evaluate feature performance, identify operational trends, conduct research and development activities and improve the functionality, reliability, performance and user experience of the Extension.
6.7 Fraud Prevention and Security
To detect, investigate and prevent fraudulent, unauthorised or unlawful activities, protect the security and integrity of the Extension, enforce the Company's Terms of Service and safeguard Users and the Company's systems.
6.8 Legal and Regulatory Compliance
To comply with applicable laws, regulations, judicial orders, governmental requests, regulatory obligations and to establish, exercise or defend the Company's legal rights.
6.9 Product Development
To develop new products, services, features, functionalities and enhancements, conduct testing and quality assurance, and improve existing offerings based on aggregated usage insights.
6.10 Security Monitoring
To monitor the performance, availability and security of the Extension, identify vulnerabilities, maintain audit logs and implement appropriate administrative, technical and organisational safeguards.
The Company shall process Personal Data only for the purposes set out in this Privacy Policy or for such other compatible purposes as may be permitted under Applicable Data Protection Laws. Personal Data shall not be used for purposes that are materially inconsistent with those described in this Privacy Policy without providing appropriate notice to the User and obtaining consent where required under Applicable Data Protection Laws.
7. Third-Party Data Sources
Contact information may be obtained from licensed third-party providers. We do not warrant the completeness or accuracy of third-party sourced information. Information displayed through the Extension may originate from licensed third-party data providers.
The Company does not independently verify the completeness, accuracy or currency of such information and disclaims responsibility for any inaccuracies originating from third-party sources.
8. Sharing of Information
The Company may disclose or share Personal Data only where such disclosure is necessary for providing the Extension and related services, complying with legal obligations, protecting the legitimate interests of the Company or its Users, or as otherwise permitted under Applicable Data Protection Laws.
Without limiting the foregoing, the Company may disclose Personal Data in the following circumstances:
8.1 Service Providers
The Company may share Personal Data with trusted third-party service providers engaged to perform services on its behalf, including cloud hosting providers, payment processors, customer support providers, analytics providers, information technology service providers and other vendors who assist in operating, maintaining and improving the Extension. Such third parties shall be contractually obligated to maintain the confidentiality and security of the Personal Data and shall process such information only for the purposes specified by the Company and in accordance with Applicable Data Protection Laws.
8.2 Professional Advisers
The Company may disclose Personal Data to its auditors, accountants, legal advisers, consultants and other professional advisers where such disclosure is necessary for obtaining professional advice, protecting the Company's legal rights or complying with applicable legal or regulatory requirements.
8.3 Legal and Regulatory Authorities
The Company may disclose Personal Data where required to do so by law or where such disclosure is necessary to comply with any applicable law, regulation, judicial order, governmental request, regulatory direction or lawful request from law enforcement authorities, or to establish, exercise or defend the Company's legal rights.
8.4 Corporate Transactions
In the event of any merger, acquisition, amalgamation, restructuring, business transfer, financing transaction, sale of assets, insolvency proceeding or other corporate reorganisation involving the Company, Personal Data may be transferred or disclosed to the relevant successor entity or prospective purchaser, subject to appropriate confidentiality obligations and compliance with Applicable Data Protection Laws.
8.5 Protection of Rights and Security
The Company may disclose Personal Data where it reasonably believes such disclosure is necessary to investigate, prevent or take action against suspected fraud, unauthorised access, security incidents, illegal activities, violations of the Company's Terms of Service, or other activities that may expose the Company, its Users or any third party to legal liability or harm.
8.6 No Sale of Personal Information
The Company does not sell, rent, lease or otherwise trade Users' Personal Data to third parties for monetary consideration or for their independent marketing or commercial purposes.
8.7 Safeguards for Third-Party Disclosures
Where Personal Data is shared with third-party service providers or other authorised recipients, the Company shall take reasonable steps to ensure that such recipients are subject to appropriate contractual, technical and organisational measures to safeguard the confidentiality, integrity, availability and security of the Personal Data and process such Personal Data only for the purposes for which it has been disclosed, in compliance with Applicable Data Protection Laws.
8.8 Affiliates and Group Companies
The Company may disclose or share Personal Data with its holding company, subsidiary companies, affiliate entities, group companies or entities under common control for legitimate business purposes, including internal administration, customer support, service delivery, product development, information technology support, security management, compliance, audit, risk management and other operational purposes, provided that such entities process the Personal Data in accordance with this Privacy Policy and Applicable Data Protection Laws.
The Company shall ensure that any such disclosure is made only to the extent necessary for the relevant purpose and that the recipient entities implement appropriate technical and organisational measures to protect the confidentiality, integrity and security of the Personal Data.
8.9 Third-Party Data Providers
Where necessary for the provision of the Extension and related services, the Company may receive or exchange limited information with licensed Third-Party Data Providers for the purpose of enabling contact enrichment, business intelligence and related functionalities. Such exchanges shall be limited to the extent reasonably necessary for providing the requested services and shall be carried out in accordance with applicable contractual obligations and Applicable Data Protection Laws.
9. Data Retention
Account records, subscription information and billing records shall be retained while the User maintains an active subscription and thereafter only for such period as may be reasonably necessary to:
comply with Applicable Laws;
resolve disputes;
enforce contractual or legal rights;
comply with regulatory or audit requirements; or
maintain appropriate business and security records.
Security logs, audit records and technical logs shall be retained only for as long as reasonably necessary to ensure the security, integrity and operation of the Extension or as otherwise required by Applicable Laws.
Exported Data shall not be retained by the Company after export except to the limited extent necessary for technical support, security, audit, troubleshooting or compliance with Applicable Laws.
10. Ownership of Exported Data
Once information is unlocked and exported by the User, ownership, custody and responsibility for such Exported Data shall vest exclusively with the User. The Company neither claims ownership over nor exercises control over Exported Data after export, except to the limited extent required for technical support, security, audit or compliance purposes.
11. International Transfers
Where Personal Data is transferred outside India or any other jurisdiction in which it was originally collected, the Company shall implement appropriate contractual, technical and organisational safeguards, including Standard Contractual Clauses or other lawful transfer mechanisms, where required under Applicable Data Protection Laws.
12. Your Privacy Rights
The Company respects the privacy rights of its Users and is committed to facilitating the exercise of such rights in accordance with Applicable Data Protection Laws. Subject to applicable legal requirements, Users may exercise the rights set out below by contacting the Company using the contact details provided in this Privacy Policy.
12.1 Rights of Users under the Digital Personal Data Protection Act, 2023
Where the Digital Personal Data Protection Act, 2023 ("DPDP Act") applies, Users may, subject to the provisions of the DPDP Act and the rules framed thereunder, exercise the following rights:
- (a)Right to Access Information
To request information regarding the Personal Data processed by the Company and the manner in which such Personal Data is being processed, to the extent permitted under applicable law.
- (b)Right to Correction and Updating
To request the correction, completion or updating of inaccurate, incomplete or outdated Personal Data maintained by the Company.
- (c)Right to Erasure
To request the deletion or erasure of Personal Data where such data is no longer required for the purpose for which it was collected, where consent has been withdrawn (where applicable), or where the Company is otherwise required to erase such Personal Data under Applicable Data Protection Laws.
- (d)Right to Grievance Redressal
To submit complaints or grievances relating to the processing of Personal Data by contacting the Company's designated Grievance Officer. The Company shall endeavour to address such grievances within the timelines prescribed under Applicable Data Protection Laws.
12.2 Rights of Users under the General Data Protection Regulation (GDPR)
Where the processing of Personal Data is subject to the General Data Protection Regulation (EU) 2016/679 ("GDPR") or any other applicable foreign data protection law, Users may, subject to the conditions and limitations prescribed therein, exercise the following rights:
- (a)Right to Access
To obtain confirmation as to whether Personal Data concerning the User is being processed and to receive a copy of such Personal Data.
- (b)Right to Rectification
To request the correction of inaccurate or incomplete Personal Data.
- (c)Right to Erasure ("Right to be Forgotten")
To request the deletion of Personal Data where the applicable legal conditions for erasure are satisfied.
- (d)Right to Restrict Processing
To request that the Company temporarily restrict the processing of Personal Data under circumstances prescribed by the GDPR.
- (e)Right to Data Portability
To receive Personal Data provided by the User in a structured, commonly used and machine-readable format and, where technically feasible, to request that such data be transmitted to another controller.
- (f)Right to Object
To object to the processing of Personal Data where such processing is based on the Company's legitimate interests or for direct marketing purposes, subject to applicable law.
- (g)Right to Withdraw Consent
Where the processing of Personal Data is based on the User's consent, the User may withdraw such consent at any time. Withdrawal of consent shall not affect the lawfulness of any processing carried out prior to such withdrawal.
12.3 Exercising Your Rights
Users may exercise any of the rights described in this Privacy Policy by submitting a written request to the Company using the contact details provided in Clause 18. The Company may request reasonable information to verify the identity of the requesting User before processing any request.
The Company shall consider and respond to such requests within the timeframes prescribed under Applicable Data Protection Laws. Certain requests may be declined or limited where permitted or required by applicable law, including where compliance would adversely affect the rights of another person or where the Company is legally entitled or obligated to retain the relevant Personal Data.
12.4 Right to Nominate
Where permitted under Applicable Data Protection Laws, a User may nominate any individual to exercise the User's rights in relation to the User's Personal Data in the event of the User's death or incapacity, in accordance with the applicable law.
The Company may require such information, documentation or evidence as it reasonably considers necessary to verify the identity, authority and eligibility of the nominated individual before processing any request made pursuant to this Clause.
13. Security
The Company is committed to maintaining the confidentiality, integrity and availability of Personal Data and has implemented appropriate administrative, technical and physical safeguards designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised access, disclosure, misuse or any other unlawful form of processing.
Without limiting the generality of the foregoing, the Company implements and maintains security measures including, where appropriate:
Role-based access controls to ensure that access to Personal Data is restricted to authorised personnel strictly on a need-to-know basis;
Encryption of Personal Data during transmission and, where appropriate, while at rest using commercially reasonable and industry-accepted encryption standards;
Security monitoring and logging mechanisms to detect, investigate and respond to actual or suspected security incidents, unauthorised access attempts, system vulnerabilities and malicious activities;
Periodic vulnerability assessments, risk assessments and security testing to identify, assess and remediate potential security weaknesses;
Audit logging to maintain records of system access, authentication events, administrative activities and other security-related events for operational, compliance and forensic purposes;
Secure authentication and session management procedures to safeguard User Accounts and prevent unauthorised access;
Physical and environmental safeguards, where applicable, to protect systems and infrastructure used for processing Personal Data;
Employee training, confidentiality obligations and internal information security policies to promote responsible handling and protection of Personal Data; and
Business continuity and incident response measures designed to minimise disruption and facilitate the timely detection, containment, investigation and remediation of security incidents.
The Company periodically reviews and updates its information security framework, policies, procedures and technical safeguards to address evolving technological, operational and cybersecurity risks, and to ensure ongoing compliance with Applicable Data Protection Laws and, where appropriate, recognised industry standards and best practices.
While the Company endeavours to implement commercially reasonable and industry-standard security measures, no method of transmission over the internet, electronic storage or information security system can be guaranteed to be completely secure. Accordingly, the Company does not warrant or guarantee the absolute security of any Personal Data, and Users acknowledge and accept the inherent risks associated with electronic communications and internet-based services.
Users are responsible for maintaining the confidentiality of their Account credentials and for taking reasonable measures to protect their devices, passwords and authentication information from unauthorised access. The Company shall not be responsible for any unauthorised access to a User's Account resulting from the User's failure to maintain the security of such credentials.
In the event of any actual or suspected Personal Data breach, security incident or unauthorised access affecting Personal Data, the Company shall promptly investigate the incident, take reasonable measures to contain and mitigate its impact, and comply with its notification and reporting obligations under Applicable Data Protection Laws, including notifying the relevant regulatory authorities and affected Users where required by law.
13.1 Continuous Improvement
The Company is committed to continuously evaluating and enhancing its information security programme in light of technological advancements, emerging cybersecurity threats, changes in Applicable Data Protection Laws and evolving industry practices. Security policies and controls may be reviewed and updated periodically to maintain an appropriate level of protection for Personal Data processed through the Extension.
14. Children's Privacy
The Extension and the related services are intended solely for use by businesses, professionals and individuals who are eighteen (18) years of age or older and are legally competent to enter into binding contracts under Applicable Laws. The Extension is not directed to or intended for use by children.
The Company does not knowingly collect or process Personal Data relating to children. If the Company becomes aware that it has inadvertently collected or processed the Personal Data of a child in contravention of Applicable Data Protection Laws, it shall take appropriate steps to delete such Personal Data or otherwise comply with its legal obligations.
Users represent and warrant that they are at least eighteen (18) years of age and are authorised to provide any Personal Data processed through the Extension. Users shall not knowingly submit or make available any Personal Data relating to a child through the Extension.
If you believe that the Company has inadvertently collected or processed the Personal Data of a child, you may contact the Company using the contact details set out in this Privacy Policy. The Company shall investigate such request and take appropriate action in accordance with Applicable Data Protection Laws.
15. Cookies, Browser Storage and Similar Technologies
The Company may use cookies, browser storage (including local storage and session storage), authentication tokens and other similar technologies to facilitate the operation, security and performance of the Extension and related services.
Such technologies may be used for the following purposes:
- Authentication: To recognise Users, maintain authenticated sessions and facilitate secure access to the Extension.
- Security: To protect User Accounts, detect and prevent fraudulent or unauthorised activities, maintain system integrity and support incident response.
- User Preferences: To remember User settings, preferences, language selections and other configuration choices in order to improve the User experience.
- Performance Analytics: To analyse the performance, reliability and usage of the Extension, identify technical issues and improve the functionality and efficiency of the services.
- Service Functionality: To enable core features of the Extension, maintain session continuity, store operational information and provide the services requested by the User.
The Company does not use cookies, browser storage or similar technologies to collect Personal Data for unrelated advertising purposes or to track Users across third-party websites except where expressly disclosed in this Privacy Policy or required for the operation of the Extension.
Users may configure their browser settings to manage or disable cookies or browser storage. However, disabling certain cookies or browser storage technologies may affect the availability, functionality or performance of the Extension or certain features thereof.
16. Third-Party Websites
Links to third-party websites are governed by their own privacy policies.
17. Changes
We may amend this Policy from time to time by publishing an updated version. Material changes shall become effective upon publication unless otherwise required by applicable law.
18. Contact & Grievance Officer
ANALYSTT AI TECHNOLOGY PRIVATE LIMITED
Registered Office:
Pantomath Nucleus House, Saki Vihar Road,
Andheri (East), Mumbai – 400072, Maharashtra, India.
Email:
support@leadzen.ai
Grievance Officer:
Email:
Telephone:
19. Governing Law
This Policy shall be governed by and construed in accordance with the laws of India. Any dispute arising out of or relating to this Policy shall be subject to the exclusive jurisdiction of the competent courts at Mumbai, Maharashtra, India.