Last updated: October 9, 2026
1. Who We Are
Insta Leads ("we," "us," "our," or "the Platform") is a software-as-a-service platform, operated at
app.instaleads.in, that helps businesses capture leads from landing
pages, QR codes, website embeds, WhatsApp, and Instagram, and manage them through to quotations, invoices,
and payment. This policy explains what information we collect, how we use it, and the choices you have.
This policy covers two kinds of people: business users who sign up for an Insta Leads
account to run their sales pipeline, and leads/customers whose information a business
user collects through the Platform (for example, someone who fills out a landing page form or messages a
business on WhatsApp or Instagram).
2. Information We Collect
From business users (account holders)
- Name, email address, phone number, and password (stored as a secure one-way hash, never in plain text)
- Business details you provide, such as business name, address, and tax/GST information, used to generate quotations and invoices on your behalf
- Billing information processed through our payment partner, Razorpay — we do not store full card or bank details ourselves
- Credentials for third-party integrations you choose to connect (WhatsApp Business API, Instagram, your own Razorpay account) — these are encrypted at rest using industry-standard AES-256 encryption
From leads and end customers
When a business user using our Platform captures a lead — through a landing page, QR code, embedded website widget, WhatsApp message, or Instagram direct message — we process the information that person provides or that is visible through that channel, which may include:
- Name, phone number, and/or email address
- Any additional information submitted through a custom form field the business has configured (for example, "interested in," company name, or a message)
- The content of WhatsApp or Instagram messages exchanged with the business, when that channel is used
- Which page, QR code, or channel the lead came from, and the date/time of the interaction
This information is collected on behalf of, and is controlled by, the business user who owns that landing page or connected account — not by Insta Leads directly. Questions about how a specific business uses your information should be directed to that business.
Automatically collected information
- IP address and general device/browser information, for security and spam-prevention purposes
- Standard session cookies required to keep you logged in — we do not use advertising or cross-site tracking cookies
3. How We Use Information
- To operate the Platform: authenticate accounts, store and organize leads, and power the CRM, quotation, and invoicing features
- To send automated messages on behalf of a business user — such as a lead acknowledgement, a quotation, or an invoice — through that business's own connected WhatsApp or Instagram account
- To send account-related notifications (for example, billing reminders or security alerts) to business users
- To detect and prevent abuse, spam, and fraudulent use of the Platform
- To improve the Platform's reliability and features
We do not sell personal information to third parties, and we do not use lead or customer data collected on behalf of a business to run our own advertising.
4. How We Use Meta Platform Data (WhatsApp & Instagram)
Insta Leads integrates with Meta's WhatsApp Business Platform and Instagram Messaging API to let business
users communicate with their own leads and customers. When a business user connects their own WhatsApp
Business Account or Instagram Professional Account:
- Messages are sent and received using that business's own connected account — Insta Leads does not send messages through a shared or platform-owned WhatsApp/Instagram number
- We access only the data necessary to deliver the messaging features the business has enabled: sending messages, receiving delivery status, and receiving inbound messages so they can be shown in the business's own CRM
- Data received from Meta's platforms (such as message content or a sender's profile information) is used solely to power the business's own lead management — it is not used for advertising, sold to third parties, or shared with any party outside what is necessary to provide the service
- We comply with Meta's Platform Terms and Developer Policies governing use of WhatsApp Business Platform and Instagram Platform data
5. How We Share Information
We share information only in the following circumstances:
- With Meta — to deliver WhatsApp and Instagram messaging functionality, as described above
- With Razorpay — to process payments; each business user's invoicing payments are processed via their own connected Razorpay account
- With service providers who help us operate the Platform (such as our hosting and email delivery providers), under confidentiality obligations, and only to the extent needed to provide their service
- When required by law — if we are required to disclose information to comply with a legal obligation, court order, or governmental request
- With your consent — in any other case, only if you have specifically agreed to it
6. Data Storage & Security
- Data is stored on secured servers with access restricted to authorized personnel
- Passwords are stored using one-way cryptographic hashing, never in plain text
- Sensitive third-party credentials (API keys, access tokens) are encrypted at rest using AES-256 authenticated encryption
- All data in transit between your browser and our servers is encrypted using HTTPS/TLS
- Webhook communications from Meta are cryptographically signature-verified to prevent tampering
No method of storage or transmission is 100% secure, and we cannot guarantee absolute security — but we take reasonable, industry-standard steps to protect the information entrusted to us.
7. Data Retention
We retain account and lead data for as long as a business user's account remains active, plus a reasonable
period afterward to comply with legal, accounting, or reporting obligations. A business user can request
deletion of specific leads or their entire account at any time (see Section 8).
8. Your Rights
Depending on your location and applicable law (including India's Digital Personal Data Protection Act, 2023), you may have the right to:
- Request access to the personal information we (or a business user of the Platform) hold about you
- Request correction of inaccurate information
- Request deletion of your information, subject to legal or legitimate business retention requirements
- Withdraw consent where processing is based on consent
If you are a lead or customer of a business using Insta Leads, please contact that business directly, as
they control the data collected through their landing pages and connected accounts. If you are a business
user, or need help reaching a business that uses our Platform, contact us using the details in Section 11.
9. Cookies
We use only the minimal cookies necessary to keep you securely logged in and to protect against cross-site request forgery. We do not use third-party advertising or analytics cookies.
10. Children's Privacy
Insta Leads is intended for business use and is not directed at children. We do not knowingly collect personal information from children under the age of 18.
11. Changes to This Policy
We may update this policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. The "Last updated" date at the top of this page will always reflect the most recent revision. Material changes will be communicated to business users via email or an in-app notice.
12. Contact Us
If you have questions about this Privacy Policy or how your information is handled, please contact us at:
Gravity Consultancy
Email: vaithy@newgc.in
Website: app.instaleads.in