Privacy policy
LeadCatch is a service run by Spanar Systems ("we", "us"). It takes enquiries from sources such as IndiaMART and website forms and sends them into your CRM. This page explains what data we handle to do that, where it lives, and how you can have it removed. Questions: support@spanarsystems.com.
Who is responsible for what
You decide which enquiries LeadCatch handles and what happens to them in your CRM, so for the enquirers' personal data you are the one responsible for having a lawful reason to hold it. We handle that data on your behalf, only to deliver it to your CRM and keep the service working. For your own account details (such as your workspace and CRM connection) we are responsible.
What we collect
- Enquiry data that your sources send us: typically a name, phone number, email address, company, city, state, country, product, message and the type of enquiry. We also keep the original message exactly as the source sent it, so problems can be investigated.
- Delivery records: whether each enquiry reached your CRM, the CRM record it created, retries and error messages.
- Connection details: your HubSpot account ID and domain, the access tokens HubSpot gives us when you install LeadCatch, and your IndiaMART Pull API key if you add one. Tokens and keys are stored encrypted.
- Settings you choose: routing rules, deal and task options, and which lead types to accept.
- Technical data: server logs with request times, addresses and error details, kept to run and secure the service.
We do not ask for payment details, and we do not sell personal data or use it for advertising.
Cookies and third parties on this site
LeadCatch sets one cookie to keep you signed in, and a short-lived cookie while you connect HubSpot. Both are necessary for the service. We do not use advertising or analytics cookies. The dashboard loads a font from Google Fonts, so Google receives your browser's address when the page loads.
Where your data is processed
- Application and job queue: Render, Singapore.
- Database: Supabase, Tokyo, Japan.
- Your CRM (HubSpot) and your sources (such as IndiaMART) receive and send data as part of the connection you set up.
These providers process data for us under their own terms. We share enquiry data only with your connected CRM and with these infrastructure providers.
How long we keep it
We keep your data while your workspace exists. You can remove it at any time (see below).
Deleting your data
In the dashboard, choose Delete my account and data. This removes LeadCatch from your HubSpot account (when HubSpot can be reached) and permanently deletes your workspace, caught enquiries, source connections and stored credentials. Disconnect HubSpot removes the connection but keeps your enquiries. Copies held in a provider's own backups, if any, are removed on that provider's normal schedule. You can also email us and we will delete your data for you.
Security
Connections use HTTPS. HubSpot tokens and IndiaMART keys are encrypted at rest. Each customer's workspace is kept separate, and the links you paste into IndiaMART or your forms contain a secret that you can replace from the dashboard. No system is perfectly secure, and we will tell affected customers if we learn of a problem that affects their data.
Your rights
You can ask us to show you, correct or delete the data we hold about you, and enquirers whose details came through LeadCatch should first contact the business that received their enquiry. We aim to handle personal data in line with India's Digital Personal Data Protection Act, 2023 and other laws that apply to you. To make a request or raise a concern, email support@spanarsystems.com.
Changes
If we change this policy in a way that matters, we will update the date above and tell active customers by email or in the dashboard.