Privacy Policy

1. Who this policy applies to

This policy applies to visitors to leadly.sg and people who contact us about our services. If you become a client, additional privacy or data-processing terms may apply under your proposal, order form or services agreement.

2. Personal data we may collect

Information you provide

If you contact us by email or WhatsApp, we may receive information such as your name, contact details, organisation, role, business requirements and anything else you choose to include in your message.

The booking interface on this website submits your name, email address and requested date/time directly to us when you click to request a call — it is not merely a draft in your email application. Our campaign landing-page forms submit your name, phone number and email address so we can respond to your enquiry. We pass this information to our customer relationship management system (GoHighLevel, operated by HighLevel Inc.) so our team can follow up and, where relevant, confirm your requested time. We do not currently confirm bookings automatically; a person on our team reviews and responds to each request.

Technical information

Our hosting and security providers may automatically process limited technical information needed to deliver and protect the website, such as your IP address, browser or device information, requested pages, timestamps and diagnostic or security events.

Cookies and analytics

This website uses the Meta Pixel and Meta Conversions API, advertising and analytics tools provided by Meta Platforms, Inc. The Pixel records browser activity such as a page visit, a successful enquiry submission or a click to contact us. When a campaign enquiry is accepted by our system, we may also send a matching server-side conversion event to Meta. Contact identifiers such as email address, phone number and name are normalised and cryptographically hashed before that server-side transmission; technical identifiers such as IP address, browser information and Meta cookie or click identifiers may also be included to measure and match the event. This does not tell Meta whether a requested call was later confirmed or held. We use this information to measure and improve our own advertising, and to show relevant ads to people with similar interests on Meta's platforms. Meta may set cookies and combine this information with other data it holds about you, subject to its own privacy policy at facebook.com/privacy/policy. Essential technical storage may also be used by our infrastructure where necessary to operate, secure or deliver the site. If our cookie practices materially change again, we will update this policy and provide any notice or choice required by law.

3. How we use personal data

We may use personal data to:

• respond to enquiries and arrange calls;
• understand your goals and assess whether our services are suitable;
• prepare proposals and provide requested services;
• manage our relationship with clients and prospective clients;
• operate, maintain, secure and improve the website and our systems;
• prevent misuse, investigate incidents and protect our rights; and
• meet legal, regulatory, accounting and compliance obligations.

We collect, use and disclose personal data only for purposes that are reasonable in the circumstances and as permitted by applicable law.

4. When we may disclose personal data

We may disclose personal data to service providers that support our hosting, security, email, communications, CRM, scheduling and professional operations; to advisers such as accountants, auditors or lawyers; to authorities where required or permitted by law; or in connection with a genuine business restructuring or transfer.

When you choose to contact us through WhatsApp or another third-party service, that provider processes information under its own privacy terms. We do not control those third-party services.

We do not sell personal data.

5. Overseas transfers

Some service providers may process or store information outside Singapore. Where the Singapore Personal Data Protection Act 2012 (“PDPA”) applies, we take reasonable steps to ensure overseas transfers receive a standard of protection comparable to the PDPA, unless an exception applies.

6. Retention and security

We retain personal data only for as long as it is reasonably needed for the purpose for which it was collected, our legitimate business needs, dispute resolution, or legal and regulatory requirements. When it is no longer needed, we take reasonable steps to delete it, anonymise it or remove the means by which it can be associated with an individual.

We use reasonable administrative, technical and organisational safeguards. However, no internet transmission or storage system can be guaranteed to be completely secure.

7. Your choices and requests

Subject to applicable law and any exceptions, you may ask to access or correct personal data we hold about you, ask how it was used or disclosed, or withdraw consent for a particular use. Withdrawal may affect our ability to provide a requested service.

To make a request or raise a privacy concern, contact our data-protection contact at hello@leadly.sg. We may need to verify your identity before completing a request.

8. Pulse and connected accounts

Pulse is Leadly's client application. When you connect a Google, Meta, TikTok, WhatsApp or CRM account to Pulse, you authorise Leadly to access that account on your behalf through the provider's official interface, limited to the permissions shown on the provider's consent screen.

What we access

Advertising accounts (campaigns, spend, results), website analytics and search data, business profile reviews and posts, page and inbox messages, calendar bookings and CRM contacts, as needed to show your results in Pulse and to carry out the actions you approve. We access only the accounts you connect.

How we use it

To display your figures, to prepare drafts (replies, posts, campaign changes) for your approval, and to carry out an action only after you or someone you authorise approves it. We do not use connected-account data to build advertising profiles, to train general-purpose artificial-intelligence models, or for any purpose other than providing Pulse to you.

Google data

Pulse's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer Google user data to third parties except as needed to provide Pulse, as required by law, or with your consent. We do not sell it. People at Leadly read it only with your permission, for security purposes, or to comply with law.

Storage, retention and deletion

Access tokens are encrypted at rest and held only while the connection is active. Figures we fetch are cached for up to 90 days to show trends. Disconnecting an account in Pulse (Connectors, then Disconnect) revokes our access and deletes its tokens within 24 hours; cached figures are deleted within 30 days. You can also revoke access at myaccount.google.com/permissions or in Meta's Business integrations settings. To have all Pulse data about you or your business deleted, email hello@leadly.sg from the address on the account; we confirm within 30 days.

Processors

Cloudflare (hosting, in Singapore and the United States), Resend (email), Anthropic (drafting text from your data, under terms that forbid training on it) and HighLevel Inc. (CRM, where you connect one).

9. Changes to this policy

We may update this policy when our services, technology or legal obligations change. The latest version will be posted on this page with its updated date.