Privacy Policy — Lead Shikaari

Last updated: 19 May 2026

This Privacy Policy describes how Lead Shikaari ("we", "us", "our") collects, uses, and protects information when you use the Lead Shikaari Chrome extension and the associated services at https://leadshikaari.co.in and https://api.leadshikaari.co.in (collectively, the "Service").

By using the Service you consent to the practices described here.

1. What we collect

Category	Specifically	Where it lives
Account info	Email, full name, hashed password	Our PostgreSQL database (Azure, India region)
Optional contact info	WhatsApp-capable phone number, only if you choose to supply it	Same database
Authentication tokens	JWT issued at login; stored in Chrome's local extension storage on your device	Your browser only
Device identifier	A randomly-generated UUID per browser install, used to enforce the per-plan device limit	Our database + your browser
Usage counters	Number of leads contacted per day, scoped to your user; never the lead content itself	Our database
Subscription / payment data	Plan name, status, Razorpay payment IDs; we do not see or store credit card numbers	Our database + Razorpay's PCI-compliant infrastructure
Diagnostic logs	HTTP request paths, status codes, and stack traces from server-side errors	Azure Application Insights (90-day retention)

We do not collect:

The content of IndiaMART leads. The extension processes those locally in your browser only.
Your IndiaMART login credentials.
Browsing activity on any non-IndiaMART site.

2. How we use the data

Account info to identify you, send password resets, and respond to support requests.
Phone number to send the WhatsApp notification when you successfully buy a lead. This is the only purpose. We never use it for marketing.
Device identifier to enforce the device limit that's part of your plan.
Usage counters to enforce daily quotas and show you stats.
Subscription / payment data to gate features and issue refunds or invoices.
Diagnostic logs to debug crashes and security incidents.

3. What we share

Razorpay (payment processor) — when you click "Subscribe", we send your email + plan price to Razorpay. Their privacy policy: https://razorpay.com/privacy.
Meta (WhatsApp Cloud API) — when you opt in by saving a WhatsApp number, lead notifications go through Meta. Their policy: https://www.whatsapp.com/legal/privacy-policy.

We do not sell user data, share it with advertisers, or use it for any purpose unrelated to operating the Service.

4. Where data is stored

All databases and Azure resources live in India (Central India and West India regions). Payment processing data lives wherever Razorpay stores it (primarily India). WhatsApp delivery data passes through Meta's infrastructure (global).

5. How long we keep it

Active accounts: lifetime of subscription + 30 days after cancellation.
Diagnostic logs: 90 days.
Payment records: 7 years (Indian tax compliance).

6. Security

All traffic over HTTPS (TLS 1.2+).
Passwords hashed with bcrypt (cost factor 10).
JWT secrets and DB credentials stored in scoped Azure App Service settings.
All admin actions logged for audit.

We will notify affected users within 72 hours of any confirmed data breach.

7. Your rights

You have the right to access, correct, delete, object to processing of, and port your data. Email support@leadshikaari.co.in with subject line [Privacy] and we will respond within 7 days.

8. Children

The Service is not intended for users under 18 and we do not knowingly collect data from children.

9. Changes to this policy

Material changes will be announced via email to active users at least 14 days before they take effect.

10. Contact

Lead Shikaari Support
Email: support@leadshikaari.co.in