Privacy Policy

Welcome to Quan ("we," "our," or "us"). We are committed to protecting your privacy and handling your data in an open and transparent manner.

This Privacy Policy explains how Quan, operated by Quan Technologies Private Limited, collects, uses, stores, and protects your personal information when you use our platform at lead-ai.in.

Contact: privacy@lead-ai.in

By using Quan, you agree to the collection and use of information in accordance with this Privacy Policy.

2.1 Information You Provide Directly

When you create an account: Full name, email address, phone number, company name and details, password (encrypted), business registration information (GST, if applicable), and payment information (processed securely through our payment provider).

When you use our services: Real estate project details, lead information (names, phone numbers, emails, demographics), campaign configurations, WhatsApp Business Account credentials, user preferences, and communications with our support team.

2.2 Information Collected Automatically

IP address, browser type and version, device information, pages visited, time and date of visits, time spent on pages, and referral sources. We also use cookies and similar tracking technologies to maintain login sessions, remember preferences, analyze usage, and improve user experience.

2.3 Information from Third Parties

Contact information sourced from open sources, public records, and paid data vendors. WhatsApp/Meta message delivery status, WBA information, and incoming messages from leads. Payment processor transaction status and billing confirmations.

3.1 To Provide Our Services: Create and manage your account, process projects, generate AI-powered buyer personas, mine and qualify leads, execute WhatsApp campaigns, track engagement, manage billing, and display analytics.

3.2 To Improve Our Services: Analyze usage patterns, train AI models (in anonymized, aggregated form), optimize algorithms, debug issues, and develop new features based on feedback.

3.3 To Communicate with You: Send service updates, respond to support requests, notify you of policy changes, send marketing communications (you can opt-out anytime), and request feedback.

3.4 For Legal and Security Purposes: Comply with legal obligations, prevent fraud and abuse, enforce our Terms of Service, protect our rights and property, and ensure platform security.

We process your personal data under the following legal grounds:

• Consent: You have given clear consent for specific purposes (e.g., marketing communications).
• Contractual Necessity: Processing is necessary to fulfill our contract with you (providing the Quan service).
• Legal Obligation: We must process your data to comply with Indian law (e.g., tax regulations, government requests with proper legal basis).
• Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., improving our service, preventing fraud), provided this does not override your fundamental rights.

5.1 Service Providers: We share data with trusted third-party providers including Amazon Web Services (AWS) for infrastructure, Meta/WhatsApp for message delivery, AWS SES (Simple Email Service) for transactional emails, Razorpay for billing, open sources / public records / paid data vendors for lead data, and Google Analytics for usage analytics. All are contractually bound to process data only as instructed and not for their own purposes.

5.2 Legal Requirements: We may disclose information in response to valid court orders, subpoenas, or legal processes under the IT Act 2000, CrPC, or DPDP Act 2023. We review all requests for legal validity, disclose only the minimum data necessary, and notify affected users unless legally prohibited.

5.3 Business Transfers: In the event of a merger, acquisition, or asset sale, your data may be transferred. We will notify you before your data becomes subject to a different Privacy Policy.

5.4 What We Will NEVER Do: Sell your personal data to third parties, rent or lease your contact lists, share your data with advertisers without consent, or use your data for purposes beyond what is described here without your explicit consent.

6.1 Where We Store Data: Primary storage on cloud servers in Mumbai, India operated by Amazon Web Services (AWS). Encrypted backups stored in Chennai, India and retained for 30 days.

6.2 Security Measures:

• Data encryption in transit (TLS/HTTPS) and at rest (AES-256)
• Secure authentication (password hashing with bcrypt/Argon2)
• Two-factor authentication (2FA) available for user accounts
• Regular security patches, updates, and penetration testing (quarterly)
• Intrusion detection, DDoS protection, and incident response procedures
• Role-based access controls — only authorized personnel access data
• Confidentiality agreements with all staff; regular security training

6.3 Data Breach Notification: In the event of a breach affecting your personal data, we will notify affected users within 72 hours of discovery (as required by DPDP Act 2023), notify CERT-In, and provide details of the breach and steps taken.

7.1 Retention Periods:

7.2 Deletion Process: When you delete your account, it is immediately deactivated. Personal data is removed from production systems within 30 days. Backup data is purged during the next backup cycle (up to 30 days). Anonymized aggregated data used for analytics may be retained (cannot identify you).

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) and other Indian laws, you have the following rights. Send requests to: privacy@lead-ai.in. We respond within 14 days.

• Right of Access: Request a copy of your personal data in a structured, commonly used format (JSON, CSV).
• Right to Correction: Update inaccurate or incomplete information via account settings or email.
• Right to Erasure: Request deletion of your account and associated data. Exceptions apply for legal compliance, dispute resolution, or legitimate business purposes.
• Right to Data Portability: Receive your data in a portable format to transfer to another service provider.
• Right to Withdraw Consent: Withdraw consent for data processing at any time (does not affect lawfulness of prior processing).
• Right to Nominate: Nominate another individual to exercise your rights in case of death or incapacity.
• Right to Grievance Redressal: File complaints about data handling with our Grievance Officer (see Section 14).

9.1 Your Responsibilities as a User: You must ensure you have lawful basis to contact leads via WhatsApp, obtain consent where required by law, honor opt-out requests immediately, use the "Suspended" stage for opted-out leads, and ensure lead data you upload is accurate and lawfully obtained. Do not upload data of minors (under 18).

9.2 Lead Rights Under DPDP Act 2023: Leads (individuals whose data you process) can opt-out of messages, request access to or deletion of their data, and complain to the Data Protection Board of India. You are the data controller/fiduciary responsible for your campaigns. We are the data processor acting on your instructions.

9.3 WhatsApp Compliance: All marketing templates must be pre-approved by Meta. WhatsApp allows only 1 marketing template per 24 hours to non-responders. Low quality ratings on your WBA may result in reduced messaging limits or suspension by Meta — we display ratings but are not responsible for Meta's decisions.

Quan is a B2B platform intended for use by real estate professionals and businesses. We do not knowingly collect personal data from individuals under 18 years of age.

If you are under 18, do not create an account or provide any personal information. If we discover we have collected data from a child under 18, we will delete the account and data immediately and notify the account creator.

As a user, you must not upload lead data for individuals under 18. Violating this may result in immediate account termination.

If you believe a child's data has been provided to us, contact us immediately at privacy@lead-ai.in. We will investigate and take appropriate action within 48 hours.

Strictly Necessary Cookies: Enable core platform functionality (login, security, session management). Cannot be disabled without breaking the platform.

Performance/Analytics Cookies: Understand how users interact with the platform and identify issues. You can opt-out via browser settings.

Functionality Cookies: Remember your preferences (language, timezone, dashboard layout). You can opt-out via account settings.

Marketing Cookies: Track conversions from ads, retargeting (e.g., Facebook Pixel, Google Ads). You can opt-out via browser settings or privacy preferences.

We also use browser local storage for performance caching and pixels/web beacons in marketing emails to track opens and clicks. We currently do not respond to Do Not Track (DNT) signals.

Our platform may contain links to third-party websites (WhatsApp Business, payment gateways, lead data providers). We are not responsible for their privacy practices, and this Privacy Policy does not apply to those external sites.

If you connect third-party services to Quan (e.g., CRM, Google Calendar), you authorize us to access the necessary data from those services for the integration. Review and manage connected apps in your account settings at any time.

If we offer social login (e.g., "Sign in with Google"), we receive basic profile information (name, email) and do not post on your behalf without explicit permission.

Quan is primarily designed for users in India. This service is currently available only to users located in India. If you access from outside India, you do so at your own risk and are responsible for compliance with local laws.

GDPR (EU users, if applicable): If you are in the European Economic Area, you have additional rights under GDPR including the right to object and right to restrict processing. Data transfers from EEA to India are protected by Standard Contractual Clauses.

CCPA (California, if applicable): California residents have the right to know what personal information is collected, the right to delete, and the right to opt-out of sale of personal information. We do not sell data. Contact privacy@lead-ai.in for CCPA requests.

Under the Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer:

Name: Arjun
Designation: Data Protection Officer
Email: grievance@lead-ai.in

We acknowledge receipt within 48 hours and resolve complaints within 30 days. If unsatisfied with our resolution, you may file a complaint with the Data Protection Board of India (once established under DPDP Act 2023).

We may update this Privacy Policy to reflect changes in our practices, new features, or legal requirements. The "Last Updated" date at the top shows when the latest version was published.

Material changes: We will email you at your registered address 30 days before changes take effect and display a prominent in-app notice. We may require you to accept the new policy before continuing to use the service.

If you do not agree with an updated Privacy Policy, you may stop using the service or delete your account. Previous versions are available upon request.

General Privacy Inquiries: privacy@lead-ai.in — response within 48 hours (business days)

Data Subject Rights Requests: privacy@lead-ai.in — response within 14 days. Include your name, account email, specific request, and identity verification.

Grievance Officer: grievance@lead-ai.in — acknowledgment within 48 hours, resolution within 30 days

General: info@lead-ai.in

Support: support@lead-ai.in  ·  Hours: Monday–Saturday, 9 AM–6 PM IST

By using Quan, you acknowledge that you have read, understood, and agree to this Privacy Policy.