LeadCall Privacy Policy
In short
- LeadCall reads the call log of the business line you choose and sends those calls to GenAi Tribe’s servers, so your business keeps its call history and knows which calls were real leads.
- It does not record calls, read your contacts or messages, or use your location. If your phone’s own dialer records calls, and your plan includes it, LeadCall can copy to our servers the recordings of calls marked as leads.
- If you sign in with Google, we get only your email address and your Google account ID, and use them only to know who you are.
- We do not sell anyone’s data. Call records are not deleted automatically by age today. A few records are kept permanently: an activity log (a caller’s number can still be blanked from it), sign-up requests, a list of past team members, and our CRM’s record of changes to LeadCall settings. Sections 9 and 10 explain exactly what is kept and what you can have deleted, and our account deletion page explains how to ask.
1. Who we are and what this policy covers
This policy covers LeadCall, an Android app, and the servers behind it. Both are made and run by GenAi Tribe (also written GenAi Tribe.Agency; “GenAi Tribe”, “we”, “us”), a digital agency based in Hyderabad, Telangana, India. GenAi Tribe is a sole proprietorship owned by Manthri Ashish Raj, and is the developer of LeadCall. You can reach us at contact@genaitribe.agency (see section 15).
LeadCall is only for businesses that are clients of GenAi Tribe. We switch it on for each business. In this policy, “the business” means that client, “the owner” means the person who runs it, “staff” means people the owner adds, and “callers” means the people who phone the business or are phoned by it. “GenAi Tribe’s CRM” means the website where our clients manage their customers; the LeadCall pages in it are where a business, or we, can see its calls.
Our general agency privacy policy at genaitribe.agency/privacy covers our website and our other services. For LeadCall, this page is the one that applies.
2. Who is responsible for what
- Callers’ details (numbers, names, call times, notes, recordings). The business chooses to use LeadCall, which phones it runs on, and what to do with its calls. We store and process these details on the business’s behalf, only to provide LeadCall to that business and to support it. We decide two things ourselves, and are responsible for them: keeping the permanent activity log (section 10), and our staff’s access to the business’s data, including recordings (sections 4 and 7).
- Owner and staff account details (Google email, phone details, sign-in records) are handled by us, so that we can run LeadCall and keep it secure.
Callers never see LeadCall, so the business must tell them. For example, it can add a short line to its recorded greeting, put a notice at the counter, or add a line to its website or Google listing, such as: “We keep a record of calls so we can follow up with you.” If its dialer records calls, it must also tell callers that calls may be recorded. Our LeadCall Terms say so.
3. What LeadCall collects and why
Here is everything LeadCall collects, and why.
| What | Details | Why |
|---|---|---|
| Calls on the business line | For each call: the phone number; the caller’s name, only if it is saved on the phone; the date and time; how long it lasted (talk time, or ring time for a missed call); the type (incoming, outgoing, missed, rejected or blocked); and which SIM line it came in on. | To show the business its calls, build the Call back list, count leads, and keep a copy the owner can see from any of the business’s phones. |
| Recent call history | When a phone is first set up, the calls of the last 30 days on the business line. | So the Call back list and reports are useful from day one. |
| Your answers and notes | Whether a call was a Lead, Not a lead or Spam, when it was answered, and which phone or person gave the answer; a note you type about a call; what a lead was worth in ₹; your type of business; numbers you tell the app to ignore, with the reason. Marking a call Spam puts that number on the ignore list, and later calls from it are not kept. | They turn a list of calls into a list of real customers. |
| SIM line name | The name of the line you pick as the business line: the carrier name plus the last 5 digits of that SIM’s number, when the phone reports it (for example “Jio (…98765)”). | So you can tell which line a call came in on. |
| Phone details | The phone’s model and maker, Android version and LeadCall version; the phone’s clock time and how many calls it has seen, each time it sends calls to us. | To tell the business’s phones apart, and to spot a phone that has stopped sending calls. |
| Your agreement | Which version of the in-app notice was agreed to on each phone, and when. | To show what was agreed to. |
| Phone numbers you give us | If you join a business by phone number, that number (picked with Google’s phone number hint or typed in). If you ask us to switch on a new business, an optional mobile number so we can call you. | To connect the phone to the right business, and to contact you about switching it on. |
| Google account (only if you use Continue with Google) | Your email address and your Google account ID. See section 5. | To know which business you belong to, and whether you are its owner or staff. |
| Staff emails | The Gmail addresses the owner adds for staff, with an optional name. | So staff phones can join the business. |
| Call recordings (only if switched on) | The audio file your phone’s own dialer made, with its file name, file type, time and the call’s length. See section 4. | So the business can listen back to a lead. |
| Records made from calls | In GenAi Tribe’s CRM: a contact (name and number) for each caller marked a lead, for each recent missed caller (made with the draft reply below), and for a caller marked Not a lead in the CRM; for a lead, a deal and a short activity note that includes the caller’s number; for a recent missed call, a call-back task and a draft WhatsApp or SMS reply, which is never sent unless a person sends it. This happens on every plan, including plans where the business itself has no CRM access. | To help the business follow up. On plans without the CRM, GenAi Tribe staff use them only to help the business follow up with its callers as agreed with the business; we do not contact a caller ourselves unless the business has asked us to. |
| Server records | Our server keeps standard technical logs of the app’s requests, including the phone’s IP address and the web address the app contacted. Some of these contain a caller’s number (for example when the app checks whether a caller was already marked a lead). | To run the service, fix faults and investigate misuse. How long they are kept: section 9. |
| Weekly summary (owner phones, on plans that include it) | From app version 3.3: once a week our servers make a summary of the business’s calls in the week before (totals only) and keep a copy of it. The owner’s phone shows it, with a list of missed callers nobody has spoken to yet (showing a caller’s number only where that phone already shows their calls), and tells our servers when it reached the phone and when the owner opened it. Staff phones never show it. It is not sent by WhatsApp, SMS or email. | So the owner can see how the week went, and is not reminded about a summary already read. |
What LeadCall does not collect
- It does not read your contact list. The only name it sees is the name your phone’s dialer already shows for a number in the call log.
- It does not read SMS or any messages.
- It does not use your location, camera or microphone.
- It does not open your photos or other files. If recordings are switched on, it looks at the names, sizes and times of the files in the one recordings folder that was picked (and the folders directly inside it) to find the right recording, and opens and sends only that file (section 4).
- It does not read your phone’s IMEI, its Android ID or its advertising ID. It does not collect your phone’s own full number, unless you pick or type it to join a business. The SIM line name uses only its last 5 digits (see the table above).
- It contains no advertising, analytics or crash-reporting code. Apart from Android’s standard building blocks, the only outside library in it is Google Play services, used for the phone number hint and for Continue with Google, and it does not see call data.
Which SIM is read
During setup you choose the business line, and LeadCall keeps only the calls on that line. There are three cases in which calls from every SIM on the phone are kept, including a personal one: if you tap “Use every line on this phone”; if the phone does not report its SIM lines; or if the phone does not say which SIM a call used. If the phone also has a personal SIM, check the business line in the app’s settings. The only sure way to keep personal calls out is to use a separate phone for business calls.
When calls are sent
Calls are saved on the phone first and sent to our servers soon after each call ends, on wifi or mobile data, with a regular check every 15 minutes and after the phone restarts. If there is no signal, they are sent later.
The notice in the app
Before Android asks for call-log permission, LeadCall shows a full-screen notice that says what it collects, and you choose I agree or No thanks. If you say no, LeadCall cannot read the call log.
4. Call recordings
LeadCall does not record calls, and it has no microphone permission. Some phones’ own dialers can record calls. If yours does, and your business’s plan includes it, and it has been switched on for your business in GenAi Tribe’s CRM (by us or, on plans that include the CRM, by the business’s own CRM administrator), LeadCall can copy those recordings to our servers. A phone does so only after the person using it (owner or staff) has been shown a notice in the app, agreed to it, and picked the recordings folder in Android’s own folder picker.
- Only recordings of calls that count as a Lead are sent. Once a caller is marked a Lead (on that phone, on another of the business’s phones, or in GenAi Tribe’s CRM), their other answered calls count as leads too, so their recordings can be sent without each call being marked.
- To find the right file, LeadCall looks at the names, sizes and times of the files in that folder (and the folders directly inside it). It opens and sends only the file that matches the call.
- Recordings are sent only over wifi, never on mobile data, and only files of 10 MB or less.
- Recordings can be played back in GenAi Tribe’s CRM: by the business, if its plan includes the CRM, and by GenAi Tribe staff. On plans without the CRM, only GenAi Tribe staff can play them. The app itself has no playback.
- Recording files are deleted automatically 90 days after they are uploaded, or after the period set for the business (1 to 365 days), except the files of a caller who has been removed (section 10), which stay until we delete them by hand. We do that when we act on a deletion request, and otherwise at least once a month.
Whether to record calls is the business’s decision. The people it speaks to must be told, for example by the dialer’s own announcement.
5. Data from your Google account
From app version 3.2, the app offers Continue with Google as a way to join a business. Setup codes still work without it. If you use it:
- LeadCall asks Google only for your email address (the Google permissions called
openidandemail). Google also gives us an ID number for your account with every sign-in. It does not ask for your name, photo, contacts, Gmail, Drive or anything else. - We keep your email address and your Google account ID. The phone keeps only your email address.
- We use them only to know who you are, which business you belong to, and whether you are its owner or staff, and to keep a record of who joined which business.
- Who sees it: the business owner (and, on the CRM plan, the business’s CRM users) sees the email addresses of its staff. GenAi Tribe staff see your email when you ask to join or to switch on a business, in order to approve it, and when you ask us for help. Nobody else.
- We do not keep Google’s access or refresh tokens, and LeadCall cannot act in your Google account.
- How long: while you are a member of the business, we keep your email address and Google account ID. After that, and even after a deletion request, we keep a small security record, permanently: sign-up requests (Google account ID, email, the phone’s details and the optional contact number) and removed staff, who are marked as removed rather than deleted. We keep this record so that we can always tell who had, or asked for, access to a business’s call records, and to detect and prevent misuse. It is not used for anything else. If you ask us to delete your data, we remove the contact number from these records and partly hide the email address in them (for example r…@gmail.com); we keep the Google account ID and the phone’s details.
LeadCall’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Our staff look at your email address only to approve your request to join or switch on a business, to help you when you ask us to, and for security.
We do not use your Google account data for advertising, we do not sell it, and we do not use it to train AI models. You can stop LeadCall using Google to sign you in at myaccount.google.com/permissions. That stops future Google sign-ins, but does not disconnect a phone that is already set up or delete what we already hold; to have that deleted, see section 10.
6. Where the data is stored
- On the phone: calls are kept in the app’s own private storage. They are excluded from Android’s cloud backup and from phone-to-phone transfer.
- On our servers: in GenAi Tribe’s database on our server at
crm.genaitribe.cloud, which we rent from Hostinger International Ltd., in its data centre in Mumbai, India. Each business’s data is kept separately from every other business’s data. Recordings are stored as files on the same server. - Activity log copy: about every 5 minutes, the activity log described in section 10, with its list of callers’ numbers and names, is copied to a second database on the same server.
- Our backups: a copy of the LeadCall database is made every night and kept for 14 days, on the same server. A few one-off copies, made before changes to our systems, are kept until we delete them. The second database is also copied every night; those copies are kept for 14 days, except the copy made on the 1st of each month, which is at present kept without an end date. A caller’s number or name blanked after such a copy was made stays in that copy.
- Hostinger’s backups: Hostinger also makes its own weekly backup of the whole server (the databases, the activity log copy and recording files) and keeps the most recent few, about two weeks’ worth. Hostinger reports that it stores these in its backup data centre in Kuala Lumpur, Malaysia. Now and then we also take a one-off snapshot of the whole server before a big change; Hostinger deletes it automatically, at present after about a day.
- Google: Continue with Google and Google Play services are run by Google, which may process data outside India under its own policies.
7. Who can see it
- Staff phones see only their own calls. They are never shown the business’s reports, ₹ values, other phones’ calls or the ignore list.
- The owner’s phone sees its own calls and, on plans that include them, reports. On plans that include the team view, it also sees the calls of the business’s other phones from the last 90 days, with numbers, names, notes and answers.
- The business’s CRM users, on plans that include GenAi Tribe’s CRM, can see the business’s calls, answers, notes and recordings.
- Records made from calls (the CRM contact, deal, activity note, call-back task and draft reply described in section 3) are made on every plan. On plans without the CRM, only GenAi Tribe staff can see them.
- GenAi Tribe staff who work on your account, and GenAi Tribe administrators, can see the business’s data, to set up LeadCall, support the business and keep the service running, and for no other purpose.
- A share link, if the business asks for one. It is off unless switched on. Anyone who has the link can see, without signing in, the business’s name and its call totals for up to the last year: how many calls, answered and missed calls, callers, leads and calls still to mark, total talk time, and calls, missed calls and leads day by day. It never shows a caller’s number or name, or any single call.
- The business’s own software, if it connects any. If the business sets up a link to its own systems (a “webhook”), call events, including the caller’s number, are sent there.
- Whoever you share with. If you export calls as a spreadsheet, or open WhatsApp to reply to a caller, the data goes to the app and people you choose.
8. Sharing with others
We do not sell, rent or trade anyone’s data. We share it only as follows:
- Service providers who help us run LeadCall: our server hosting company Hostinger International Ltd. (servers in Mumbai, India; its weekly backups in Kuala Lumpur, Malaysia), and Google, for Google Play services and Continue with Google.
- Google Play may collect standard crash and performance reports for apps installed from Play, under Google’s own policies.
- Google Ads, only for some businesses, and not in use yet. See below.
- When the law requires it, for example a valid order from a court or government authority, or to protect people or our service from harm.
- If our business changes hands, the data could pass to the new owner, who would have to keep to this policy. We would tell affected businesses first, and a business that does not want its data to pass can ask us to delete it before then.
Google Ads (not in use for any business today)
For a business whose Google Ads GenAi Tribe manages, we plan, under a signed agreement with that business, to report to its Google Ads account which calls turned out to be real leads. Google Ads would use this to count which ads brought real customers and to adjust how it spends the ad budget. This is not switched on for any business today. If it is switched on for a business:
- Only calls marked as a Lead are sent, with the call time, the lead’s ₹ value, and the Google ad-click ID if the call came from an ad.
- The caller’s number is turned into a code (a SHA-256 “hash”) before it is sent, as Google requires. This is not anonymous: Google compares the code with its own users’ phone numbers to find a match.
- It goes to the business’s own Google Ads account, which GenAi Tribe manages through its Google Ads manager account.
- Only GenAi Tribe can send leads to Google Ads: the upload file can be made only by GenAi Tribe, and our automatic sending is switched off. We will send a business’s leads only under a signed agreement in which the business confirms that it has told its callers and has a lawful reason to share their details this way. The app’s notice mentions Google Ads, but we do not treat a tap on I agree in the app as anyone’s permission for it: a staff member cannot agree on behalf of callers.
- To stop your leads being sent to Google Ads, email contact@genaitribe.agency; we will switch it off for your business within 7 days.
- Once a lead has been reported to Google, we cannot take it back.
9. How long we keep it
- Call records are not deleted automatically, even after a business stops being a client. They are deleted when a number is removed, or when you ask us (section 10). When a business stops being a client, we ask it in writing whether it wants its call records deleted.
- Records made from calls (CRM contacts, deals, activity notes, call-back tasks and draft replies) are kept until the business or we delete them. A contact deleted in the CRM is first hidden, and can be restored for 30 days; it is erased from the database only when we erase it, which we do when we act on a deletion request.
- Weekly summaries are kept for as long as the business’s call records.
- Recordings are deleted automatically 90 days after they are uploaded, or after the period set for the business, except the files described in section 10.
- Event records, which carry the caller’s number and are kept for every business so they can be sent to its own software if it connects any (webhooks), are deleted after 30 days.
- Requests to join by phone number (the number offered and the phone’s details) are kept without an end date today, including requests that were never approved. We delete them when we act on a deletion request.
- Change history: GenAi Tribe’s CRM records who changed LeadCall settings and when, with the IP address used. When a number is ignored, or allowed again, from the CRM, the number itself is recorded there. These records have no deletion period today; we remove the number from them when we act on a deletion request.
- On the phone, the phone’s own calls, with their answers and notes, stay in the app until the phone is disconnected (section 10), the app is uninstalled or its storage is cleared. Other phones’ calls shown to the owner are removed after 90 days, or when the phone is disconnected.
- Backups are kept as section 6 describes: our nightly copies for 14 days (except the monthly copies of the activity log copy, and a few one-off copies, which are kept until we delete them), and Hostinger’s weekly copies for about two weeks.
- Sign-up requests (Google account ID, email, the phone’s details and the optional contact number) are kept permanently, even after a deletion request, as a security record of who asked for access to which business. Removed staff are marked as removed, not deleted, for the same reason (section 5). After a deletion request, we remove the contact number from these records and partly hide the email address.
- Server logs: each part of our server keeps its most recent logs up to a fixed size, and some are cleared when we update that part. Separately, every hour we copy these logs to an archive on the same server in Mumbai, India, with mobile numbers hidden except their last 4 digits. We keep that archive for 180 days, as India’s cyber-security rules (CERT-In) require, and then delete it.
- The activity log is permanent. See the next section.
In every case, we may keep data for longer where the law requires us to, for example to answer a valid order from a court or government authority.
10. Deleting data, and what cannot be deleted
The permanent activity log
LeadCall keeps a permanent log of what happened in each business: each call, each Lead answer, note, call back, recording saved, phone joined or removed, and number ignored. It exists so that a business’s history cannot be quietly changed or lost, and our systems are built so that entries cannot be deleted in day-to-day use, by the business or by our staff. If the law requires us to erase a person’s details, we blank their number, name and notes in it (see below). The bare record that a call happened stays. In the log:
- Callers appear by an internal reference number, not by their phone number. Their number and name are kept in a separate list.
- Phone numbers inside notes are hidden, and a note is cut to 300 characters. Anything else typed in a note, such as a name or address, is kept until that caller is removed.
- When a caller’s details are removed, their number, name and notes are blanked. The lines that say “caller no. 123 called at this time” stay.
- Lines about the team (a phone joined or was removed, a person was added, removed or approved) also stay. They name a phone by its name, and a person by the name the owner gave them or by a partly hidden email address.
- Lines about an answer or change made in GenAi Tribe’s CRM name the CRM user who made it, by their name in the CRM or, if they have none, their email address. These stay too.
A copy of the log and of the caller list is kept in a second database on the same server. It cannot be deleted either. It is updated about every 5 minutes, and when a caller is removed their number and name are blanked in the copy too. The copy does not blank callers by itself when a whole business is deleted, so when we delete a business’s data we first remove each of its callers as described below, and only then delete the rest.
We keep this log, even after a deletion request, for security and to prevent fraud: so that a business’s call history cannot be quietly changed or lost, and so that questions about what happened, and who did it, can be answered.
Removing one caller
The owner can tell LeadCall to ignore a number, from the owner’s phone or from the LeadCall pages in GenAi Tribe’s CRM. That deletes that caller’s calls on our servers and from the phones’ own call lists, deletes the business’s saved answer for them, cancels any Google Ads upload still waiting, and blanks their number, name and notes in the log. Staff phones cannot do this. The number itself stays on the business’s ignore list so that later calls from it are not kept; taking it off the list deletes it from the list. If the number was ignored or allowed again from GenAi Tribe’s CRM, the CRM’s change history also records the number (section 9).
It does not yet remove everything. These stay until they are deleted separately: CRM contacts, deals, activity notes, call-back tasks and draft replies made from those calls; recording files of that caller; the copy of other phones’ calls on the owner’s phone (for up to 90 days); event records (for up to 30 days); the CRM’s change history (section 9); and backups made before the removal (section 6). To have those removed too, email us.
Disconnecting a phone
“Disconnect this phone” in the app’s settings stops that phone sending calls. It deletes from the app the phone’s own calls with their answers and notes, and the other phones’ calls shown to the owner, and the app stops using the recordings folder (the recording files themselves are not touched). Nothing already sent to our servers is deleted or changed, including the permanent activity log.
This is how app version 3.2 and later work. In earlier versions, “Disconnect this phone” stops the phone sending calls but leaves its calls in the app until the app is uninstalled or its storage is cleared.
Answers, notes and recordings the phone had not yet sent when it was disconnected are lost. Calls it had not yet sent are read again from the phone’s call log if the phone is connected to LeadCall again, as long as they are no more than 30 days old. The calls made while the phone was disconnected are read then too, back to the same 30 days.
How to delete your LeadCall account and data
Email contact@genaitribe.agency with the subject “Delete my LeadCall data”. Tell us your business name and the phone number or Google email you use in LeadCall. You do not need the app installed. We will check it is really you, for example by calling that number. Then we will delete your account and the data linked to it, and write back to tell you what we deleted and what we kept and why (only the items listed in sections 9 and 10). We will reply within 7 days and finish within 30 days. The same steps, with a list of what is deleted and what is kept, are on our LeadCall account deletion page.
- If you are the owner, we delete the business’s LeadCall data: its phones’ connections, calls, answers, notes, ₹ values, ignore list, recordings, weekly summaries, the records LeadCall made in GenAi Tribe’s CRM, and its list of owner and staff Google emails. Only the items sections 9 and 10 name are kept: the activity log (with callers’ numbers, names and notes blanked, but still naming the phones and CRM users that made each change), sign-up requests and the CRM’s change history (with numbers removed), and, until they expire, backups (section 6), event records (30 days) and server logs (section 9), and anything the law requires us to keep for longer. Staff phones stop working for the business too.
- If you are staff, we remove your access to the business and your phone’s connection to it, and keep only the security record that you were a member (section 9) and the lines in the permanent activity log that mention you, which show the name the owner gave you or a partly hidden email address (section 10). The calls your phone sent are part of the business’s call history, so they stay unless the owner asks us to delete them.
If you called a business that uses LeadCall and want your number removed, ask that business, or write to us with your number and the business’s name. We will pass your request to the business within 7 days, and tell you within one month what has been done. If the business agrees, or has not answered us within 30 days, or the law requires it, we will remove your number as described above.
11. How we protect it
- Data travels between the app and our servers over an encrypted connection (HTTPS).
- Each phone signs in to our servers with its own secret key; our servers keep only a scrambled (hashed) copy of it. Your Google password never reaches us.
- Each business’s data is kept apart from every other business’s by rules inside the database, not only in the app.
- The app’s data on the phone is kept out of cloud backups.
- In the permanent log, callers appear by an internal reference number, not by their phone number.
No system is perfectly safe. If a security breach affects your data, we will tell the affected businesses without delay, help them tell the people affected, and report it to CERT-In, India’s national cyber-security agency, within six hours of noticing it, as Indian law requires. Once the rules of the Digital Personal Data Protection Act apply, we will also report it to the Data Protection Board of India and tell affected owners and staff directly.
12. Your rights
You can ask us:
- for a summary of the personal data we hold about you, what we do with it, and who we have shared it with;
- to correct, complete or update it;
- to delete it, subject to section 10;
- to withdraw a consent you gave. To stop LeadCall reading the call log, turn off its call-log permission in Android settings or uninstall the app; tell us if you also want data already sent to be deleted. You can also use “Disconnect this phone” in the app’s settings (section 10). Turning off the permission stops new calls being read. To stop a business’s leads being sent to Google Ads (section 8), email us and we will stop it within 7 days;
- to deal with a complaint (see section 15); and
- to let someone else act for you if you die or cannot act yourself.
These match the rights India’s Digital Personal Data Protection Act, 2023 gives you once its rules take full effect; we offer them now.
Email contact@genaitribe.agency with your name, your business name, and the phone number or email you use with LeadCall, so we can find your data. If you are not happy with our answer, you can raise it with our Grievance Officer (section 15). Once the Data Protection Board of India is accepting complaints, you can also complain to it, after first raising the matter with us.
13. Children
LeadCall is a business tool for adults. Owners and staff must be 18 or over, and we do not knowingly collect data from children as users. A business may get calls from people under 18, and LeadCall cannot tell a caller’s age. A business must not ask us to send to Google Ads any lead it knows to be under 18. If a parent or guardian tells us that a caller’s details belong to a child, we will remove that number as described in section 10.
14. Changes to this policy
If we change how LeadCall handles data, we will update this page and the date at the top first. If the change is important, for example new data collected or a new use of it, we will tell client businesses directly and ask for agreement in the app where the law or Google requires it.
15. Contact and grievances
For any question, request or complaint about LeadCall and your data:
- Email: contact@genaitribe.agency
- Grievance Officer: Manthri Ashish Raj, GenAi Tribe, Hyderabad, Telangana, India, reachable at contact@genaitribe.agency. He also answers questions about how we handle personal data.
We will acknowledge a complaint within 2 working days and resolve it within one month of receiving it.