Privacy Policy
Last updated: 6 October 2026
This policy explains how Crezvatic Private Limited (“we”) handles personal data in Leadpulse, our chatbot platform for businesses. It covers two groups of people: customers who sign up to build chatbots, and visitorswho chat with a chatbot on a customer’s website, Shopify store, WordPress site or WhatsApp number.
Our role
For customer accounts we are the controller. For conversations and leads collected by a customer’s chatbot, the customer is the controller and we process that data on their behalf, as their processor, following their instructions.
What we collect
- Account data: name, email, company, password (hashed), billing details and invoices.
- Chat data: messages visitors send, and details they choose to share in the chat (for example name, email, phone, answers to the bot’s questions, appointment times).
- Technical data: page URL, referrer, approximate location from IP address, browser and device type, timestamps.
- Connected services: if a customer connects Google Calendar, Google Sheets, WhatsApp, Cal.com, a CRM or a payment provider, we store the access tokens (encrypted) and use them only for the feature the customer turned on.
How we use it
- To run the chatbot: reply to visitors, save leads, send alerts and confirmations, book appointments.
- To provide our service to customers: accounts, billing, support, security and fraud prevention.
- To generate AI replies: message text is sent to the AI provider the platform uses to produce an answer.
- To improve reliability and fix problems, using aggregated usage information.
We do not sell personal data and we do not use visitor conversations for advertising.
Sub-processors
We use trusted providers to run the service, such as cloud hosting, email delivery, AI model providers (for example Google or OpenAI), messaging (Meta WhatsApp) and payment processors (Razorpay, Stripe, PayPal). They process data only to provide their service to us.
Retention
Customer data is kept while the account is active. Chat and lead data is kept until the customer deletes it or closes their account; after closure we delete it within 30 days, except where the law requires us to keep records such as invoices.
Security
Data is sent over HTTPS, passwords are hashed and connection secrets are encrypted at rest. Access is limited to staff who need it to run and support the service.
Your rights
You can ask to access, correct, export or delete your personal data. Visitors should contact the business whose chatbot they used first; we will help that business respond. You can also reach us directly at no-reply@crezvatic.com.
Shopify and WordPress
Our Shopify app and WordPress plugin only add the chat to the storefront or site. They do not read store orders, customer lists or site content. Shopify privacy requests (customer data requests and erasure) are received and handled as described above.
Changes
We will post updates on this page and change the date at the top. Significant changes are emailed to customers.
Contact
Crezvatic Private Limited — no-reply@crezvatic.com