Privacy Policy

LeadCore AI is an AI-powered lead capture and qualification platform. It provides a chat widget that businesses ("Account Holders") add to their own websites to talk with their visitors and capture leads. LeadCore AI operates the platform from Pakistan. You can contact us at any time at daniyal@agenticcore.tech.

• Account Holders — people who sign up for a LeadCore AI account to manage leads. This policy describes how we handle your data.
• Visitors — people who chat with the widget on an Account Holder's website. For that data, the Account Holder is the controller and we act as their processor. We handle it on their behalf and under their instructions, plus as described here.

Account information you give us when signing up or using the dashboard:

• Your name and email address.
• An optional notification email you choose to receive lead alerts.
• Your password, which is stored only in encrypted (hashed) form by our authentication provider — we never see or store it in plain text.
• Settings you configure, such as your chat widget branding, greeting, and business context.

Lead and conversation data captured through the widget on an Account Holder's site. Visitors may share, and we store:

• Contact details a visitor provides in the chat, such as name, email, phone number, and company.
• Details about their enquiry, such as budget and project scope.
• The messages exchanged in the chat conversation.

Technical and security information collected automatically to keep accounts safe:

• Your IP address and browser/device information at sign-up and sign-in, used to detect fraud and abusive or duplicate accounts.
• Sign-in events (successful and failed) used for security monitoring.
• A session token stored in your browser so you stay signed in.

• To provide the core service: capturing, storing, scoring, and displaying leads in your dashboard.
• To use AI to automatically score leads and generate short summaries. Conversation and lead data is sent to our AI processing provider only to produce these results — it is not used to train public AI models by us.
• To send you transactional emails, such as your sign-up verification code, hot-lead alerts, and (if you opt in) periodic lead digests.
• To secure the platform: rate limiting, detecting duplicate or fraudulent accounts, and preventing abuse.
• To respond to your support requests and to comply with legal obligations.

Each account's data is isolated. Account Holders can only see leads and settings belonging to their own workspace; database-level access controls enforce this on the server, not just in the interface.

Platform administrator access. Our authorised platform administrators may access account data, including captured leads, only when necessary to provide support, maintain and secure the platform, prevent abuse, or comply with the law. We do not browse account data for any other reason, and we never sell it.

• Data is transmitted over encrypted (HTTPS) connections.
• Passwords are stored only as secure hashes by our authentication provider.
• Strict database-level access rules keep each workspace's data separate.
• Rate limiting and automated abuse detection help block attacks and fraudulent accounts.

No online service can promise perfect security, but we take reasonable, industry-standard measures to protect your information and continuously improve them.

We do not sell your personal data. We share it only with trusted service providers that help us run the platform, and only to the extent needed to deliver the service:

• Cloud hosting and database infrastructure providers that store the data.
• An AI processing provider used to score and summarise leads.
• An email delivery provider used to send verification codes, alerts, and digests.

These providers act on our instructions and are bound to protect the data. We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the platform.

We keep account and lead data for as long as your account is active so the service works. When you delete your account, your associated profile, workspace, leads, and settings are deleted. Some limited records may be retained for a short period where required for legal, security, or fraud-prevention purposes, after which they are removed.

• Access and update your account information from your dashboard settings.
• Request a copy of your data, or ask us to correct or delete it, by emailing us.
• Delete your account, which removes your associated data as described above.
• Opt out of non-essential emails such as lead digests at any time in your settings.

Visitors who chatted with a widget should contact the relevant Account Holder (the business whose website they used), since that business controls their data. We will assist the Account Holder in responding to such requests.

We use only essential browser storage needed to sign you in and keep your session active. We do not use third-party advertising or cross-site tracking cookies.

Our infrastructure providers may store and process data on servers located in different countries. Wherever data is processed, this policy and reasonable safeguards continue to apply.

LeadCore AI is a business tool and is not directed to children. We do not knowingly create accounts for individuals under 18. If you believe a minor has provided us information, contact us and we will remove it.

We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date above and, where appropriate, notify you. Continuing to use the Service after changes take effect means you accept the updated policy.

For any privacy question or request, email daniyal@agenticcore.tech. We operate under the laws of Pakistan.