Privacy Policy

Last updated: 27 September 2026

Effective date: 27 September 2026

Lead10 CRM ("Lead10", "we", "our", or "us") is operated by EmiraIT Solution in Dubai, United Arab Emirates. This Privacy Policy explains what information we collect, how we use, share, store and protect it, and the choices you have. It applies to the website lead10.com, the Lead10 web app, and the Lead10 mobile app for Android and iOS (together, the "Services").

1. Our role

Lead10 is a CRM that businesses use to manage their own leads, customers and conversations. For the account details of the people who use Lead10 (the business owner and their team), we decide how that information is used. For the information a business stores in Lead10 about its own customers, such as leads, contacts and chat messages, the business decides what is collected and why, and we process it on the business's behalf and on its instructions. If you are a customer of a business that uses Lead10, please contact that business first about your information.

2. Information we collect

Account information

  • Name, email address, phone number and job role
  • Workspace (company) name and workspace code
  • Sign-in details and security settings, such as two-step sign-in
  • Billing details for your Lead10 subscription; card payments are handled by our payment processor

Business data you add or connect

  • Leads, clients and contacts, with their names, phone numbers, email addresses and any other details you record
  • Conversations and messages from the channels you connect: WhatsApp, Instagram, Messenger, email and website forms, including photos, videos, voice notes, documents and locations sent in them
  • Notes, files, tasks, support tickets, calendar events, quotes, invoices, payments and expenses
  • Advertising data from Google Ads and Meta accounts you connect, such as campaigns, results and the ad a lead came from

Technical information

  • Log data such as IP address, browser type, pages visited and the date and time of requests
  • Device information described in section 3

3. The Lead10 mobile app

The mobile app is for people who already have a Lead10 account. You sign in with your workspace code, email and password. Besides the account and business data above, the app handles the following:

  • Device information: a device identifier, device model, manufacturer, operating system version and app version. We use these to register your device with your workspace and to keep accounts secure.
  • Push notification token: a token from Google Firebase Cloud Messaging (and Apple Push Notification service on iOS), used only to deliver notifications such as new messages. It is removed from your workspace when you sign out.
  • Sign-in token: kept in the device's secure storage so you stay signed in. It is deleted when you sign out.

The app asks for these permissions only when you use the feature that needs them. You can refuse, or withdraw them later in your device settings:

  • Microphone: to record a voice message you choose to send.
  • Location: only when you tap to share your location in a conversation. The location is sent as a message to that customer. The app does not collect location in the background.
  • Photos, videos and files: chosen by you through the system picker. Only the files you pick are uploaded, and the app cannot browse your gallery.
  • Notifications: to alert you about new messages.

The app shows no advertising, does not use an advertising ID, and contains no third-party analytics or tracking tools. All data sent between the app and our servers is encrypted in transit.

4. How we use information

We use information to:

  • Provide the Services: receive and send messages, manage leads, assign conversations, send notifications and run the features you use
  • Connect with Google Ads, Meta and other services you choose to connect, including sending lead status updates back to them as conversions when you set that up
  • Keep accounts and data secure, prevent fraud and abuse, and fix problems
  • Provide customer support and send service messages about your account
  • Bill for subscriptions and comply with legal obligations

We do not sell personal information, and we do not use the business data you store in Lead10 for advertising.

5. Google API Services

Lead10 CRM uses Google APIs to access and manage advertising and marketing data on behalf of authorized users. We only access data explicitly permitted by the user through Google's OAuth authorization process.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including Limited Use requirements.

6. How we share information

We do not sell, rent or trade personal information. We share it only:

  • With services you connect or ask us to send data to, such as Meta (WhatsApp, Instagram, Messenger), Google Ads, email marketing and accounting services. Messages you send go to the customer through the channel you choose.
  • With service providers that run parts of the Services for us, such as hosting, notification delivery (Google Firebase Cloud Messaging), email delivery and payment processing. They may use the information only to provide their service to us.
  • When required by law or legal process, or to protect the rights and safety of our users and the public.
  • With a buyer or successor if our business is reorganised or sold, under this policy.

7. Data security

We protect information with encryption in transit, access controls and industry-standard security measures. Every workspace has its own separate database. Inside a workspace, roles and permissions control who can see what, and two-step sign-in is available. No system is completely secure, so please keep your password private and tell us straight away if you suspect unauthorised access.

8. Data retention

We keep account and business data while your workspace is active. When a user or workspace is deleted, we delete the related data within 30 days, except records we must keep by law, such as billing and tax records, which we keep for as long as the law requires. Copies in backups are removed as the backups are replaced. Push notification tokens and sign-in tokens are deleted when you sign out of the app.

9. Your rights and choices

  • Access, correction and export: you can view and edit your information in Lead10, and ask us for a copy.
  • Deletion: you can ask us to delete your user account or your whole workspace. See how to delete your Lead10 account.
  • App permissions and notifications: you can turn these off at any time in your device settings.
  • Marketing messages: customers of a business using Lead10 can reply STOP to its WhatsApp campaigns to opt out.

To make a request, contact us using the details in section 13. We may need to confirm your identity first.

10. Children

The Services are business tools and are not intended for anyone under 18. We do not knowingly collect information from children.

11. Third-party services

The Services integrate with third-party services, including Google Ads, Meta (WhatsApp, Instagram, Messenger, Meta Ads), Google Firebase, email marketing and accounting services. When you connect one, its own privacy policy also applies to the information it receives.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the new version on this page with a new effective date. Continued use of the Services after an update means you accept the revised policy.

13. Contact information

Company: EmiraIT Solution
Product: Lead10 CRM
Address: BHB Business Centre, 1st Floor, 103, Spectrum Building, Oud Metha, Dubai, UAE
Email: support@lead10.com
Phone: +971 54 464 0969