Cleverlead — Privacy Policy

This Policy covers personal information that we decide how to use — your account details, billing information, and how you use the Service. It does not cover the contacts, leads and other records that you and your team upload into the CRM ("Customer Data"). For Customer Data, you are the data controller and we act only as your processor under our Data Processing Addendum. If you are an individual whose details appear in a Cleverlead customer’s CRM, please direct any privacy request to that customer; we will assist them in accordance with our DPA.

• Account information. Name, work email address, phone number, company name and role, password (stored in hashed form by our platform provider), and account settings.
• Billing information. Payments are processed by our payment provider, HYP (or another processor we may use). We receive confirmation of payment, the plan purchased and partial card details (such as last four digits); we do not store full payment card numbers.
• Usage and technical data. Log-ins, feature usage, activity levels, record counts, session times, pages viewed, clicks, device and browser type, operating system, IP address and approximate location, and log files.
• Session recordings. To improve the Service, we may record user sessions within the app (screen interactions such as navigation, clicks and scrolling) using tools provided by our platform provider. Recordings may incidentally capture information displayed on your screen. We use such recordings only for product improvement, debugging and support, limit access to them, and where the tooling allows, mask sensitive input fields. If you are an account administrator, you are responsible for informing your team members (Authorized Users) that in-app sessions may be recorded. You may object to session recording by contacting us at the address below, and we will make commercially reasonable efforts to address your objection, subject to the capabilities of our platform provider’s tooling.
• Communications. Support requests, chats, emails and feedback you send us, and our records of correspondence.
• Marketing data. Your email address and communication preferences, if you sign up for updates or agree to receive marketing messages.

If you create an account or sign in using "Sign in with Google," we access only the basic profile information Google provides for authentication purposes — your name, email address, and profile picture — through Google's standard sign-in scopes (openid, email, profile).

Separately, and only if you explicitly choose to connect them, Cleverlead offers optional Gmail and Google Calendar integrations that support the meeting scheduling feature of the CRM. These integrations are entirely opt-in: they are never enabled by default, and connecting them requires you to complete a Google consent screen. When connected, we request the following scopes: (a) https://www.googleapis.com/auth/gmail.send — used solely to send the specific meeting invitation email that you compose and trigger inside Cleverlead, from your own address, so it reaches your client's inbox with your branding; and (b) https://www.googleapis.com/auth/calendar.events — used solely to create and update the calendar event for the meeting you schedule in Cleverlead, including its time, title, location, description and attendees.

Scope of access. We do not read, search, download, index or store the contents of your mailbox; the gmail.send scope does not permit reading mail. We do not read or store your existing calendar entries beyond the events created through Cleverlead; for those events we store only the Google event identifier, so the meeting can later be updated or cancelled from within Cleverlead. We do not access Google Contacts, Google Drive, or any other Google Workspace data. All access is limited to actions you initiate in the product.

We use Google user data solely to provide these user-initiated features. We do not use it for advertising or marketing purposes, do not use it to train or improve generalized or standalone artificial intelligence or machine learning models, do not sell it, and do not transfer it to third parties except as described in "How We Share Information" below and as strictly necessary to operate the Service. Cleverlead's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Disconnecting. You may disconnect the Gmail and Google Calendar integrations at any time from within Cleverlead, which revokes the stored authorization token and deletes the connection. You may also review or revoke Cleverlead's access to your Google account at any time via your Google Account permissions settings (myaccount.google.com/permissions). Revoking access disables the affected features but does not otherwise affect your Cleverlead account.

Our website and app use cookies and similar technologies operated by us and by third parties, including Google Analytics, Meta (Facebook) Pixel, analytics and tracking tools provided by our platform provider (Base44), and similar measurement or advertising tools we may add in the future. These help us understand how the Service is used, measure the performance of our advertising, and improve the product. You can control cookies through your browser settings, opt out of Google Analytics via Google’s opt-out tools, and manage ad preferences through Meta’s ad settings. Where required by applicable law, we will present a cookie notice or obtain consent before activating non-essential cookies.

We use the information described above to: provide, operate and secure the Service; set up and manage accounts and subscriptions; process payments; respond to support requests; monitor usage, diagnose problems and improve the Service (including through analytics and session recordings); send service and administrative notices (such as billing, security and change notifications); send marketing communications where you have agreed to receive them; comply with legal obligations; and establish, exercise or defend legal claims.

When you create an account, we send messages that are part of operating the Service — such as welcome and onboarding emails, guidance on adding team members, tutorials, and service, security and billing notices. In addition, as permitted for existing customers under the Israeli Communications Law (Telecommunications and Broadcasting), 5742-1982 (the "spam amendment"), we may send registered users updates about new features and improvements of the Service, as disclosed at sign-up; every such message includes a working unsubscribe option and you may opt out at any time without affecting service notices. Other marketing communications will be sent only with your prior consent as required by applicable law. We may use third-party email or messaging platforms (such as the messaging capabilities of our platform provider, Resend, or similar services) to deliver these communications.

• Service providers. We share information with providers that help us run Cleverlead, including our platform and hosting provider, Base44 (Base44, Inc. / Wix.com Ltd.) and its sub-processors (hosting, storage and AI providers), our payment processor (HYP), analytics and advertising partners (such as Google and Meta), and email/messaging providers. Each provider receives only what it needs to perform its function.
• Legal reasons. We may disclose information if required by law, court order or competent authority, or to protect our rights, users or the public, limited to what is necessary.
• Business transfers. If Cleverlead is incorporated, merged, acquired or its assets are sold, information may be transferred to the successor entity, which will remain bound by this Policy.

The Service is hosted on third-party infrastructure operated by our platform provider and its sub-processors, and information may be stored or processed outside of Israel, including in the United States and the European Union. Where personal data is transferred internationally, we rely on the safeguards implemented by our providers, such as adequacy decisions, the EU-US Data Privacy Framework, and Standard Contractual Clauses, as described in our Data Processing Addendum and our providers’ documentation.

We keep account and billing information for as long as your account is active and afterwards as needed for legitimate business purposes, tax and bookkeeping obligations (which in Israel generally require retention of transaction records for seven years), and the defense of legal claims. Usage data and session recordings are retained for as long as needed for the purposes described in this Policy. When information is no longer needed, it is deleted or anonymized, subject to residual copies in routine backups that are erased on our providers’ backup cycles.

We implement organizational and technical measures appropriate to the nature of the data, including access controls, encryption in transit provided by our infrastructure providers, least-privilege access to customer information by our personnel, and confidentiality obligations. No system is perfectly secure, and we cannot guarantee absolute security; please use a strong, unique password and keep your credentials confidential. In the event of a data breach affecting your personal information, we will act in accordance with applicable law.

Under the Israeli Protection of Privacy Law, 5741-1981, you are entitled to review information we hold about you and to request the correction or deletion of information that is inaccurate, incomplete or outdated. If you are located in the European Economic Area or the United Kingdom, you may also have rights under the GDPR/UK GDPR, including rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to a supervisory authority. To exercise any right, contact us at info@avichainavi.com; we may need to verify your identity before acting on a request.

The Service is intended for business use by adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us information, contact us and we will delete it.

We may update this Policy from time to time. Material changes will be announced via the Service or by email before they take effect, and the "Last updated" date above will change. Your continued use of the Service after the effective date constitutes acknowledgment of the updated Policy.

For any privacy question or request: Cleverlead · Israel · info@avichainavi.com.

Note: This template was prepared for internal drafting purposes and is not legal advice. Have it reviewed by a qualified attorney before publication.