Privacy Governance

Privacy Policy

We secure your personal identity documents, transaction statements, and matching logs in complete regulatory compliance with GDPR and Indian IT Act protocols.

Published: May 26, 2026| GDPR & IT Act Compliant

At LeadsMela, we are deeply committed to protecting your privacy and securing the personal information you share with us. This Privacy Policy details how we handle, collect, verify, and store user information across our ecosystem.

1. Information We Collect

Personal Identifiable Information: Name, email address, physical address, verified mobile phone number.
Business Credentials: Company registration, trade category, GST registration certificate, identity documents (Aadhaar or PAN scan for KYC).
Financial Information: Wallet transaction logs, Razorpay billing receipts, subscription details.
Technical Telemetry: IP addresses, web browsers, operating system configurations, cookies, and mobile hardware IDs.

2. How We Use Your Information

To establish and verify user registration accounts and perform backend KYC approvals.
To match Customer project requirements instantly with appropriate verified Providers.
To process atomic wallet transactions, credit deductions, and subscription plans.
To send automated push notification alerts, WhatsApp verification triggers, and email analytics digests.
To protect our marketplace environment from fraud, spam, or cyber security threats.

3. Data Sharing & Third-Party Disclosure

Match Sharing: When a Provider claims a Customer lead, we exchange verified contact details (phone and email) between the matched parties.
Payment Gateways: Payment transaction credentials are secure and processed directly by our RBI-compliant billing partner (Razorpay).
Regulatory Compliance: We may disclose personal data to law enforcement agencies if mandated by a legal subpoena or regulatory order under the Indian IT Act.

4. Data Retention & Storage Systems

User profiles and transaction logs are stored on highly secured MongoDB database instances.
We retain your personal data only as long as your platform account remains active.
Upon account deletion, we immediately initiate purging procedures to wipe KYC files and contact details within 30 days, unless legally required for tax records.

5. Your Data Rights (GDPR & IT Act)

Right to Access: You can request a complete digital copy of all personal telemetry we store.
Right to Deletion: You can delete your account at any time, initiating complete data purges.
Right to Portability: You have the right to request export of your provider profile in reusable JSON format.
Right to Rectification: You can update or amend any incorrect profile details inside your management dashboard.

6. Cookies & Tracking Technologies

We use essential platform cookies to maintain login sessions and remember preference states.
Performance cookies (Google Analytics) are deployed to monitor anonymous traffic trends.
You can disable all non-essential cookies via your browser settings without impacting core marketplace features.

7. Information Security Measures

All client-server communications are encrypted using high-grade SSL/TLS network channels.
Database credentials and documents are stored behind robust virtual private cloud firewalls.
We perform automated monthly vulnerability audits to identify and secure our systems.

8. Childrens Privacy Protection

LeadsMela is restricted exclusively to individuals of legal majority age (18 years and above).
We do not knowingly collect, verify, or maintain any personal data from individuals under 18 years of age.

9. Changes to this Policy

We reserve the right to modify this Privacy Policy at any time to reflect changing regulations.
Registered users will receive instant dashboard banner alerts or emails if material changes are published.

10. Grievance Redressal Officer (Indian IT Act)

In compliance with Information Technology Act 2000 rules, our designated Grievance Officer details are:
Name: Vivek Kumar, Grievance Redressal Desk
Address: LeadsMela Technologies Private Limited, Block-C, Outer Ring Road, Bengaluru, KA - 560103
Email Address: grievance@leadsmela.com

KYC Encryption Protocol

Your Aadhaar/PAN scans are encrypted at rest using industry-standard AES-256 protocols and are accessible only to audited verification specialists during profile screenings.

Loading LeadsMela...

1. Information We Collect

Personal Identifiable Information: Name, email address, physical address, verified mobile phone number.

Business Credentials: Company registration, trade category, GST registration certificate, identity documents (Aadhaar or PAN scan for KYC).

Financial Information: Wallet transaction logs, Razorpay billing receipts, subscription details.

Technical Telemetry: IP addresses, web browsers, operating system configurations, cookies, and mobile hardware IDs.

2. How We Use Your Information

To establish and verify user registration accounts and perform backend KYC approvals.

To match Customer project requirements instantly with appropriate verified Providers.

To process atomic wallet transactions, credit deductions, and subscription plans.

To send automated push notification alerts, WhatsApp verification triggers, and email analytics digests.

To protect our marketplace environment from fraud, spam, or cyber security threats.

3. Data Sharing & Third-Party Disclosure

Match Sharing: When a Provider claims a Customer lead, we exchange verified contact details (phone and email) between the matched parties.

Payment Gateways: Payment transaction credentials are secure and processed directly by our RBI-compliant billing partner (Razorpay).

Regulatory Compliance: We may disclose personal data to law enforcement agencies if mandated by a legal subpoena or regulatory order under the Indian IT Act.

4. Data Retention & Storage Systems

User profiles and transaction logs are stored on highly secured MongoDB database instances.

We retain your personal data only as long as your platform account remains active.

Upon account deletion, we immediately initiate purging procedures to wipe KYC files and contact details within 30 days, unless legally required for tax records.

5. Your Data Rights (GDPR & IT Act)

Right to Access: You can request a complete digital copy of all personal telemetry we store.

Right to Deletion: You can delete your account at any time, initiating complete data purges.

Right to Portability: You have the right to request export of your provider profile in reusable JSON format.

Right to Rectification: You can update or amend any incorrect profile details inside your management dashboard.