Privacy Policy

1. Introduction & Overview

This Privacy Policy explains how Brightwave Digital Products LLP ("Company", "we", "us", or "our"), operating under the product brand BookMyTime and SaaS platform LeadGenPilot, collects, processes, and protects your personal and business information when you use our website, APIs, browser automations, and associated software services.

We are committed to operating in full accordance with applicable privacy frameworks, including global data protection principles and Indian IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules.

2. Information We Collect

• Account Information: When you register an account, we collect your name, email address, password hash, and company name.
• Public Business Directory Data: LeadGenPilot retrieves publicly accessible commercial business listings from Google Maps, including business names, publicly listed phone numbers, physical addresses, review counts, star ratings, and web URLs. We do not extract private consumer data.
• Google Integration Tokens: If you connect Google Sheets for automated export, we securely store your OAuth2 refresh tokens in encrypted form to create and update designated spreadsheets on your behalf.
• Usage & Log Data: Standard server logs, IP addresses, browser types, scraping session timestamps, and error diagnostics to maintain system availability and security.

3. How We Use Your Information

We process the information collected for legitimate commercial purposes including:

4. Google API Services User Data Policy

LeadGenPilot's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We never sell your Google Sheets credentials or use customer spreadsheet contents for general AI training.

5. Data Retention & Security Architecture

All traffic is encrypted in transit using industry-standard TLS 1.3 protocol. User passwords are encrypted with salted one-way bcrypt hashing. OAuth tokens and sensitive connection credentials are encrypted at rest using AES-256-GCM. We maintain strict role-based access control (RBAC) across our backend infrastructure.

6. Your Data Rights & Deletion Requests

You maintain full ownership of your data. You may request a complete export of your workspace leads or request complete account deletion at any time by contacting our privacy compliance team at leadgenpilot.in@gmail.com. Upon verified request, all personal data, API tokens, and associated records will be permanently purged within 30 days.

7. Policy Modifications

We reserve the right to periodically update this policy to reflect technological advancements or regulatory revisions. We will notify active users of significant amendments via their registered email address or dashboard notice.