Privacy Policy

1. Who we are

LeadSlot provides lead follow-up, customer qualification, shared inbox and appointment-booking software for businesses. In this policy, "LeadSlot", "we", "us" and "our" refer to the operator of leadslot.ma and the LeadSlot platform.

A LeadSlot customer usually controls the personal data it uploads or collects from its leads. For that data, the customer is the data controller and LeadSlot processes the data on the customer's instructions. LeadSlot acts as controller for account, billing, security and website data that it collects for its own purposes.

2. Data we collect

• Account and workspace data, such as names, business email addresses, phone numbers, roles, company details and preferences.
• Lead and conversation data, such as contact details, form answers, message content, qualification answers, consent records and appointment requests.
• Calendar and integration data, including the Google data described in section 5 and identifiers received from connected CRM, messaging and meeting services.
• Service and device data, such as IP address, browser type, timestamps, audit logs, feature usage, errors and security events.
• Billing and support data. Payment providers process full payment-card details; LeadSlot may receive billing contact details, subscription status and limited transaction information.

3. How we use data

We rely on the performance of a contract, consent, legitimate interests and legal obligations, depending on the relationship and the data involved. Customers must have a lawful basis for the lead data they submit and for the outreach they configure.

• Provide, secure and support the LeadSlot service.
• Send messages, qualify leads, answer questions and book meetings according to the customer's campaign settings.
• Connect calendars, check availability, create meeting invitations and keep booking records in sync.
• Manage accounts, subscriptions, service notices and support requests.
• Prevent abuse, investigate incidents, improve reliability and meet legal obligations.

4. AI-assisted conversations

LeadSlot uses AI models to classify messages and draft replies from the campaign information supplied by the customer. Relevant conversation content and campaign instructions may be sent to the configured AI provider to generate a response. LeadSlot does not use Google user data or customer content to build advertising profiles or sell personal data.

Customers set the campaign knowledge, qualification questions and guardrails. A customer team member can review or take over conversations. AI output can be incomplete or wrong, so customers must configure and supervise the service for their use case.

5. Google user data

When a workspace member connects Google Calendar, LeadSlot requests only the permissions needed to provide calendar availability and booking features. Depending on the enabled feature and the scopes shown on Google's consent screen, LeadSlot may access the member's basic Google account identity, calendar list, free/busy information and calendar events. LeadSlot may create, update or remove events that the service manages and may request a Google Meet conference link for a booked appointment.

LeadSlot uses this data to identify the connected account, show available calendars, calculate free appointment times, avoid double bookings, create or update meeting invitations, attach Google Meet links and keep LeadSlot booking records synchronized with Google Calendar.

LeadSlot stores encrypted OAuth access and refresh tokens, the connected Google account identifier, selected calendar identifiers, Google event identifiers and booking synchronization data. LeadSlot does not receive or store the user's Google password.

LeadSlot does not sell Google user data, use it for advertising, or disclose it for credit or lending decisions. Google user data is shared only with service providers that help operate or secure LeadSlot, when required by law, or with the user's consent. Human access is limited to support requested by the user, security or abuse investigation, legal compliance, or internal operations where the data has been aggregated or de-identified.

LeadSlot's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. When we share data

We share personal data with vendors that provide hosting, databases, communications, email delivery, monitoring, customer support, payment processing and AI inference. They may use the data only to provide their contracted service to us and must protect it.

We may also disclose data when the user or customer instructs us to connect another service, when required by law, to protect users or the service, or as part of a merger, financing or sale subject to appropriate confidentiality safeguards. We do not sell personal data.

7. International transfers

LeadSlot and its service providers may process data outside the country where the user lives. Where required, we use contractual and organizational safeguards for these transfers.

8. Security

We use access controls, encryption in transit, encryption for stored integration credentials, audit logging, tenant separation, backups and monitoring. No system can guarantee absolute security. Customers must protect their credentials, limit user access and notify us if they suspect unauthorized use.

9. Retention and deletion

We keep personal data for as long as needed to provide the service, meet contractual or legal duties, resolve disputes and protect the service. Retention periods depend on the type of data and the customer's settings.

Disconnecting Google Calendar stops new access and removes or invalidates the active Google connection tokens in LeadSlot. Calendar events already written to the user's Google Calendar remain in that calendar unless the user or workspace removes them. Users can also revoke LeadSlot access from their Google Account permissions page.

Workspace owners can request export or deletion of workspace data by contacting [email protected]. We may retain limited billing, security, backup or legal records for the period required by law or legitimate operational needs.

10. Your choices and rights

Depending on applicable law, a person may ask to access, correct, delete, restrict or export personal data, or object to certain processing. Leads should first contact the business that used LeadSlot to reach them because that business controls the campaign and lead record. We support our customers in responding to valid requests.

Marketing messages include the required opt-out method. A lead can also tell the agent to stop. Service messages needed to operate an account may continue while the account remains active.

11. Cookies

LeadSlot uses cookies and similar storage for sign-in, security, language, theme and core service preferences. We may use limited analytics to understand site and product performance. Browser controls can block optional cookies, but blocking essential cookies may prevent sign-in or other features from working.

12. Children

LeadSlot is a business service and is not directed to children. A person must be legally able to enter a business agreement in their jurisdiction to create an account.

13. Changes and contact

We may update this policy when the service, law or our data practices change. We will publish the new date on this page and give additional notice when a material change requires it.

Questions, privacy requests and complaints can be sent to [email protected].