Privacy Policy

Last updated 1 August 2026

LeadOS is a customer-relationship and messaging platform operated by The Bumblebee Branding Company ("we", "us"). This policy explains what information LeadOS collects, why, how it is stored, and the choices you have. It applies to the LeadOS web application at leados.in and to the LeadOS mobile applications.

1. Who the data belongs to

LeadOS is business software used by organisations ("workspaces"). Most of the information in LeadOS — contacts, leads, messages, notes — is entered or imported by the workspace that uses it. That workspace controls that data; we process it on their behalf. If you are a customer of a business that uses LeadOS and want your details corrected or removed, contact that business directly; we will assist them in responding.

2. Information we collect

Category	What it includes	Why
Account	Name, email address, hashed password, workspace membership and role	To sign you in and control what you can see
Workspace content	Contacts, leads, deals, notes, tasks, email and messaging history	The core function of the product
Connected accounts	Tokens and identifiers for services you choose to connect (e.g. Google, WhatsApp providers)	To perform the actions you ask for, such as sending an email
Technical	IP address, browser/device type, timestamps, error logs	Security, troubleshooting, abuse prevention

We do not sell personal information, and we do not use workspace content to serve advertising.

3. Google user data

LeadOS lets a user optionally connect their own Google account so that one-to-one emails they send from LeadOS go out from their own address rather than a generic workspace address. This connection is entirely optional — LeadOS is fully usable without it.

Scopes we request, and why

Scope	What it permits	How LeadOS uses it
`gmail.send`	Sending mail as you. It grants no ability to read, list, search, modify or delete anything in your mailbox.	To deliver an individual email you have composed and chosen to send from within LeadOS.
`userinfo.email`	Reading the email address of the account you connected.	To show you which address is connected, and to set the correct "From" address on messages you send.

What we store, and for how long

The email address and display name of the connected account.
OAuth access and refresh tokens, encrypted at rest, used solely to send the messages you initiate.
Token expiry and the granted scopes, so we can refresh access and tell you when a connection needs renewing.

We do not copy, index, download or retain the contents of your Gmail mailbox, because the permission we request does not allow us to access it. A record of messages you send from LeadOS is stored in your workspace so it appears on the relevant contact's timeline — that is content you created in LeadOS.

Disconnecting

You can disconnect at any time from Account → Your sending address in LeadOS. Disconnecting asks Google to revoke the token and deletes the stored tokens from our systems. You may also revoke access directly at myaccount.google.com/permissions. After disconnecting, your one-to-one email reverts to your workspace's own sending address.

Limited Use disclosure. LeadOS's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we use Google user data only to provide and improve the features you have requested; we do not transfer it to others except as necessary to provide those features, to comply with law, or as part of a merger or acquisition; we do not use it for advertising; and we do not allow humans to read it, except with your explicit consent for a specific support request, where required for security or to comply with law, or where the data has been aggregated and de-identified.

4. How we store and protect information

Traffic between you and LeadOS is encrypted in transit using TLS.
Credentials for connected accounts, including Google OAuth tokens, are encrypted at rest.
Passwords are stored only as salted hashes; we cannot read them.
Access to production systems is restricted to personnel who need it to operate the service.
Each workspace's data is logically separated, and requests are scoped to the workspace you are signed in to.

No system is perfectly secure, but we work to protect your information and to address issues promptly when they are identified.

5. Sharing

We share information only in these circumstances:

Service providers who operate parts of the platform on our behalf — for example email delivery and messaging providers — and only to the extent needed to deliver the message or feature you requested.
At your direction, such as sending an email or message you compose.
Legal requirements, where we are obliged to comply with applicable law or valid legal process.
Business transfer, if the service is acquired, in which case this policy continues to apply until replaced.

We do not sell personal information, and we do not share Google user data with third parties for their own purposes.

6. Retention

Workspace content is retained while the workspace is active, and removed on request or within a reasonable period after an account is closed. Connected account tokens are deleted when you disconnect. Technical logs are retained for a limited period for security and troubleshooting.

7. Your choices

Connecting a Google account is optional and reversible at any time.
You can request access to, correction of, or deletion of your personal information by contacting us; where the data belongs to a workspace, we will work with that workspace to respond.
Recipients of marketing email can unsubscribe using the link in any such message.

8. International users

LeadOS is operated from India and may process information in other countries where our service providers operate. We apply this policy wherever the information is processed.

9. Children

LeadOS is business software and is not directed to children, and we do not knowingly collect information from them.

10. Changes

We may update this policy. Material changes will be reflected in the "last updated" date above, and where appropriate we will notify workspace administrators.

11. Contact

The Bumblebee Branding Company
Privacy enquiries: hello@thebumblebee.in
Product: LeadOS — leados.in