Axivra Labs · LeadFlow AI
Privacy Policy
Initial draft · Last updated 18 July 2026
This draft is intended to communicate the proposed privacy approach in plain language. Final wording, effective date, provider disclosures, retention periods and statutory references must be confirmed through legal and operational review.
1. Scope and who we are
This initial Privacy Policy describes how Axivra Labs intends to handle personal information in connection with LeadFlow AI, our websites, demonstrations, onboarding and related support. LeadFlow AI is our CRM product for organization workspaces.
For CRM content entered by a customer organization, that organization generally decides why and how the information is used. Axivra Labs provides the service and processes that content to operate LeadFlow AI, subject to the applicable customer arrangement.
2. Information we collect
We may collect identity and contact information such as name, work email, phone number, company, role and industry. We may also collect communications, support requests, demo preferences, onboarding details and commercial correspondence.
When an account is created or used, we may process account identifiers, organization membership, permissions, profile preferences, authentication events and technical information needed to provide and protect the service.
3. Account, organization and CRM data
Authorized users may enter CRM content including lead and contact details, company information, notes, tasks, meetings, activity records, pipeline values and imported files. This content belongs to the customer or its relevant rights holder; Axivra Labs does not claim ownership of customer CRM data.
Customer organizations and their administrators are responsible for ensuring they have an appropriate basis to enter and use personal information in LeadFlow AI, and for configuring user access appropriately.
4. Demo and contact enquiries
Information included in demo or contact enquiries may be used to respond, understand business requirements, prepare a demonstration, discuss onboarding and maintain a record of the correspondence.
The current demo page prepares an email in the visitor’s email application and does not submit the form to a public LeadFlow AI database. Information is transmitted only if the visitor chooses to send that email.
5. How information may be used
Information may be used to provide, maintain and secure the service; authenticate users; manage organization workspaces; deliver requested support; conduct onboarding; communicate about service operations; understand product usage; prevent misuse; and meet legal obligations.
We do not intend to sell customer CRM data. Any use of information for product improvement should be limited, proportionate and handled in accordance with applicable agreements and law.
6. Authentication and service providers
LeadFlow AI uses third-party infrastructure and service providers for functions such as authentication, database hosting, application hosting and operational delivery. Those providers may process limited information on our behalf under their respective terms and safeguards.
Additional providers may be introduced where reasonably necessary. Material processing arrangements should be reviewed before commercial launch and reflected in customer documentation where required.
7. Cookies and essential technologies
The service may use cookies, local storage and similar technologies that are essential for authentication, session continuity, security and user preferences. Essential technologies are required for signed-in functionality.
If optional analytics, advertising or non-essential tracking technologies are introduced, this policy and any required consent choices should be updated before use.
8. Security practices
LeadFlow AI is designed with authenticated access, organization-scoped data handling, role-based permissions and database row-level security. We also aim to apply secure development practices, access controls and operational safeguards appropriate to the service.
No system can be guaranteed completely secure. This policy does not claim a security certification or absolute protection, and users should protect credentials and report suspected unauthorized access promptly.
9. Retention and deletion
Information should be retained only for as long as reasonably necessary for the service, customer relationship, support, security, dispute resolution and legal obligations. Retention periods may differ by information category and customer arrangement.
Expiry of a trial or subscription does not automatically delete CRM data. A documented retention and deletion schedule, including backup handling and post-termination procedures, requires legal and operational confirmation before commercial launch.
10. Rights and requests
Subject to applicable Indian law and the role of the relevant customer organization, individuals may request access, correction, updating or deletion of personal information, or raise concerns about its handling.
Where information was entered by a customer organization, we may direct the request to that organization or coordinate with it. Identity and authority may need to be verified before a request is completed.
11. Cross-border service providers
Some infrastructure or service providers may process or store information outside India. Any cross-border processing should be evaluated against applicable contractual, security and legal requirements.
This initial policy does not represent that every cross-border transfer mechanism or jurisdictional requirement has completed legal review.
12. Children
LeadFlow AI is a business service and is not directed to children. Users should not enter children’s personal information unless their organization has a lawful, necessary and appropriately protected business reason to do so.
If we learn that information was collected inappropriately from a child, we will review the circumstances and take reasonable steps in consultation with the relevant organization.
13. Policy updates
This policy may be updated as the product, providers, business practices or legal requirements change. Material updates should be communicated through an appropriate service or customer channel, and the effective date should be revised.
14. Contact
Privacy questions and requests may be sent to privacy@axivralabs.com. Please avoid including unnecessary sensitive information in an initial email.