leadloop

Privacy Policy

Last updated: 13 July 2026

This Privacy Policy explains how SKILL METAVERSE INDIA PRIVATE LIMITED(“we”, “us”, “our”), the company that operates Leadloop(the “Service”), collects, uses, shares, and protects information. Leadloop is a product of Infynyte, a brand of SKILL METAVERSE INDIA PRIVATE LIMITED. Leadloop is a tool that helps businesses and creators manage their own Instagram account — automating replies, organizing conversations, managing contacts, and scheduling posts. By using the Service you agree to this Policy.

1. Who we are

The data controller is SKILL METAVERSE INDIA PRIVATE LIMITED, a company incorporated in India. For any privacy question or request, contact us at connect@skillmetaverse.com.

2. Information we collect

Information you give us

  • Account details — your name, email address, and password (stored only as a secure hash).
  • Workspace and billing details — company name, GSTIN, and billing contact where you provide them.
  • Content you create in the Service — automation messages, captions, and media you upload to publish.

Instagram data (with your permission)

When you connect your Instagram Business or Creator account, you authorize us to access certain data from Meta on your behalf. Depending on the features you use, this includes:

  • Your Instagram account’s basic profile (username, name, profile picture, account type, follower count).
  • Comments and messages sent to your account, so we can trigger and send the replies you set up.
  • Basic profile details (username, name, profile picture) of people who interact with your account, so you can manage and follow up with them.
  • Your posts, Reels, and stories — to let you pick which ones to automate and to publish content you schedule.
  • A secure access token that lets us act on your account. It is encrypted at rest.

Information we collect automatically

  • Usage and device data — log data, IP address, browser type, and actions taken in the Service, used to keep it secure and reliable.

3. How we use information

  • To provide the Service — run your automations, show your inbox, organize contacts, and publish scheduled posts.
  • To operate, secure, and improve the Service and prevent abuse.
  • To communicate with you about your account, support requests, and important changes.
  • To process payments and issue invoices.
  • To meet legal and regulatory obligations.

We do not sell your data or the data of people who interact with your account.

4. Instagram / Meta Platform Data

Our use of information received from the Instagram Platform follows the Meta Platform Terms and Developer Policies. We only access what is needed to provide the features you enable, we only use it to provide those features to you, and we never sell it or use it for advertising or profiling. If you remove our app from your Instagram account, or ask Instagram to delete your data, we stop processing and delete the related data as described in Section 6.

5. How we share information

We share information only with service providers that help us run the Service, under contracts that protect your data. These include:

  • Supabase — database, authentication, and file storage.
  • Vercel — application hosting.
  • Upstash — background job and rate-limit infrastructure.
  • Razorpay — payment processing.
  • Meta Platforms — to send and receive messages and publish content on your behalf.

We may also disclose information if required by law or to protect our rights, users, or the public.

6. Data retention and deletion

We keep information for as long as your account is active or as needed to provide the Service. When you disconnect an Instagram account, delete a contact, delete your account, or when Meta sends us a deletion request, we soft-delete the related data immediately and permanently delete it within 30 days, except where we must retain limited records for legal or accounting reasons. You can request deletion at any time — see our Data Deletion page.

7. Security

We protect data with encryption in transit and at rest, encrypted storage of Instagram access tokens, database row-level security to isolate each workspace, and access controls. No system is perfectly secure, but we work to protect your information and to notify you of any material breach as required by law.

8. Your rights

Under India’s Digital Personal Data Protection Act, 2023 and other applicable laws, you may access, correct, or delete your personal data, withdraw consent, and export your data. To exercise any right, contact connect@skillmetaverse.com. We respond within the timelines required by law.

9. Cookies

We use only the cookies needed to keep you signed in and to keep the Service secure. We do not use advertising or cross-site tracking cookies.

10. International transfers

Our providers may process data outside India. Where they do, we rely on appropriate safeguards to protect your information.

11. Children

The Service is for businesses and is not directed to anyone under 18. We do not knowingly collect data from children.

12. Changes to this Policy

We may update this Policy from time to time. We will post the new version here and update the “Last updated” date, and notify you of material changes.

13. Contact us

SKILL METAVERSE INDIA PRIVATE LIMITED
Email: connect@skillmetaverse.com
Registered office: [Registered office address], India