Last updated: March 12, 2025 | Effective: March 12, 2025
Summary: CueLab CRM is operated by Aidify Learning and Mobility Pvt. Ltd. (“we,” “us,” “our”). We collect only the data necessary to provide our lead management service. We do not sell your data to third parties. Call logs and contacts are processed locally on your device and are not uploaded to our servers. You have full control over your data at all times.
Organization data: Organization name, address, employee count, website, and team member details including role and hierarchy.
Lead data: Contact details of leads captured from your connected lead sources (Facebook Ads, Google Ads, IndiaMART, LinkedIn, 99acres, Housing.com, MagicBricks, TradeIndia, JustDial, Sulekha, Typeform, and website forms).
User-generated content: Notes, tags, task descriptions, follow-up reminders, and AI-generated message drafts created by you within the app.
WhatsApp/Telegram/SMS keyword configurations: The trigger keywords and name patterns you define for notification-based lead capture.
1.2 Information Collected Automatically
Device information: Device model, operating system version, unique device identifiers, and app version.
Usage analytics: App interaction data, feature usage patterns, session duration, and crash reports (via Google Analytics for Firebase / Crashlytics).
Lead source metadata: Which platform generated a lead, timestamp of lead capture, and form field labels.
1.3 Information Processed Locally (NOT Uploaded)
Call logs: Accessed locally on your device only to match incoming/outgoing phone numbers against your stored leads for the Caller ID feature. Call log data is not uploaded to our servers unless you manually add a note or annotation to a specific call interaction.
Contacts: Accessed locally on your device to enable lead contact syncing within your team. Raw contact data is not bulk-uploaded to our servers.
2. Android Permissions & Their Purpose
CueLab requests the following Android permissions. Each permission serves a specific feature, and we do not use any permission for purposes beyond what is described below.
Permission
Purpose
Data Handling
READ_CALL_LOG
Matches incoming and outgoing phone numbers against stored leads to trigger the Smart Caller ID overlay.
Processed locally on device. Not uploaded to servers unless a note is added by the user.
SYSTEM_ALERT_WINDOW (Display Over Other Apps)
Shows the Caller ID pop-up overlay on incoming/outgoing calls, displaying lead name, source, and notes.
No data collection. Display-only permission.
READ_CONTACTS
Enables matching and syncing lead contacts within your team organization.
Processed locally. Contact data is not bulk-uploaded.
Reads incoming notifications from WhatsApp, WhatsApp Business, Telegram, and SMS apps to capture leads based on user-defined keyword matching. Only activates for messages from unsaved numbers matching specific keywords.
Requires explicit user opt-in. Only notification sender and message preview text are read. Full message content is not stored. Only the matched lead data (phone number and user-defined name pattern) is saved.
INTERNET
Required for syncing lead data, receiving push notifications, and communicating with CueLab servers.
All data transmitted via encrypted connections (TLS/SSL).
RECEIVE_BOOT_COMPLETED
Ensures CueLab services restart after device reboot so lead notifications and caller ID remain active.
No data collection.
3. How We Use Your Information
We use the information we collect for the following purposes:
Providing our service: Delivering instant lead notifications, enabling one-touch contact, displaying caller ID overlays, and facilitating team lead distribution.
Account management: Authenticating users, managing subscriptions, and facilitating organization and team structures.
AI features: Powering AI-generated message drafts and follow-up templates based on lead context.
Improving CueLab: Analyzing usage patterns and crash reports to fix bugs, improve performance, and develop new features.
Communications from us: Our team may contact you regarding CueLab services, product updates, and other products offered by Aidify Learning and Mobility Pvt. Ltd. You may opt out of non-essential communications at any time.
Advertising measurement: Measuring the effectiveness of our own advertising campaigns (not advertising to your leads or selling your data to advertisers).
4. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), United Kingdom, and other jurisdictions where GDPR or equivalent legislation applies, we process your data under the following legal bases:
Contract performance: Processing necessary to provide you with the CueLab service you signed up for (account data, lead data, organization data).
Legitimate interest: Analytics and service improvement, fraud prevention, and security monitoring.
Consent: Notification access for WhatsApp/Telegram/SMS keyword capture (explicit opt-in), and marketing communications. You may withdraw consent at any time.
Legal obligation: Where required to comply with applicable law.
5. Data Storage & Security
Storage location: Your data is stored on private cloud infrastructure located in India, with distributed storage via Wasabi and Cloudflare for reliability and performance.
Encryption: Lead data is stored encrypted at rest. All data in transit is protected using TLS/SSL encryption.
Access controls: Access to user data is restricted to authorized personnel who require it for service operation and support.
Local data: Call logs and contacts are processed on your device and are not transmitted to our servers (except for user-created annotations).
While we implement industry-standard security measures, no system is 100% secure. We encourage you to use strong passwords and keep your device secure.
6. Data Sharing & Third Parties
We do NOT sell, rent, or share your personal data or lead data with any third party for their marketing or advertising purposes.
We may share limited data in the following circumstances:
Team members: Within your CueLab organization, lead data and activity is shared among authorized team members as configured by your organization’s admin. This is a core feature of the product.
Service providers: Infrastructure providers (cloud hosting, CDN) who process data on our behalf under strict data processing agreements.
Legal requirements: When required by law, court order, or governmental authority.
Business transfer: In the event of a merger, acquisition, or sale of assets, user data may be transferred. You will be notified of any such change.
7. Third-Party SDKs
CueLab integrates the following third-party SDKs. Each has its own privacy policy governing data collection:
Google Analytics for Firebase / Crashlytics: Collects anonymized usage analytics, crash reports, and device diagnostics. Google Firebase Privacy.
Meta (Facebook) SDK: Used for measuring the effectiveness of our own CueLab advertising campaigns on Meta platforms. Does not grant Meta access to your lead data. Meta Privacy Policy.
Google Ads SDK: Used for measuring the effectiveness of our own CueLab advertising campaigns on Google. Google Privacy Policy.
These SDKs may collect device identifiers, IP addresses, and usage data as described in their respective privacy policies. We do not control their data practices beyond our integration settings.
8. Data Retention
Account data: Retained while your account is active and for up to 90 days after account deletion to allow for recovery.
Lead data: Retained while your account/organization is active. Deleted upon account or organization deletion request.
Analytics data: Retained in anonymized, aggregated form indefinitely for service improvement.
Locally processed data: Call logs and contacts are never stored on our servers and remain solely on your device.
9. Your Rights
Depending on your jurisdiction, you may have the following rights:
Access: Request a copy of the personal data we hold about you.
Rectification: Request correction of inaccurate data.
Erasure (Right to be Forgotten): Request deletion of your personal data. We will comply within 30 days, subject to legal retention obligations.
Data Portability: Request your data in a structured, commonly used, machine-readable format.
Restriction of Processing: Request that we limit how we use your data.
Objection: Object to processing based on legitimate interest.
Withdraw Consent: Where processing is based on consent (e.g., notification access), you may withdraw consent at any time by disabling the feature in app settings.
To exercise any of these rights, contact us at legal@cuelab.app. We will respond within 30 days.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.
10. Children’s Privacy
CueLab is designed for business use and is not directed at children under the age of 16 (or the applicable age of consent in your jurisdiction). We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly. If you believe a child has provided us with personal data, please contact us at legal@cuelab.app.
11. International Data Transfers
Our primary data storage is in India. If you access CueLab from outside India, your data will be transferred to and processed in India. By using CueLab, you consent to this transfer. We take steps to ensure your data receives adequate protection in accordance with applicable data protection laws.
For users in the EEA/UK, transfers are conducted in compliance with Chapter V of the GDPR, relying on Standard Contractual Clauses (SCCs) where applicable.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by in-app notification or email. The “Last updated” date at the top of this page will be revised accordingly. Continued use of CueLab after changes constitutes acceptance of the revised policy.
13. Contact Us
If you have any questions about this Privacy Policy, your data, or your rights, please contact us: