1. Overview
This Privacy Policy explains how WebCruxs (“WebCruxs,” “we,” “us,” or “our”) handles information through WebCruxs Lead Command, a private business lead discovery, customer relationship management, communications, and follow-up platform (the “Application”). The Application is intended for authorized WebCruxs administrators and business operations.
Questions or privacy requests may be sent to contact@webcruxs.com.
2. Information we process
Administrator and account information
We process the administrator’s name, username, email address, telephone number, timezone, notification preferences, and authentication information.
Lead and business information
The Application may store business names, categories, addresses, public website and social profile URLs, publicly available professional contact information, lead source, qualification status, notes, communications, and follow-up history. Administrators are responsible for using this information in accordance with applicable privacy, marketing, telemarketing, and anti-spam laws.
Integration and technical information
We process API credentials, OAuth tokens, service usage information, provider responses, connection-health results, timestamps, job logs, and security records necessary to operate and troubleshoot connected services. Secrets are encrypted at rest and are not displayed after saving.
3. Google user data
WebCruxs Lead Command’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Data accessed
The Application requests the narrow https://www.googleapis.com/auth/calendar.events scope. This allows it to create and manage events on the connected Google Calendar. We receive OAuth access and refresh tokens, token-expiration information, Google Calendar event identifiers, and event links. Event content may include a follow-up subject, business name, schedule, notes, lead source, and source URL supplied by the administrator.
How Google data is used
Google Calendar access is used only to create and maintain follow-up events requested by the administrator or generated by an administrator-enabled automatic synchronization preference. We do not use Google user data for advertising, audience profiling, sale, data brokerage, credit decisions, or training general-purpose artificial intelligence models.
Storage and sharing
OAuth tokens are encrypted in the Application’s database. Calendar event identifiers and synchronization status are stored to maintain the relationship between a follow-up and its calendar event. Google user data is not shared with independent third parties except infrastructure providers acting on our behalf when necessary to operate the Application, comply with law, protect security, or follow the administrator’s explicit direction.
Control and revocation
An administrator can disconnect Google Calendar from the API & Integrations page. The Application requests token revocation and removes stored access tokens, refresh tokens, connection timestamps, and associated account-connection data. Access may also be revoked from the Google Account permissions page.
4. Service providers and integrations
Depending on configuration, the Application may communicate with Hostinger for hosting, Google Calendar, Apify, ContactOut, Zoom, OpenAI, Invoice Generator, and administrator-selected SMTP/IMAP email providers. Each provider processes information under its own terms and privacy policy. We configure integrations to send only information reasonably required for the requested function. Invoice Generator receives the issuer, client, and line-item details needed to render a requested PDF or UBL file; WebCruxs stores the resulting document privately in the administrator's account.
5. Retention and deletion
We retain administrator, lead, activity, and integration information while it is needed for business operations, security, legal compliance, and service continuity. Integration credentials are retained until replaced, disconnected, or deleted. Lead and communication records may be archived or deleted by an authorized administrator. Privacy and deletion requests can be sent to contact@webcruxs.com.
6. Security
We use HTTPS, access controls, encrypted credential fields, secure session cookies, database protections, provider-spending guardrails, and operational logging. No system can guarantee absolute security; administrators should use a unique password, protect connected accounts with multi-factor authentication, and promptly revoke credentials suspected of compromise.
7. Your choices and legal rights
Depending on applicable law, individuals may request access, correction, deletion, restriction, or information about personal data associated with them. We assess verified requests against legal obligations and legitimate business needs. Recipients may opt out of marketing communications using the method provided in the message or by contacting us.
8. International processing and policy changes
Information may be processed in countries where our hosting and integration providers operate. We may update this policy as the Application, providers, or legal requirements change. Material changes will be reflected by the “Last updated” date and, where appropriate, an in-product notice.
9. Contact
WebCruxs
Email: contact@webcruxs.com
Website: https://webcruxs.com/