LeadPilot — Privacy Policy
Effective Date: June 30, 2026
LeadPilot ("LeadPilot", "we", "us", "our") is a product of HaloSync Global, a registered business (sole proprietorship) in Ontario, Canada. This Privacy Policy explains what information we collect, how we use it, and your rights. By using LeadPilot you agree to this Policy.
Contact: HaloSync Global — contact@halosyncs.com — https://halosyncs.com
1. What LeadPilot is
LeadPilot is a customer-relationship and messaging assistant for real-estate professionals ("Agents"). Agents connect their own communication channels and business data so they can manage leads, listings, deals, and conversations — with optional AI assistance — in one place.
2. Information we collect
- Account information — name, email, phone, brokerage, and authentication data when an Agent signs up.
- Business/CRM data you add — leads, contacts, listings, deals, tasks, appointments, notes, commissions, and expenses you create in the app.
- Connected-platform data (only the channels you choose to connect):
- Meta Platforms (Facebook, Instagram, WhatsApp): when you connect a Facebook Page, Instagram professional account, or WhatsApp Business number, we access — via Meta's official APIs — the messages, message metadata, and access tokens necessary to display your conversations and send the replies you (or the AI you enable) author. We request only the permissions required for these features (e.g. pages_messaging, instagram_business_manage_messages, whatsapp_business_messaging, whatsapp_business_management).
- Email (Gmail / Microsoft / forwarding): message content and metadata for conversations you route into LeadPilot.
- SMS / voice (if you enable a phone-number provider such as Twilio): message and call metadata for the number you provision.
- Usage data — basic, privacy-respecting app and diagnostic information.
3. How we use information
- To provide and operate the LeadPilot features you enable.
- To send and receive messages on the channels you connect, and to generate AI-assisted replies, summaries, and drafts when you turn those features on.
- To provide support, maintain security, and comply with law.
We do not sell your data or your customers' data, and we do not use it for advertising.
4. Platform data — specific commitments (Meta, Google, WhatsApp)
Data obtained through Meta's APIs (Facebook, Instagram, WhatsApp) is used solely to provide the messaging features you enable within LeadPilot. We comply with the Meta Platform Terms and Developer Policies; we do not transfer Meta data to data brokers and do not use it for advertising; and we retain it only as long as needed to provide the service. Use of Google and Microsoft email data complies with their respective API Services User Data policies, and WhatsApp messaging complies with the WhatsApp Business Messaging Policy.
5. Service providers (processors)
- Supabase — secure database and authentication hosting.
- Meta Platforms — Facebook / Instagram / WhatsApp messaging APIs.
- Google / Microsoft — email integration (if connected).
- Twilio — SMS / voice (only if you enable it).
- Anthropic (Claude) — AI processing for replies, summaries, and drafts (only for features you enable; not used to train third-party models).
- Stripe — subscription billing (handled on the web).
6. AI processing
When you use AI features, relevant message or record content is sent to our AI provider to generate a response, summary, or draft. You stay in control: you can disable AI features and, depending on settings, review AI output before it is sent.
7. Data retention
We retain your data while your account is active or as needed to provide the service, then delete or anonymize it within a reasonable period unless a longer period is required by law.
8. Your rights & data deletion
Consistent with Canada's PIPEDA and other applicable laws, you may access, correct, export, or delete your information. You can delete your account in-app (Settings → Account), email contact@halosyncs.com, or follow our Data Deletion instructions. We action verified requests within 30 days; deleting your account removes your CRM data and revokes connected-platform tokens.
9. Security
We use industry-standard measures including encryption in transit, Row-Level Security on our database, and least-privilege access.
10. Children
LeadPilot is a business tool not intended for anyone under 18, and we do not knowingly collect data from children.
11. International transfers
We are based in Canada and use service providers that may process data in other countries (e.g. the United States) under appropriate safeguards.
12. Changes
We may update this Policy; we will post the new date above and, for material changes, notify you in-app or by email.
13. Contact
HaloSync Global — contact@halosyncs.com — https://halosyncs.com
This document is a good-faith, plain-language policy. It is not legal advice; please have a lawyer review it before launch, especially for PIPEDA/CASL, Meta, Apple, and TCPA messaging-consent specifics.