Privacy Policy
Last updated: 20 September 2026
In short
Zinlead holds two different kinds of information, and they are not treated the same way.
- Your account details — your name, your email, and anything else you give us to run your subscription. We are responsible for these.
- Your workspace's contents — the leads, contact numbers, notes and activities you record. These belong to you. We hold them on your behalf so that the service works, and we do nothing else with them.
We run no analytics and no advertising trackers. The only third-party script we load is Paddle's payment window, and only on the billing section for workspace owners who pay by card. We do not sell or rent any data to anyone, and we do not use your data to train any model.
Who we are
Zinlead is operated by Shakir Aqeel, a sole proprietor based in Lahore, Pakistan.
Contact for any privacy question or request: privacy@zinlead.com
What we collect
When you sign up: your full name, your email address, and a password (stored only as a hash — we never see it). You may optionally add a WhatsApp number to your profile; it is visible only to you and is never shown to your teammates.
When you use the service: the leads and related records you create — names, phone numbers, email addresses, notes, stages, activities and follow-ups. Also your workspace's settings, and records of significant actions taken in the workspace so that owners can see who did what.
Automatically: standard server logs kept by our hosting providers, and — only if you turn on notifications — a browser push subscription so that we can send reminders to your device.
When you pay: a record of the payment, its amount, currency and period. We never see or store card numbers. Card payments are handled by our payment provider, who acts as merchant of record.
What we do not collect
- No analytics or product-usage tracking.
- No advertising or marketing trackers, and no third-party scripts of that kind.
- No location data beyond what a server necessarily sees.
- No card or bank details.
Cookies
Zinlead itself sets exactly two cookies, and neither is used for tracking:
| Cookie | What it does |
|---|---|
| The authentication cookie | Keeps you signed in. Without it the app cannot work. |
zl_billing_dismiss | Remembers, for one day and on one device, that you dismissed a billing notice. |
When you open the payment window, Paddle sets its own cookies to run and protect the checkout. They are Paddle's, set only during checkout, and governed by Paddle's privacy policy.
There is no cookie banner because there is nothing to consent to beyond what is strictly necessary.
Where your data is stored
| What | Provider | Where |
|---|---|---|
| Database, accounts, files | Supabase | Mumbai, India (ap-south-1) |
| The application itself | Vercel | Mumbai, India (bom1) |
| Transactional email | Resend | Processes the messages we send you |
| Card payments | Our payment provider | Handles the transaction as merchant of record |
Paddle.com Market Ltd — processes card payments for USD plans as our merchant of record. Your card details go to Paddle and never reach Zinlead.
Each is a processor acting on our instructions. We chose Mumbai because it is the closest region to our customers, which makes the app faster for them.
Who can see what
- Inside a workspace, the owner can see everything. Agents see what the owner's access settings allow, which for some settings is only the leads assigned to them.
- A user's own WhatsApp number is visible only to that user.
- We do not read your workspace's contents. We access them only when you ask us to — for example to investigate a fault you have reported — or where the law requires it.
- Nobody outside your workspace, including other customers, can reach your data.
How long we keep it
We keep your data for as long as your workspace exists. When a subscription lapses the workspace becomes read-only and then suspended, but nothing is deleted — paying restores access.
If you ask us to delete your workspace, we delete it and its contents. That cannot be undone. Backups roll off on their own cycle after that.
Your rights
Email privacy@zinlead.com and we will:
- tell you what we hold about you;
- correct anything that is wrong;
- export your workspace's data to you;
- delete your account and workspace.
We will respond within 30 days.
If you are an agent in someone else's workspace, the leads in it belong to that workspace's owner, not to you — so requests about that data go to the owner, and we will help them act on it.
Children
Zinlead is a business tool and is not intended for anyone under 18. We do not knowingly collect data from children.
Changes
If we change this policy in a way that materially affects you, we will email workspace owners before it takes effect.
Contact
privacy@zinlead.com