← Back to home

    Privacy Policy

    Effective Date: 22 June 2026
    Product: AutoLead
    Company / Provider: ewaystech - FZCO
    Address: IFZA Building, Dubai Silicon Oasis, UAE
    Website: https://www.auto-lead.ai/
    Contact: mk@ewaystech.com

    This Privacy Policy explains how AutoLead collects, uses, stores, shares, and protects information when customers, users, and visitors use our website, software platform, AI features, communication tools, integrations, APIs, and related services.

    AutoLead is a customer communication, lead management, workflow automation, and AI-assisted sales productivity platform provided by ewaystech - FZCO, located at IFZA Building, Dubai Silicon Oasis, UAE.

    Depending on the features enabled by a customer, AutoLead may process CRM data, communication data, call data, WhatsApp data, Google Workspace data, documents, contact information, and AI-generated outputs.

    By using AutoLead, you agree to the practices described in this Privacy Policy.

    1. Information We Collect

    AutoLead may collect and process different types of information depending on how the platform is used and which features or integrations are enabled.

    1.1 Account and User Information

    We may collect:

    • name;
    • business name;
    • email address;
    • phone number;
    • job title;
    • login credentials or authentication identifiers;
    • role and permission details;
    • billing or subscription information;
    • organization and team details.

    This information is used to create accounts, authenticate users, manage access, provide support, and operate the platform.

    1.2 Customer, Lead, and CRM Data

    AutoLead may process customer relationship and lead management data, including:

    • lead names;
    • phone numbers;
    • email addresses;
    • company names;
    • lead source;
    • lead status;
    • notes;
    • follow-up history;
    • assigned users;
    • sales pipeline information;
    • customer interaction records;
    • task and reminder data;
    • uploaded files or documents linked to leads or customers.

    This data is used to help customers manage leads, track communication, automate workflows, and improve sales or service operations.

    1.3 Communication Data

    Depending on enabled features, AutoLead may process communication data from different channels, including:

    • emails;
    • WhatsApp messages;
    • SMS messages;
    • call logs;
    • call recordings;
    • transcripts;
    • meeting notes;
    • customer support messages;
    • internal team notes;
    • attachments and media files.

    This data is used for communication management, workflow automation, customer follow-up, lead tracking, CRM updates, and AI-assisted productivity features.

    1.4 Device, Usage, and Technical Data

    We may collect technical and usage information such as:

    • IP address;
    • browser type;
    • device type;
    • operating system;
    • login time;
    • usage logs;
    • feature usage;
    • error logs;
    • session information;
    • API request logs;
    • security and audit logs.

    This data is used to secure the platform, monitor performance, troubleshoot issues, prevent abuse, and improve the service.

    2. Google Workspace Data Processing

    When a customer enables Google Workspace integrations, AutoLead may access and process only the Google data required to provide the enabled product functionality. The exact data accessed depends on the permissions granted by the customer and the features enabled.

    2.1 Gmail Data

    Where Gmail integration is enabled, AutoLead may process Gmail-related data such as:

    • email subject lines;
    • sender details;
    • recipient details;
    • message content;
    • email threads;
    • timestamps;
    • labels;
    • attachments, where attachment access is specifically enabled.

    This data is used to help users manage customer communication, summarize conversations, identify lead status, create follow-up tasks, update CRM records, and support workflow automation.

    2.2 Google Calendar Data

    Where Google Calendar integration is enabled, AutoLead may process Calendar data such as:

    • event titles;
    • meeting times;
    • attendee details;
    • event descriptions;
    • meeting links;
    • event locations;
    • calendar availability.

    This data is used for scheduling, meeting reminders, follow-up workflows, lead activity tracking, and sales or service coordination.

    2.3 Google Drive Data

    Where Google Drive integration is enabled, AutoLead may process Drive-related data such as:

    • selected files;
    • file names;
    • file metadata;
    • document content;
    • folder references;
    • file permissions, where required for the enabled workflow.

    This data is used for document organization, CRM attachment management, proposal or document reference, AI-assisted summarization, and workflow automation.

    2.4 Google Contacts Data

    Where Google Contacts integration is enabled, AutoLead may process contact data such as:

    • contact names;
    • email addresses;
    • phone numbers;
    • company details;
    • job titles;
    • contact metadata made available through Google Contacts.

    This data is used for customer relationship management, communication workflows, lead assignment, contact enrichment, and sales or service follow-up.

    3. Use of Google API Data

    AutoLead’s use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including the Limited Use requirements where applicable.

    AutoLead uses Google API data only to provide and improve user-facing features that are clearly disclosed to the user, including:

    • CRM updates;
    • email assistance;
    • calendar assistance;
    • contact management;
    • document workflows;
    • sales automation;
    • communication tracking;
    • AI-assisted productivity features;
    • task creation and follow-up management.

    AutoLead does not:

    • sell Google API data;
    • use Google API data for advertising;
    • transfer Google API data except as necessary to provide the enabled service, comply with law, protect security, or as otherwise permitted by the user;
    • allow humans to read Google API data unless required for security, support, legal compliance, or where the customer has provided permission;
    • use Google API data to train generalized AI or machine learning models.

    4. AI Data Processing

    AutoLead includes AI-powered features to assist users with customer communication, lead management, sales productivity, and workflow automation.

    Where enabled by the customer, AutoLead may process the following types of data through AI systems:

    • call recordings;
    • call transcripts;
    • voice-to-text outputs;
    • WhatsApp conversations;
    • email conversations;
    • CRM notes;
    • customer interaction history;
    • lead activity data;
    • meeting notes;
    • uploaded documents;
    • sales and support conversations.

    AutoLead may use this data for:

    • conversation summarization;
    • call transcription;
    • sentiment analysis;
    • lead scoring;
    • next-best-action recommendations;
    • follow-up suggestions;
    • workflow recommendations;
    • task creation;
    • CRM record updates;
    • sales assistance;
    • customer communication support.

    AI processing is performed only to provide functionality to the customer and its authorized users.

    Customer data, Google Workspace data, WhatsApp data, call data, CRM data, uploaded documents, and business communication data are not used to train generalized AI models.

    5. Voice and Call Data

    Where voice, telephony, call tracking, call recording, or voice AI features are enabled, AutoLead may process voice and call-related data, including:

    • call recordings;
    • call metadata;
    • caller and recipient phone numbers;
    • call duration;
    • call timestamps;
    • call transcripts;
    • speech-to-text outputs;
    • conversation summaries;
    • sentiment or intent signals;
    • follow-up recommendations.

    This data is used for:

    • call review;
    • sales coaching;
    • customer follow-up;
    • lead qualification;
    • CRM updates;
    • quality monitoring;
    • workflow automation;
    • AI-assisted summarization and recommendations.

    Customers are responsible for ensuring that call recording, consent, disclosure, and notification requirements are complied with in the regions where they operate.

    6. WhatsApp Data Processing

    Where WhatsApp integrations are enabled, AutoLead may process WhatsApp-related data, including:

    • WhatsApp messages;
    • sender and recipient details;
    • phone numbers;
    • timestamps;
    • message metadata;
    • attachments;
    • media files;
    • delivery status;
    • read status;
    • conversation history;
    • lead or customer communication context.

    This data is used for:

    • communication management;
    • customer support;
    • lead tracking;
    • workflow automation;
    • CRM updates;
    • follow-up reminders;
    • AI-assisted summarization;
    • response support;
    • sales and service coordination.

    AutoLead processes WhatsApp data only for the customer’s enabled workflows. AutoLead does not sell WhatsApp conversation data or use it for advertising.

    7. How We Use Information

    AutoLead may use collected and processed information to:

    • provide, operate, and maintain the platform;
    • create and manage user accounts;
    • authenticate users;
    • manage leads, customers, and communication workflows;
    • enable Google Workspace, WhatsApp, voice, telephony, CRM, and other integrations;
    • provide AI-assisted features;
    • summarize conversations;
    • generate recommendations;
    • automate tasks and follow-ups;
    • improve sales and service productivity;
    • provide customer support;
    • monitor platform performance;
    • troubleshoot errors;
    • prevent fraud, abuse, or unauthorized access;
    • maintain security and audit logs;
    • comply with legal and contractual obligations;
    • improve and develop the platform.

    8. Data Sharing and Disclosure

    AutoLead does not sell personal data, customer data, Google Workspace data, WhatsApp data, call data, or CRM data.

    We may share information only in the following circumstances:

    8.1 With Authorized Users

    Data may be shared with users within the customer’s organization according to roles, permissions, and access controls configured by the customer.

    8.2 With Service Providers and Subprocessors

    We may share data with trusted service providers that help us host, operate, secure, monitor, support, and improve AutoLead.

    These service providers are required to process data only for authorized purposes and apply appropriate confidentiality, security, and data protection safeguards.

    8.3 For Legal Compliance

    We may disclose information where required to comply with applicable laws, legal processes, regulatory requirements, court orders, or government requests.

    8.4 For Security and Protection

    We may disclose information where necessary to detect, prevent, or address fraud, security incidents, technical issues, misuse of the platform, or threats to rights, property, or safety.

    8.5 Business Transfers

    If AutoLead is involved in a merger, acquisition, restructuring, financing, or sale of assets, information may be transferred as part of that transaction, subject to appropriate confidentiality and data protection safeguards.

    9. Subprocessors and Service Providers

    AutoLead may use trusted subprocessors and service providers to operate, secure, host, monitor, and improve the service.

    Depending on the customer’s enabled features and deployment configuration, subprocessors may include categories such as:

    • cloud infrastructure providers;
    • database and storage providers;
    • AI processing providers;
    • communication providers;
    • WhatsApp Business Platform providers;
    • email delivery providers;
    • telephony providers;
    • monitoring and logging providers;
    • payment processors;
    • customer support tools;
    • analytics and product improvement tools.

    Depending on actual implementation and customer configuration, these may include providers such as:

    • Microsoft Azure;
    • Google Cloud;
    • OpenAI;
    • Azure OpenAI;
    • Google AI or Gemini;
    • Meta WhatsApp Business Platform;
    • Twilio;
    • SendGrid;
    • Stripe;
    • similar infrastructure, AI, communication, payment, analytics, monitoring, or support providers.

    AutoLead requires subprocessors and service providers to process data only for authorized purposes and to apply appropriate confidentiality, security, and data protection safeguards.

    10. Data Retention

    AutoLead retains data only for as long as necessary to provide the service, meet legal or contractual obligations, resolve disputes, maintain security, and support business operations.

    Indicative retention periods are:

    | Data Type | Retention Period | |---|---| | Account and profile data | Active account period plus up to 12 months | | CRM records and customer data | Active customer account period, unless deleted earlier by the customer | | Gmail, Calendar, Drive, and Contacts data | For as long as the integration is active or until deleted or revoked by the customer | | OAuth tokens | Until revoked, expired, replaced, or the integration is disconnected | | WhatsApp messages and metadata | As configured by the customer or for the active account period | | Call recordings and transcripts | As configured by the customer, or until deleted by the customer | | AI-generated summaries and workflow outputs | Active account period or until deleted by the customer | | Audit logs and security logs | 12 to 24 months | | Support tickets | Up to 24 months | | Backups | Up to 90 days, after which they are overwritten or deleted according to backup cycles |

    Actual retention may vary depending on customer configuration, legal requirements, security requirements, contractual obligations, and backup cycles.

    11. Data Deletion

    Customers and authorized users may request deletion of their personal data, customer data, or disconnection of third-party integrations by contacting:

    mk@ewaystech.com

    Upon receiving a valid deletion request, AutoLead will take reasonable steps to delete or anonymize the requested data within 30 days, unless retention is required for legal, contractual, security, fraud-prevention, backup, or compliance reasons.

    Users may also revoke Google OAuth access directly from their Google Account permissions page. Once access is revoked, AutoLead will no longer be able to access new Google data through that integration.

    Some deleted data may remain temporarily in encrypted backups for up to 90 days before being overwritten or permanently deleted through normal backup cycles.

    12. Security Measures

    AutoLead uses reasonable technical and organizational safeguards to protect customer data, including:

    • encryption in transit;
    • encryption at rest where supported;
    • role-based access control;
    • restricted administrative access;
    • audit trail logging;
    • customer data segregation;
    • secure authentication practices;
    • OAuth-based authorization for Google integrations;
    • vulnerability monitoring and remediation;
    • backup and recovery processes;
    • production access controls;
    • least-privilege access principles;
    • secure API access controls;
    • environment-based access separation;
    • monitoring for unauthorized access or suspicious activity.

    No system is completely secure. However, AutoLead takes commercially reasonable steps to protect data against unauthorized access, misuse, alteration, disclosure, loss, or destruction.

    13. Customer Responsibilities

    Customers are responsible for:

    • ensuring they have the right to upload, process, and manage customer, lead, employee, call, WhatsApp, email, and CRM data through AutoLead;
    • configuring user permissions appropriately;
    • obtaining any legally required consents for call recording, WhatsApp messaging, email communication, and AI-assisted processing;
    • ensuring their use of AutoLead complies with applicable laws and industry regulations;
    • reviewing and managing third-party integrations connected to their AutoLead account;
    • deleting or exporting data when required by their internal policies.

    14. International Data Transfers

    Depending on the customer’s location, selected deployment, enabled integrations, and service providers used, information may be processed or stored in countries other than the country where the customer or user is located.

    Where required by applicable law, AutoLead will use appropriate safeguards for international data transfers.

    15. Legal Bases for Processing

    Where applicable under data protection laws such as GDPR, AutoLead processes personal data based on one or more of the following legal bases:

    • performance of a contract;
    • legitimate business interests;
    • user or customer consent;
    • compliance with legal obligations;
    • protection of rights, security, and fraud prevention.

    16. User Rights

    Depending on applicable law, users may have rights to:

    • access personal data;
    • correct inaccurate data;
    • request deletion of data;
    • restrict or object to processing;
    • request data portability;
    • withdraw consent where processing is based on consent;
    • lodge a complaint with a data protection authority.

    Requests can be sent to:

    mk@ewaystech.com

    We may need to verify the requester’s identity before processing certain requests.

    17. Data Processing Addendum and Enterprise Agreements

    For certain enterprise customers, OEMs, distributors, or regulated organizations, AutoLead may enter into a separate Data Processing Addendum, enterprise agreement, order form, security addendum, service-level agreement, or procurement document.

    If a separate written agreement is signed between ewaystech - FZCO and the customer, that agreement may include additional terms regarding:

    • data processing roles and responsibilities;
    • data protection obligations;
    • subprocessors;
    • audit rights;
    • security controls;
    • data residency or hosting requirements;
    • service levels;
    • support commitments;
    • incident notification;
    • data deletion and return;
    • confidentiality;
    • liability and indemnity.

    In case of conflict between this Privacy Policy and a signed enterprise agreement or Data Processing Addendum, the signed agreement will apply to the extent of that conflict.

    18. Customer Content Warranty and Lawful Data Use

    Customers are responsible for ensuring that they have all necessary rights, permissions, notices, consents, and legal bases to upload, connect, transmit, disclose, or otherwise process Customer Data through AutoLead.

    This includes data from leads, customers, employees, dealership staff, distributors, OEM personnel, WhatsApp users, callers, email recipients, Google Workspace users, and other individuals whose information may be processed through the Platform.

    Customers represent and warrant that:

    • Customer Data has been collected and provided to AutoLead lawfully;
    • required notices and consents have been obtained where applicable;
    • Customer Data does not infringe third-party rights;
    • Customer Data does not violate applicable privacy, data protection, telecommunications, marketing, employment, call recording, or platform policies;
    • Customer use of Google Workspace, WhatsApp, voice, call recording, telephony, AI, and CRM features complies with applicable laws and third-party platform terms.

    AutoLead is not responsible for Customer Data that is collected, uploaded, connected, or processed unlawfully by or on behalf of the customer.

    19. Service Levels, Support, and Privacy Commitments

    This Privacy Policy describes AutoLead’s data handling, privacy, security, retention, and deletion practices.

    Service availability, uptime commitments, support timelines, response times, maintenance windows, credits, remedies, or other service-level obligations are not created by this Privacy Policy unless expressly stated in a separate signed agreement.

    Any SLA, uptime commitment, support commitment, enterprise support plan, implementation scope, custom development scope, or managed service obligation must be agreed separately in writing.

    Nothing in this Privacy Policy should be interpreted as a guarantee of uninterrupted service, permanent availability of any integration, fixed response time, or specific support level.

    20. Force Majeure

    AutoLead will not be responsible for delay, failure, data processing interruption, service unavailability, or inability to perform obligations caused by events beyond our reasonable control.

    Such events may include:

    • natural disasters;
    • war, terrorism, civil unrest, or government action;
    • internet, telecom, cloud, hosting, or utility failures;
    • cyberattacks or security incidents not caused by our gross negligence;
    • third-party platform outages or API changes;
    • changes to Google, Meta, WhatsApp, telecom, AI, payment, or cloud provider services;
    • regulatory restrictions;
    • labor disputes;
    • pandemics or public health emergencies;
    • force majeure events recognized under applicable law.

    We will make reasonable efforts to restore affected services where practical, but such events may affect availability, integrations, processing, support, or performance.

    21. Governing Law and Jurisdiction

    This Privacy Policy and related privacy matters are governed by the laws applicable in the United Arab Emirates, subject to any mandatory data protection laws that may apply based on the location of the customer, user, or data subject.

    Subject to mandatory legal rights and applicable data protection laws, disputes relating to this Privacy Policy, privacy practices, or data handling by ewaystech - FZCO shall be subject to the competent courts and authorities having jurisdiction over ewaystech - FZCO in the United Arab Emirates.

    Where applicable law grants individuals the right to contact or complain to a local data protection authority, nothing in this Privacy Policy limits those statutory rights.

    22. Children’s Privacy

    AutoLead is intended for business and professional use. It is not intended for use by children. We do not knowingly collect personal data from children.

    23. Changes to This Privacy Policy

    We may update this Privacy Policy from time to time to reflect changes in our product, integrations, legal requirements, or business practices.

    When we make material changes, we may notify customers through the platform, email, website notice, or other appropriate means.

    The updated Privacy Policy will be effective from the date stated at the top of the policy.

    24. Contact Us

    For privacy, data access, correction, deletion, integration, or security-related requests, contact:

    ewaystech - FZCO
    IFZA Building, Dubai Silicon Oasis, UAE
    Email: mk@ewaystech.com