Privacy Policy

1. Who operates BrokLeads (data controller)

BrokLeads is a product operated by Teknoesis, a sole proprietorship. Where we act as a controller (see below), Teknoesis is the entity responsible for your personal information.

• Operating entity: Teknoesis, sole proprietorship
• Registered address: House No. 1/A, Street No. 12, Ittehad Park, Chungi Amar Sadhu, Lahore Cantonment, Lahore, Pakistan
• NTN: 8934350-5
• Privacy contact: support@brokleads.com

2. Scope & our two roles

BrokLeads plays two different privacy roles depending on the data involved:

• As a controller — for information about our website visitors, the agency staff who hold BrokLeads accounts, and people who contact us or request a demo. We decide how and why this data is used, and this Policy governs it.
• As a processor— for the lead, contact, listing and sales records that our customers (agencies) capture and manage inside the Service (“Customer Data”). Here the agency is the controller; we process that data on their instructions under our Terms of Service and applicable data processing terms. If you are an end-customer of an agency, please direct privacy requests to that agency.

3. Information we collect

Information you provide

• Account & profile data — name, work email, phone, company/agency name, role and password when an account is created for you.
• Demo & enquiry data— the details you submit through our “Book a demo” or contact forms (name, work email, company, team size, phone and message).
• Customer Data you enter — leads, clients, contacts, listings, notes, tasks and sales records you add to the Service.
• Payment & billing data — billing contact and subscription details. Card payments are handled by our payment providers; we do not store full card numbers.

Information collected automatically

• Usage & device data — IP address, browser and device type, pages viewed, referring URLs and timestamps.
• Cookies & similar technologies — see our Cookie Policy. We use a small number of strictly-necessary cookies to keep you signed in and remember your active branch.

Information from connected services (Meta & WhatsApp)

We access data through the Meta and WhatsApp Business APIs only on behalf of a business client who has authorised the connection, and only to deliver the Service. Specifically:

• Facebook Page data — the Pages a client authorises us to manage, and their basic identifiers, so leads can be linked to the correct Page and campaign.
• Ad account & campaign data (permission ads_read) — ad accounts, campaigns, ad sets and lead-form metadata retrieved through the Facebook Marketing API, used to attribute and organise incoming leads.
• Lead Ads form submissions (permission leads_retrieval) — the responses a person submits in a Facebook or Instagram lead form (such as name, phone, email and the questions the agency configured), delivered to us in real time via the Meta leadgen webhook.
• WhatsApp Business messaging data— inbound and outbound messages, message status and the contact profile name for the client’s connected WhatsApp Business number.
• Website & other sources (e.g. TikTok, LinkedIn, on-site forms) — enquiries submitted by prospective buyers or renters.

We use Meta and WhatsApp data solely to provide the Service to the authorising client, in accordance with the Meta Platform Terms and Meta Developer Policies. We do not sell this data, do not use it for advertising or profiling of our own, and do not share it beyond what is described in this Policy.

4. How we use information

• Provide, operate, secure and improve the Service.
• Route and distribute leads to the right agents, and power WhatsApp messaging, reporting and sale approvals.
• Authenticate users and protect against fraud, abuse and unauthorised access.
• Respond to demo requests, enquiries and support tickets.
• Send service, security and (where permitted) product update communications.
• Meet legal, tax and accounting obligations.

5. Legal bases

Where data-protection law requires a legal basis, we rely on: performance of a contract (providing the Service and account); our legitimate interests (securing and improving the Service, responding to enquiries); consent (for non-essential marketing, which you may withdraw at any time); and compliance with legal obligations.

6. How we share information

We do not sell personal information. We share it only:

• With sub-processors — vendors who process data on our behalf under written confidentiality and data-protection obligations. We use the following categories of sub-processor:
  • Cloud hosting & infrastructure — running the application and storing data (Vercel, and our cloud database/storage provider).
  • Database & backups — managed PostgreSQL and encrypted backup storage.
  • Transactional email — sending account, security and notification emails.
  • Messaging platforms — Meta / WhatsApp Business Platform for the channels an agency connects.
  • Payment processing — billing and subscription payments (we never store full card numbers).
  • Bot-protection & security — e.g. Cloudflare Turnstile on public forms.
  • Product analytics & error monitoring — usage and reliability telemetry.
  A current list of the specific sub-processors in each category is available on request at support@brokleads.com.
• With connected platforms — Meta and the WhatsApp Business Platform, only as needed to deliver the integrations an agency has enabled.
• Within your agency — Customer Data is visible to authorised users of the same branch/agency according to their role and permissions.
• For legal reasons — to comply with law, enforce our terms, or protect the rights, safety and property of BrokLeads, our customers or others.
• In a business transfer — as part of a merger, acquisition or sale of assets, subject to this Policy.

7. International transfers

We and our providers may process data in countries other than yours. Where we transfer data across borders, we use appropriate safeguards (such as contractual protections) consistent with applicable law.

8. Data retention

We retain personal information only for the periods set out below, then delete or irreversibly anonymise it. Customer Data is held on the agency’s instructions and can be deleted earlier on request (see Data Deletion). Our standard maximum retention periods are:

Where we are legally required to keep certain records longer (for example tax or fraud-prevention), we retain only what the law requires and delete the rest.

9. Security

We apply technical and organisational measures to protect personal information, including encryption in transit, access controls, per-branch data isolation and least-privilege permissions. See our Security page for more detail. No method of transmission or storage is 100% secure, but we work continuously to protect your data.

10. Your rights & choices

Depending on your location, you may have rights to access, correct, delete, restrict or object to the processing of your personal information, and to data portability. To exercise a right regarding data for which we are the controller, email support@brokleads.com. If your data sits inside an agency’s account, please contact that agency, and we will assist them as their processor. You can unsubscribe from marketing emails at any time via the link in the email.

11. Data deletion

You can request deletion of your personal data at any time, including data we obtained through the Meta and WhatsApp Business integrations (Facebook Page, ad account/campaign, Lead Ads and WhatsApp messaging data). Full step-by-step instructions, timelines and the request address are on our Data Deletion page. In short: email support@brokleads.com with the subject “Data Deletion Request”, and we will delete or irreversibly anonymise your data within 30 days unless we are legally required to retain it.

12. Children

The Service is intended for businesses and is not directed to children under 18. We do not knowingly collect their personal information.

13. Changes to this Policy

We may update this Policy from time to time. Material changes will be posted here with a revised “Last updated” date and, where appropriate, additional notice.

14. Contact us

Questions about this Policy or your data can be sent to support@brokleads.com.

Teknoesis — House No. 1/A, Street No. 12, Ittehad Park, Chungi Amar Sadhu, Lahore Cantonment, Lahore, Pakistan
NTN: 8934350-5