Privacy Policy
The short version
- We collect only what we need to run our website, CodeBuzz CRM and our Meta lead integration.
- Leads from Facebook and Instagram Lead Ads are used only to deliver them into the CRM account of the business that connected its Page. We never sell them, use them for advertising, or share them with anyone else.
- Access tokens and lead data are encrypted, and raw lead data is deleted from our integration service within 30 days.
- You can ask us to delete your data at any time by emailing info@codebuzz.ai — see Data deletion.
1. Who we are
CodeBuzz.ai (“CodeBuzz”, “we”, “us”) is a technology company based in India that provides software development and AI-powered IT services. We also build and operate CodeBuzz CRM, a lead-management application used by businesses such as real-estate agencies, and the CodeBuzz Meta Connector, which brings leads from Facebook and Instagram Lead Ads into CodeBuzz CRM.
For any privacy question, contact us at info@codebuzz.ai.
2. What this policy covers
This policy explains how we handle personal data when you:
- visit codebuzz.ai or contact us through it (the “Website”);
- use CodeBuzz CRM as a business customer or as a member of a customer’s team (the “CRM”);
- connect a Facebook Page to CodeBuzz CRM through the CodeBuzz Meta Connector (the “Meta Integration”); or
- submit a Facebook or Instagram lead form run by one of our business customers, whose answers then reach that customer’s CRM (“Leads”).
Together these are our “Services”.
3. Information we collect
3.1 Website visitors
- Information you send us — your name, email, phone number, company and message when you use our contact form or email us.
- Usage information — pages viewed, approximate location (city or country, derived from your IP address), device and browser type, and referring site, collected through cookies and similar technologies (see Cookies and analytics).
3.2 CodeBuzz CRM users
- Account information — name, email address, phone number, business name, city, role and a securely hashed password.
- Business data you enter — the leads, properties, notes, statuses and assignments you and your team create in the CRM.
- Technical information — login timestamps and service logs needed to keep the CRM secure and working.
3.3 Meta Integration and Leads
When a business connects its Facebook Page, and when people submit that business’s lead forms, we process the data described in the next section.
4. Facebook & Instagram (Meta) data
The CodeBuzz Meta Connector uses Meta’s official APIs. It accesses only data that a Page administrator explicitly authorises through Facebook Login, and only for the purpose described below.
| Data we receive from Meta | Why we need it |
|---|---|
| Basic profile of the person connecting (Facebook user ID and name) | To show who connected a Page to the CRM account. |
| The list of Pages the person manages, each Page’s name and ID, and a Page access token | So the business can choose which Page to connect, and so we can receive that Page’s new leads. |
| The Page’s lead forms (form names and questions) | So the business can choose which forms to sync and how each answer maps into the CRM. |
| Lead form submissions: the answers a person gives on the form (for example name, phone number, email, city and any custom questions), plus the lead ID, form, ad and submission time | To create the lead in the CRM account of the business that runs the form, so it can follow up with that person. |
How we use Meta data — and how we don’t
- We use Meta data only to provide the Meta Integration: connecting Pages, receiving leads, and delivering each lead to the CRM account of the business that connected the Page.
- We do not sell Meta data, use it for advertising or marketing, use it to build profiles of people, or combine it with other data about those people.
- We do not share Meta data with anyone other than the business that connected the Page and the infrastructure providers who host our Services (see How we share information).
- Each business can see only the Pages and leads it connected; one customer can never see another customer’s data.
- We handle Meta data in line with the Meta Platform Terms and Developer Policies.
If you submitted a lead form
When you fill in a lead form on Facebook or Instagram, you share your answers with the business that runs that form. That business decides how your information is used and is responsible for its own privacy practices. CodeBuzz acts on that business’s behalf, as its service provider, to deliver your answers into its CRM. To change or remove your information, you can contact the business directly, or contact us and we will help (see Data deletion).
5. How we use information
- To provide the Services — run CRM accounts, deliver leads into them, and send service emails such as account activation, password resets and team invitations.
- To respond to you — answer enquiries sent through our Website or by email.
- To keep the Services secure and reliable — detect and prevent misuse, troubleshoot problems, and keep logs for security and auditing.
- To improve the Website — understand, in aggregate, how visitors use our Website.
- To meet legal obligations — comply with applicable law and lawful requests.
We do not use automated decision-making that produces legal or similarly significant effects on you.
6. Legal basis and roles
We process personal data with your consent (for example, when a Page administrator authorises the Meta Integration, or when you submit a lead form or our contact form), to perform our contract with our customers, to comply with the law, and for our legitimate interests in operating and securing the Services. This includes processing in line with India’s Digital Personal Data Protection Act, 2023, and other applicable laws.
Customer data and leads: for leads and the other business data our customers store in CodeBuzz CRM, the customer decides why and how that data is used (it is the “data fiduciary” or “controller”). CodeBuzz processes it on the customer’s instructions, as its processor.
Our own data: for Website visitors and for CRM account information, CodeBuzz is responsible for the data.
9. How long we keep data
| Data | How long we keep it |
|---|---|
| Raw lead data held by the Meta Connector | Deleted automatically within 30 days, once delivered to the customer’s CRM. Leads that could not be delivered are kept for up to 90 days so they can be retried, then deleted. |
| Page access tokens | Kept only while the Page stays connected. Deleted as soon as the business disconnects the Page or removes our app. |
| Leads and business data in CodeBuzz CRM | Kept while the customer’s account is active, or until the customer deletes them. Deleted within 30 days after the account is closed, unless the law requires us to keep them longer. |
| CRM account information | Kept for the life of the account, then deleted within 30 days of closure. |
| Website enquiries | Kept for as long as needed to respond and follow up, and no longer than 24 months. |
| Security logs | Kept for a limited period for security and troubleshooting, then deleted. |
10. How we protect data
- All data travels over encrypted connections (HTTPS/TLS).
- Facebook Page access tokens and lead data are encrypted at rest, and passwords are stored only as secure hashes.
- Every request from Meta is verified with a cryptographic signature, and every lead we deliver to a CRM is signed, so data cannot be faked or tampered with in transit.
- Access is limited by role, and each customer’s data is isolated from every other customer’s.
- We host our Services with reputable cloud providers that maintain strong physical and network security.
No system is perfectly secure. If a data breach affects your personal data, we will notify you and the relevant authorities as the law requires.
11. Your rights
Depending on where you live, you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected or incomplete data completed;
- have your data deleted;
- withdraw consent at any time, for example by disconnecting a Facebook Page;
- object to or restrict certain processing; and
- raise a complaint with us, or with the data protection authority in your country.
To use any of these rights, email info@codebuzz.ai. We will respond within 30 days. Where we process data on behalf of a business customer, such as leads, we may pass your request to that business and help it respond.
12. Data deletion
You can ask us to delete your data at any time. Choose the option that fits you:
If you submitted a Facebook or Instagram lead form
Email info@codebuzz.ai with the subject “Lead data deletion request”. Include the name and the email or phone number you entered on the form, and, if you know it, the name of the business. We will delete your lead data from our systems, ask the business to delete it from its CRM account, and confirm to you within 30 days.
If you connected a Facebook Page
- From CodeBuzz CRM: open the Meta Integration settings and choose Disconnect. We immediately stop receiving leads and delete the Page’s access token.
- From Facebook: go to Settings & privacy → Settings → Business integrations, find CodeBuzz and choose Remove. This revokes our access. Your previously synced leads stay in your CRM until you delete them or close your account.
- Delete everything: email info@codebuzz.ai with the subject “Data deletion request” from your account email address. We will delete your Page connections, tokens and synced lead data within 30 days and confirm by email.
If you have a CodeBuzz CRM account
Email info@codebuzz.ai from your account email address with the subject “Account deletion request”. We will delete your account and its data within 30 days, unless the law requires us to keep part of it, and confirm by email.
13. International transfers
Our service providers may store and process data outside your country, including in the United States. When we transfer data internationally, we use providers that apply appropriate safeguards and protect your data as described in this policy, in line with applicable law.
14. Children
Our Services are meant for businesses and are not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
15. Changes to this policy
We may update this policy from time to time. We will post the new version on this page and update the “Last updated” date. If a change is significant, we will also tell our customers by email or in the CRM before it takes effect.
16. Contact us
For privacy questions, requests or complaints, contact our privacy and grievance team:
Email: info@codebuzz.ai
Website: https://codebuzz.ai
We acknowledge requests within 72 hours and resolve them within 30 days.