Privacy Policy

1. Who We Are

Tribus Global Technologies Inc., a Delaware corporation, operates LeadsBox, a customer relationship management (CRM) platform that helps businesses manage customer communications across Instagram, Facebook, and WhatsApp. Tribus Global Technologies Inc. is the data controller. Our Nigerian affiliate, TRIBUS GLOBAL LTD (RC 9204949), is the local operating entity for customers in Nigeria.

2. What Data We Collect

When businesses use LeadsBox, we collect:

Customer Messages:

• Instagram Direct Messages sent to business accounts
• Message timestamps and read status

Business Information:

• Company name and contact details
• User account information (email, password hash)
• Instagram account details

Usage Data:

• Login timestamps and IP addresses
• Feature usage analytics
• Device and browser information

3. How We Use Your Data

We use your data to:

• Display customer messages in your CRM inbox
• Enable you to reply to customers from LeadsBox
• Generate AI-powered insights and invoice suggestions
• Process payments via Paystack
• Provide analytics and usage reports
• Improve our service and fix bugs
• Send important service notifications

4. Data Sharing

We use subprocessors according to the feature you enable. Current categories include:

Provider terms and any executed data-protection agreements govern these processing relationships.

5. Data Security

We protect your data with:

• Encryption in transit: Application traffic is served over HTTPS/TLS
• Storage protection: Managed-provider controls plus field-level encryption for selected credentials and settings
• Access controls: Secure authentication with JWT tokens
• Security review: Dependency scanning, access-control tests, and targeted source review
• Tenant isolation: Organization-scoped application and database access controls
• Operational safeguards: Provider-managed backups and restricted administrative access

6. Your Rights (GDPR & NDPR Compliance)

Under Nigerian Data Protection Regulation (NDPR) and GDPR, you have the right to:

To exercise these rights, contact: support@leadsboxapp.com

7. Data Retention

• Active Accounts: Data retained while your account is active
• Deleted Accounts: All data permanently deleted within 30 days
• Backups: Removed according to the applicable infrastructure provider's backup lifecycle
• Logs and AI records: Retention varies by record type and operational need; access, correction, and deletion requests may be submitted to support

8. Instagram Data

Permissions We Request & Why

• instagram_business_basic — Read your Instagram Business account profile (username, account ID) so LeadsBox can identify which account is connected and display it in your dashboard.
• instagram_business_manage_messages — Read and send Direct Messages on your connected Instagram Business account. This is the core permission that lets LeadsBox automatically read incoming DMs, detect sales conversations, and track revenue.
• pages_show_list — List the Facebook Pages linked to your Instagram Business account. Required to let you choose which specific Instagram account to connect when you have more than one page.
• pages_read_engagement — Read basic engagement data on your connected Facebook Page. Used to verify the page connection is active and healthy.

What Data We Access

• Direct Messages (DMs) sent to your connected Instagram Business account
• Sender profile identifiers (Instagram user ID, username when available)
• Message timestamps and read receipts
• Your connected Instagram account username and page name

What We Do NOT Access

• Messages not sent to your connected Instagram account
• Instagram accounts you haven't explicitly connected
• Your followers, following, or post content
• Private account information beyond what is needed for messaging
• Any data without your explicit OAuth consent

Data Retention

Instagram message data is stored for as long as your account is active. When you disconnect your Instagram account or delete your LeadsBox account, all associated Instagram data (messages, contacts, conversation history) is permanently deleted within 30 days.

Data Deletion

You can disconnect your Instagram account at any time via Settings → Integrations → Instagram → Disconnect. This immediately revokes LeadsBox's access to your account.

To request permanent deletion of all your Instagram data, email us at support@leadsboxapp.com with the subject line "Instagram Data Deletion Request". We will process your request and confirm deletion within 30 days.

9. AI Data Processing

How AI Processes Your Data:

• Semantic Intent Extraction: Relevant messages may be transformed into embeddings. Embeddings can be persisted to support retrieval and are subject to account retention and deletion controls.
• Classification and assistance: Relevant conversation or image content may be sent to a configured model. LeadsBox minimizes phone numbers, email addresses, payment references, URLs, and unrelated history where feature quality permits.
• Multilingual Processing: Our LLM layer processes messages in Nigerian English, Pidgin, and other local languages to ensure accurate lead qualification.

Training Data Commitment:

Automated processing and review:

• AI outputs are confidence-gated and can require human approval before customer messaging or sales-state changes
• You may correct or reject suggestions and contact support to object to optional AI processing
• LeadsBox does not let a model choose an organization, actor, payment amount, or privileged action without server-side checks

10. Children's Privacy

LeadsBox is a business tool not intended for individuals under 18 years of age. We do not knowingly collect data from children.

11. International Data Transfers

Your data may be transferred to and processed outside Nigeria where our providers operate. The destination depends on the selected provider and account configuration. Safeguards may include:

• Standard Contractual Clauses (SCCs)
• Provider contractual and transfer mechanisms applicable to the service
• Encryption in transit and access controls

11. Cookies

We use essential cookies for:

• Authentication (keeping you logged in)
• Security (CSRF protection)
• Preferences (language, theme)

You can disable cookies in your browser, but this may affect functionality.

12. Changes to This Policy

We may update this privacy policy. Material changes will be notified via:

• Email to your registered address
• In-app notification
• Notice on this page

Current Version: February 2, 2026

13. Complaints

If you have privacy concerns, contact us first: support@leadsboxapp.com

If unresolved, you may file a complaint with:

14. Contact Us