MQLeads← Back

Privacy Policy

MQLeads (operated by ZYANIX, hereinafter "we", "us", or "our") — Last updated: August 2026

1. Overview

MQLeads is a lead-generation and visitor-intelligence platform. This policy explains what data we collect, why we collect it, how it is used, and the choices you have. By creating an account or using our services, you agree to the practices described here.

2. Data we collect

a) Account & company information

When you register we collect your name, email address, company/agency name, and a hashed password. In your settings you may optionally provide further company information (description, website, industry, contact details, logo, and links to your social profiles).

b) Connected account information

When you connect LinkedIn, Instagram, X/Twitter, YouTube, Facebook, Reddit or Google Search Console, we receive from those platforms the basic profile/page identifiers you chose to connect (account ID, account name, and public profile URL). Access tokens and refresh tokens are stored encrypted at rest (AES-256-GCM) and are used only to communicate with those platforms on your behalf. We never publish or sell your tokens.

c) Visitor tracking data (sites that use our script)

If you add our tracking script to your own website, we collect visitor event data on your behalf: pages visited, referrer URL, UTM campaign parameters, browser/device type, operating system, locale, timezone, screen size, time spent on pages, and outbound link clicks. Where the referrer contains a public profile handle (for example linkedin.com/in/name), we record that handle. We do not collect IP addresses or use fingerprinting.

d) Usage & technical data

Our hosting provider (Vercel) and database provider (MongoDB) may process standard technical logs (request paths, response codes, timestamps) for security and reliability.

3. How we use your data

  • To provide and operate the platform (dashboard, leads, competitor analysis, tracking).
  • To attribute site visitors to the social source they came from and score lead intent.
  • To sync search queries from Google Search Console on your instruction.
  • To process your requests (e.g. auto-fill company info from public web sources).
  • To communicate service updates and respond to support requests.
  • To maintain security and prevent abuse.

4. Who we share data with

We do not sell your personal data. We share data only with the following categories of processors, strictly to operate the service:

  • Hosting: Vercel Inc. (application hosting).
  • Database: MongoDB, Inc. (Atlas — data storage).
  • File storage: Backblaze, Inc. (B2 — logo/asset uploads, only when configured).
  • Platform APIs: Google, LinkedIn, Meta (Facebook/Instagram), X, and Reddit — only for the OAuth connections you explicitly authorize.

We may also disclose data where required by law, or to protect the rights, property, or safety of our users or the public.

5. Website owners using our tracking script

When you embed mqleads.js on your website, you are the controller of your visitors' data and we act as a processor. You are responsible for:

  • Informing visitors that your site uses analytics/lead tracking.
  • Complying with consent requirements that apply in your jurisdiction (e.g. GDPR, DPDP Act 2023, or equivalent).
  • Not tracking sensitive personal data (health, religion, political opinions, etc.).

6. Data retention

We retain your account and company data for as long as your account is active. Visitor event data is retained until you delete the corresponding site connection or your account. If you delete your account, we delete (or anonymise) your data within 30 days, except where we are legally required to retain it.

7. Security

We use HTTPS everywhere, encrypt OAuth tokens at rest (AES-256-GCM), hash passwords with bcrypt, and sign session cookies with a secret key. Access to production data is limited to the operators of this service. No system is 100% secure — you use the service at your own risk and should keep your login credentials safe.

8. Your rights

Depending on your jurisdiction (including under the GDPR and India's DPDP Act 2023), you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request deletion of your data.
  • Receive a copy of your data in a portable format.
  • Withdraw consent for a connected source at any time (via Sources or by disconnecting).
  • Lodge a complaint with a supervisory authority.

To exercise any of these rights, email us at support@zyanix.xyz (or the contact email shown on our site). We respond within 30 days.

9. Cookies & storage

Our own application sets a secure session cookie to keep you logged in. Our tracking script uses the visitor's browser localStorage only to maintain a stable visitor identifier for the site it is installed on. We do not use advertising cookies.

10. Children

MQLeads is not directed at children under 16, and we do not knowingly collect data from children.

11. Changes to this policy

We may update this policy from time to time. Material changes will be announced on this page with an updated date. Continued use of the service after changes constitutes acceptance.

12. Contact

Questions about this policy? Contact us at support@zyanix.xyz or write to ZYANIX, Shikohabad, Uttar Pradesh, INDIA.