We collect:

• Lead data submitted via web forms, WhatsApp inbound, CSV uploads, or webhook POSTs.
• Tenant identifier (e.g., genix_estates) for row-level isolation.
• Billing contact name and email for subscription management.
• IP address and user-agent for ingestion security and abuse prevention.

We do NOT collect:

• Sensitive personal data beyond what is required for lead qualification.
• Racial or ethnic origin, political opinions, religious beliefs, or health data.
• Children's data (we are not directed to at anyone under 13).

How we use AI:

• Claude Sonnet runs BANT scoring on each submitted lead; results are stored in your Supabase tenant.
• DeepSeek R1 generates nurture sequences; generated copy is retained per your retention preferences.
• Prompts are version-controlled per tenant and can be revoked at any time.
• Raw lead data is retained until you delete it or the subscription ends.

Retention:

• Active leads: retained for the duration of your subscription.
• Converted deals: anonymized after 90 days unless you opt into CRM sync.
• You may request full data export or deletion via the Operator Dashboard.

Infrastructure:

• All lead records live in your own Supabase project (or a dedicated schema in ours) with row-level security.
• Access is governed by your service role key; we never share data across tenants.
• POST /api/v1/ingestion/webhook uses HTTPS with signed payloads.
• Realtime channels are scoped to tenant_id=eq.genix_estates.

Compliance:

• We are GDPR‑aware by design: data subjects can exercise rights through your dashboard.
• CCPA‑compatible: we maintain a record of processing activities per tenant.
• SOC 2-type controls apply to our ingestion pipeline and Supabase configuration.