Privacy Policy

Last Updated: August 4, 2026

Welcome to 10xDeals.ai ("Company," "we," "our," or "us"). We provide enterprise CRM, ERP, and marketing automation SaaS solutions. This Privacy Policy explains how we collect, use, process, and protect information when you use our website, web application, software, and related services (collectively, the "Services").

By accessing or using 10xDeals.ai, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Data Controller & Data Processor

Depending on the type of information processed, 10xDeals acts as either a Data Controller or a Data Processor.

  • Data Controller: We act as the Data Controller for personal information collected directly from our subscribers and business clients, including account registration, billing details, and platform usage.
  • Data Processor: When our clients upload customer information, sales leads, invoices, contacts, WhatsApp conversations, or ERP records into our platform, we process that information solely on behalf of our clients and according to their instructions.

2. Information We Collect

A. Information You Provide

  • Name, business email address, phone number and company details.
  • Job title, industry and account profile information.
  • Billing information and payment transaction records (payment details are securely processed through trusted payment providers).
  • Customer data, sales leads, invoices, inventory records, CRM data, ERP records and integration settings submitted by you.

B. Information Collected Automatically

  • IP address and browser information.
  • Operating system and device identifiers.
  • Login timestamps and platform activity logs.
  • Cookies, session tokens and analytics used to improve our services.

3. How We Use Your Information

  • Provide, maintain and improve our CRM and ERP platform.
  • Process integrations with Meta Lead Ads, WhatsApp Business API, email providers, SMS providers and other connected services.
  • Provide customer support and technical assistance.
  • Detect, investigate and prevent fraud, abuse and unauthorized access.
  • Power AI-assisted features including lead routing, analytics and workflow automation.
  • We do not use your confidential CRM, ERP or customer business data to train public AI models.
  • We do not share Google or Microsoft user data with third parties except as required to provide the requested service, comply with applicable law, or protect our legal rights.

4. Third-Party Integrations & Service Providers

We work with trusted third-party providers to deliver our services, including:

  • Meta Platforms (Facebook Lead Ads & WhatsApp Cloud API)
  • Cloud infrastructure providers such as AWS, Supabase and Google Cloud.
  • Payment gateways including Stripe, Razorpay and similar providers.
  • Email, SMS and communication service providers used for notifications.

We never sell, rent or trade your personal or business information to third parties for advertising or commercial marketing purposes.

4A. Email Integrations (Google Gmail & Microsoft Outlook / Microsoft 365)

10xDeals CRM allows you to connect your Google Gmail or Microsoft Outlook / Microsoft 365 account to send business emails directly from the CRM. When you connect an email account, authentication is performed securely using OAuth 2.0. We never ask for, collect, or store your email account password.

We access your connected account only to provide the functionality you explicitly request, such as sending emails from your connected mailbox, tracking email delivery, and maintaining CRM communication history.

Information We Store

  • Connected email address.
  • Encrypted OAuth access tokens and refresh tokens required to maintain your authorized connection.
  • Email delivery status and transmission logs.
  • Message identifiers (Message IDs).
  • Sender and recipient information for maintaining CRM communication history.
  • Email attachments only when you explicitly upload or send them through 10xDeals CRM.

Information We Do Not Access

Unless additional permissions are explicitly granted by you, 10xDeals CRM does not:

  • Read your inbox.
  • Read the content of your emails.
  • Access your contacts.
  • Access your calendar or scheduling information.
  • Delete, edit, or modify emails in your mailbox.
  • Send emails without your authorization or initiated CRM actions.

Google API Services

10xDeals CRM's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Information obtained through Google Workspace APIs is used solely to provide the features requested by the user and is never sold or used for advertising purposes.

Microsoft Graph API

When you connect a Microsoft Outlook or Microsoft 365 account, we access your account through Microsoft Graph APIs only for the permissions you authorize. We do not access your mailbox beyond the permissions granted by you and only to provide the requested CRM functionality.

AI & Email Data

Email-related information obtained through Google APIs or Microsoft Graph APIs is not used to train generalized artificial intelligence, foundation models, or machine learning models. Such information is processed only to provide the email features you explicitly use within 10xDeals CRM.

Revoking Access

You may disconnect your Google Gmail or Microsoft Outlook / Microsoft 365 account at any time from your account settings or through your Google or Microsoft account security settings. Once disconnected, 10xDeals CRM will no longer be able to send emails using that account, except for information retained as required by applicable law or for legitimate business record keeping.

4B. WhatsApp Business Platform Data

When a business connects its WhatsApp Business Account (WABA) to 10xDealsthrough Meta's WhatsApp Business Platform, we may process information made available through the WhatsApp Cloud API.

This may include:

  • WhatsApp Business Account and phone number information.
  • Business profile information.
  • Customer phone numbers and WhatsApp profile information.
  • Incoming and outgoing message content.
  • Message IDs, timestamps, and delivery, read, and failure status.
  • Media files such as images, videos, audio, and documents when exchanged through WhatsApp.
  • Message templates and template-related information.
  • Webhook events and technical metadata required to provide WhatsApp messaging functionality.

We use this information only to provide WhatsApp messaging, conversation management, message template management, delivery tracking, customer support, and related CRM functionality requested by the business customer.

10xDeals does not sell WhatsApp data or use WhatsApp message content for advertising or to train generalized public AI models.

WhatsApp data is processed on behalf of our business customers where applicable. Business customers are responsible for ensuring that they have the appropriate rights, notices, and lawful basis to communicate with their customers through WhatsApp.

5. Google Gmail Integration & Google API Data

You may choose to connect a Google account to send email through Gmail from within 10xDeals. This integration is optional and is activated only when you choose to connect your account.

When you connect Gmail, we request only the permissions needed to identify the connected Google email address and send email on your behalf: https://www.googleapis.com/auth/gmail.send and https://www.googleapis.com/auth/userinfo.email.

  • We use this data solely to provide the Gmail email-sending feature requested by you within 10xDeals.
  • We do not read, scan, or analyze your Gmail inbox content through this integration.
  • We store the connected Gmail address and OAuth access and refresh tokens only as necessary to send email and maintain the connection. These credentials are encrypted at rest and protected by access controls.
  • We do not sell, rent, share, or use Google user data for advertising, profiling, credit decisions, or training public AI models.
  • You may disconnect Gmail from 10xDeals at any time to stop future email sending. You may also revoke 10xDeals' access in your Google Account security settings.

10xDeals' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Data Security

We implement industry-standard security practices including:

  • TLS/HTTPS encryption for all communications.
  • Encryption at rest for sensitive credentials and data.
  • Restricted access controls and multi-factor authentication (MFA) for authorized personnel.
  • Continuous monitoring to protect against unauthorized access.
  • OAuth access tokens and refresh tokens are encrypted at rest using industry-standard encryption techniques.
  • Access to connected email credentials is restricted to authorized backend services and is never exposed to end users.

7. Data Retention

We retain subscriber information for as long as your account remains active or as required by applicable laws. Upon account cancellation or a verified written request, associated customer records, leads and CRM data will be permanently deleted or anonymized from active production systems within 30 days.

When you disconnect a connected email account, associated OAuth credentials are securely revoked or deleted in accordance with our retention policies, except where retention is required by law.

8. Your Rights

Depending on your jurisdiction (including GDPR, CCPA and India's DPDP Act), you may have the following rights:

  • Access your personal information.
  • Request correction of inaccurate information.
  • Request deletion of your personal information.
  • Withdraw previously provided consent where applicable.
  • Request a copy of your personal information.

To exercise any of these rights, please contact us at admin@10xdeals.ai.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any updates will be posted on this page together with the revised "Last Updated" date.

10. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy, please contact us: