Privacy Policy

#1. Overview & Scope of Policy

This Privacy Policy governs how LMV Systems ('LMV', 'We', 'Us', or 'Our') collects, uses, processes, stores, and protects personal data and business information across our website (www.lmvsystems.com), SaaS products (ACADRIX, Real Estate AI Lead System), WhatsApp Business API automation engines, Meta Ads API integrations, and custom web applications.

By accessing our platforms or commissioning our digital services, you agree to the data collection and processing practices described herein. This policy applies equally to website visitors, client business entities, end-user leads, and system administrators.

#2. Data Controller vs. Data Processor Roles

Under applicable data protection laws (including the EU General Data Protection Regulation - GDPR, the UK GDPR, and India's Digital Personal Data Protection Act - DPDPA):

• LMV Systems as Data Controller: We act as Data Controller for personal information collected directly from website visitors, clients, and partners for billing, support, and marketing purposes.
• LMV Systems as Data Processor: For lead records, WhatsApp conversation logs, customer lists, and Meta Ads inquiry payloads ingested into client software dashboards, LMV Systems acts strictly as a Data Processor on behalf of our client (the Data Controller).

#3. Categories of Data We Collect & Ingest

We collect data across the following categories to deliver enterprise IT and automation services:

• Direct User & Account Data: Full Name, Business Email Address, Mobile/WhatsApp Phone Number, Billing Details, Company Name, and Account Credentials.
• Meta Ads & API Payloads: Real-time lead ad responses ingested via Facebook & Instagram Lead Ads APIs, including lead form responses, campaign ID tags, ad set metadata, and submission timestamps.
• WhatsApp Business API Telemetry: Message metadata, inbound inquiry transcripts, interactive button selections, site visit booking date/time preferences, and automated AI response logs.
• Technical & System Telemetry: IP addresses, device identifiers, browser types, operating systems, session duration, cookie identifiers, and server diagnostic access logs.

#4. Lawful Basis & Purposes of Data Processing

We process personal and business data strictly under legal bases established by global privacy statutes:

• Performance of Contract: Processing necessary to deliver ordered services, execute WhatsApp AI qualification, route leads to assigned executives, and generate invoices.
• Consent: Explicit consent provided by users during inquiry form submission, opt-in WhatsApp message initiation, or cookie consent banners.
• Legitimate Interests: Processing necessary for platform security, fraud prevention, server infrastructure diagnostics, and system performance monitoring.
• Legal & Regulatory Obligations: Maintaining tax billing records, complying with law enforcement inquiries, and auditing regulatory compliance.

#5. Meta Business API & WhatsApp Data Disclosures

LMV Systems integrates with Meta Platforms, Inc. (Meta Ads API & WhatsApp Business Cloud API). In accordance with Meta Developer Policies:

• API Scope & Usage: Meta API data is used strictly to deliver requested lead capture, automated inquiry qualification, and dashboard analytics.
• No Data Monetization: We do not sell, rent, trade, or monetize Meta API data or customer lead lists to third-party ad networks or data brokers.
• Data Deletion Requests: Users whose data was captured via Meta Ads or WhatsApp integrations may request permanent data deletion at any point.

#6. Data Security & Technical Safeguards

LMV Systems enforces technical, physical, and administrative security measures to safeguard data against unauthorized access, loss, or alteration:

• Encryption: TLS 1.3 encryption for all data in transit across HTTPS, Meta API, and WhatsApp Business API webhooks. AES-256 encryption at rest for databases and backups.
• Access Control: Role-based access controls (RBAC), multi-factor authentication (MFA) for administrative portals, and isolated client database instances.
• Compliance Standards: System architecture adheres to PCI-DSS payment security guidelines and regular vulnerability assessments.

#7. Data Retention & Automated Deletion Protocols

We retain personal data only as long as necessary to fulfill contractual obligations or comply with statutory requirements. Operational lead logs and WhatsApp transcripts are retained for the duration specified in the client Master Services Agreement (MSA). Upon agreement termination or client request, all associated data is securely anonymized or permanently purged within 30 days.

#8. User Rights & Data Deletion Mechanism

Under GDPR, CCPA, and DPDPA, users possess specific data privacy rights:

• Right to Access & Export: Request a copy of personal data maintained by LMV Systems.
• Right to Rectification: Request correction of inaccurate or incomplete personal records.
• Right to Erasure ('Right to be Forgotten'): Request permanent deletion of personal data from our active databases and backup queues.
• How to Submit Requests: Users can submit formal data access or deletion requests by emailing privacy@lmvsystems.com or hello@lmvsystems.com.

#9. Third-Party Subprocessors

We share data strictly with trusted infrastructure subprocessors under strict Data Processing Agreements (DPAs):

• Cloud Infrastructure: AWS, Vercel, and Cloudflare (Server hosting, CDN, database backup).
• Communications API: Meta Platforms, Inc. (WhatsApp Business Cloud API).
• Payment Gateways: Razorpay & Stripe (Encrypted transaction processing).

#10. Contact Privacy Officer

For questions, compliance verification, or Data Processing Agreement (DPA) requests, contact our Data Protection Officer at privacy@lmvsystems.com or hello@lmvsystems.com.