Data Protection & Privacy Governance

Privacy Policy & Data Security

How Global.LeadsKE.Com collects, enriches, processes, and protects corporate intelligence and personal data across our omnichannel marketing automation infrastructure. Looking for our infrastructure defense details? Review our Security & Trust Architecture.

Effective Date: March 1, 2026•Version 2.4 (ODPC & GDPR Aligned)•Controller: Kelgen Enterprises / LeadsKe

1. Architectural Purpose & Scope

Our role as Data Controller and Data Processor

Global.LeadsKE.Com (operated by Kelgen Enterprises, Nairobi, Kenya) provides a unified autonomous customer acquisition operating system accessible at https://global.leadske.com. Our platform combines B2B contact discovery, Apollo/Hunter data enrichment, WhatsApp Cloud API and SMS messaging, programmatic SEO blog publishing, and social video automation.

Depending on the data flow, Global.LeadsKE.Com acts in two distinct capacities under international privacy jurisprudence:

Data Controller

Your Account & Billing Information

We determine the purpose and means of processing your subscription details, login credentials, M-Pesa transaction identifiers, and platform telemetry.

Data Processor

Your CRM Contacts & Dispatched Messages

When you upload lead CSVs or trigger WhatsApp/SMS campaigns to your customers, you remain the Data Controller; LeadsKe processes transmissions strictly on your instructions.

2. Categories of Data Processed

Granular breakdown across our four core system engines

B2B Legitimate Interest

B2B Lead Intelligence & Enrichment Data

When you use our Contact & CRM enrichment engine, we interface with enterprise identity databases including Apollo.io, Hunter.io, and RocketReach to verify professional business emails, direct corporate dials, company firmographics, and job titles. We only index publicly available corporate information and maintain a real-time suppression directory for individuals requesting removal.

Contractual Delivery

Omnichannel Messaging Payloads & Logs

To dispatch and receive customer messages across the official Meta WhatsApp Business Cloud API, regional SMS networks (via Africa’s Talking), and SMTP email gateways, we process phone numbers, message content, delivery receipts, and inquiry statuses. Content is processed strictly to execute delivery and populate your Unified Inbound Inbox.

Zero Training Policy

AI Prompt Generation & Synthesis Data

When utilizing our Programmatic SEO blog engine, AI Lead prospector, or Remotion Social Studio, queries and prompt variables pass through hardened enterprise LLM APIs (OpenRouter, OpenAI). Customer proprietary data, customer CRM lists, and private inbound messages are NEVER used to train public foundation models.

Analytics & Telemetry

Website AI Visitor De-anonymization

Our website visitor tracking pixel performs reverse-DNS lookup on public IPv4/IPv6 addresses to identify visiting corporate domains, industry verticals, and session engagement depth. We do not correlate anonymous IP visits with consumer residential identities.

3. AI Transparency & Machine Learning Safeguards

Our strict policy regarding generative AI models and client confidentiality

Enterprise AI Confidentiality Guarantee

LeadsKe leverages large language model APIs (via OpenRouter and OpenAI) exclusively for programmatic content synthesis—such as crafting SEO articles, generating Remotion video voiceover scripts, and formulating conversational WhatsApp auto-responses.

Zero Model Training: Your private prompts and customer contact records are never submitted to train underlying public AI models.
Transient Inference: Payloads sent to LLM endpoints are processed in volatile memory with zero persistence at the inference layer.

4. Regulatory Standards & Legal Basis

Multi-jurisdictional compliance across Kenya and global markets

Kenya Data Protection Act 2019

Kenya / ODPC Compliant

Registered and adhering to Office of the Data Protection Commissioner (ODPC) guidelines for commercial data controllers and processors, upholding consent mandates and opt-in records.

EU / UK GDPR Compliance

Articles 6, 13, 14 & 17

Strict adherence to lawful basis standards for B2B communications (Legitimate Interest with balancing tests) and full technical support for immediate Right to Erasure.

Meta WhatsApp Business Policy

Meta Cloud API Standard

Zero tolerance for unsolicited broadcast spam. Automated opt-out trigger matching (STOP, UNSUBSCRIBE) is enforced natively across all automated messaging sequences.

Africa’s Talking Telco Compliance

Regional SMS Carrier Rules

Carrier-grade SMS routing utilizing verified Alphanumeric Sender IDs with regulatory time-windowing and mandatory transactional opt-out mechanisms.

5. Authorized Sub-Processors & Data Transfers

Third-party infrastructure partners executing core system operations

Sub-ProcessorService & Processing ActivityServer Location
Meta Platforms Ireland LtdWhatsApp Business Cloud API messaging gatewayUSA / EU
Africa’s Talking LtdRegional telecom SMS gateway & carrier routingKenya / Pan-Africa
Apollo.io & Hunter.ioB2B contact verification and email deliverability scoringUSA / EU
OpenRouter / Anthropic / OpenAITransient LLM inference for blog & video scriptsUSA
AWS & CloudflareEncrypted cloud hosting, edge caching, and DDoS mitigationGlobal

6. Data Security & Retention Schedules

Enterprise safeguards protecting your databases and API keys

Cryptographic Protection

All data in transit is protected using TLS 1.3 encryption. At-rest database storage is encrypted with AES-256. Integration API keys (WhatsApp tokens, Apollo credentials) are salted and hashed.

Retention Schedules

Active CRM contacts are retained throughout your subscription. Inbound messaging webhook payload logs are kept for 90 days for audit trail reconciliation before automated archival purge.

Suppression & Deletion

When a user requests account termination, all CRM contacts, WhatsApp message archives, and programmatic blog drafts are permanently wiped from production nodes within 30 days.

Exercise Your Legal Rights

Data Subject Rights & Removal Requests

Under the Kenya Data Protection Act 2019 and GDPR, you have the right to access, rectify, restrict, or request the immediate permanent erasure of your personal or B2B contact data from our directory.

Data Protection Officer: dpo@leadske.com
Postal Address: Kelgen Enterprises, P.O. Box 2490-00100, Nairobi, Kenya