1. Controller and contact
Lead Recovery Platform (LRP), operated by Bidex Group. For privacy questions or requests concerning your data, email lrp-support@bidexgroup.com.
2. Information we process
- Accounts: identity, contact details, preferences, role, access, sessions and security records. LRP passwords are stored using cryptographic derivation, not readable text.
- Commercial activity: lead data, declared evidence of the basis for email, assignments, notes, status, campaigns, opt-outs, messages, images and delivery results.
- Administration: declared sales and collections, accounting periods, fees, supporting files and reviews.
- Operations: records needed for security, auditing and diagnostics, which may include date, IP address and browser information.
3. Connected email
An authorized user may connect Google, Microsoft, Zoho or an SMTP server to send administrative or commercial email from LRP. LRP does not request the ordinary Google, Microsoft or Zoho password. It retains the authorized address and OAuth credentials needed to refresh access under restricted controls. For SMTP it retains the application secret supplied for that connection.
To deliver a message, LRP transmits the sender identity, recipient, subject, content and images to the selected provider. The provider returns identifiers and delivery results that may be retained in LRP. The integration does not read the mailbox or download contacts; ordinary replies arrive in the connected account.
4. Google user data
LRP requests the account address, verification status and Gmail sending permission. Google user data are not sold, used for advertising profiles or used to train generalized artificial-intelligence models. LRP adheres to the Google API Services User Data Policy, including its Limited Use requirements.
Google processes authorization and sent messages; DigitalOcean hosts the data and encrypted backups; recipients and their providers receive the message. Bidex Group and expressly authorized technical personnel access data only as necessary to operate, provide support, protect the service or meet a legal obligation. RingCentral and Telnyx do not receive Google credentials or Google user data.
5. Commercial email, basis and opt-out
The LRP customer is responsible for having a valid basis to contact each lead and recording it accurately. LRP retains the recorded declaration—basis type, country, source, date, optional expiration and declaring user—for controls and audit. That declaration does not replace the original evidence or legal advice.
Every commercial email contains the sender’s identification, postal address and an LRP-managed opt-out that the user cannot remove. When an unsubscribe, STOP or equivalent request is recorded, LRP blocks future email and SMS/MMS to that lead. Compatible providers also receive standard one-click unsubscribe headers. LRP retains the event to prevent future delivery and document the request.
6. Providers, hosting and AI
LRP uses DigitalOcean for hosting and backups; Google, Microsoft, Zoho or the selected SMTP server for email; and RingCentral or Telnyx for SMS/MMS. Each provider receives only the data needed for its function and applies its own terms. Infrastructure may process data outside the user’s country; the current VPS is hosted in Toronto, Canada.
LRP does not sell data or transfer it for advertising or training generalized AI models. Automated reply classification is performed through the component configured by LRP and remains subject to the human review shown in the platform; it does not by itself authorize a communication.
7. Retention, access and deletion
Data are retained as needed to provide the service, preserve authorized history, enforce opt-outs, resolve incidents or meet applicable obligations. Configured daily backups ordinarily have a 30-day retention and at least seven copies of each type; deleting within the application does not immediately remove all backup copies.
You may request access, correction or deletion using the contact above. We will verify identity and scope. LRP may retain the minimum information needed to honor an opt-out, meet an obligation or resolve an incident.
8. Revoking a connection
You can disconnect a provider from LRP. For Google, you can also remove access through your Google Account connections. Revocation prevents access renewal but does not itself erase history or records that must be retained.
9. Changes
These pages contain no advertising or third-party analytics. If data use changes materially, this policy will be updated and any required consent will be obtained before the new use begins.