Skip to content

Privacy policy

Last updated: 24 October 2026

This policy explains what personal information Lidora collects, why, and what you can do about it. Lidora is a product of NexGen Rank (“we”, “us”), Office 9, Street 1, Badami Bagh Khokhar Road, Badami Bagh, Lahore 05412, Pakistan. Contact: hello@lidoracrm.com.

1. Information we collect

  • When you contact us, book a call or book a demo: your name, email address, phone number, business name and anything you tell us.
  • When you use Lidora as a customer: your account details (name, email, phone, password stored scrambled) and the settings you choose.
  • Information your business puts into Lidora: details of your own leads and customers. For this information, your business decides what is collected and why (it is the controller); we only store and process it on its instructions to provide the service (we are the processor).
  • Information from apps you connect: see section 4.
  • Technical information: our servers keep short-lived logs (such as IP address, browser and pages requested) to keep the service secure and working.

2. How we use it

  • To reply to you, run your call or demo and give you a quote.
  • To provide, support and improve Lidora.
  • To send you service messages, such as invites, password resets, billing reminders and usage warnings.
  • To keep the service secure and to meet our legal obligations.

We do not sell personal information, we do not use it for advertising, and we do not use your customers’ data for our own marketing.

3. Who we share it with

We use trusted service providers to run Lidora, only as far as needed:

  • Hosting: Hostinger, which runs our servers.
  • Payments: our payment partner, Paddle, which sells Lidora plans as the merchant of record. It receives your name, email, address and payment details to take the payment, send receipts and handle tax. We never see your full card details.
  • Messaging: if your business uses them, Meta (WhatsApp Business Platform and Facebook lead ads), Twilio (texts, calls and WhatsApp) and your own email provider.
  • Google: if your business connects it, Google Contacts and Google Business Profile.
  • Fonts: this website loads fonts from Google Fonts, which receives your IP address when the page loads.

4. Apps your business connects

A business can connect its own accounts to Lidora. We only use what we receive to provide the feature the business switched on, for that business, and we never sell it or use it for advertising.

  • WhatsApp (Meta WhatsApp Business Platform): when a business connects its WhatsApp Business number, we receive and store its WhatsApp Business Account ID, phone number ID, business name and an access token (stored encrypted), its message templates and their approval status. When Lidora sends a template message, we store the message, the recipient’s phone number and the delivery status (sent, delivered, read or failed). When a customer replies to the business on WhatsApp, we receive the sender’s phone number, profile name and message, so we can show the reply on that customer’s record and stop automatic follow-ups. Conversations in the WhatsApp Business App stay on the business’s phone; we do not read them, apart from noting that the business has messaged a lead (so follow-ups stop).
  • Facebook and Instagram lead ads (Meta): the answers a person gives in the business’s lead form, sent to that business’s Lidora account.
  • Google Contacts and Google Business Profile: new leads are added to the business’s own Google Contacts, and the business’s Google Business Profile reviews and rating are shown in Lidora so it can reply to them and show them on its website. Lidora only reads and replies for profiles the user manages. Lidora’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
  • Twilio: phone numbers, texts, call details and voicemail recordings for the business’s own Twilio number.

5. Deleting data from a connected app

A business can disconnect WhatsApp, Facebook or Google at any time in Lidora (Integrations). The access token and connection details are deleted straight away. To have all data from a connection deleted, or to close an account and delete everything, email hello@lidoracrm.com; we do it within 30 days. You can also remove Lidora from your Facebook account in Facebook → Settings → Apps and websites, or from your Google account at myaccount.google.com/permissions. Step-by-step instructions are on our data deletion page.

If you have messaged a business that uses Lidora, your details belong to that business: please ask it to delete them, or reply STOP to its WhatsApp messages or texts to stop automatic messages.

6. Cookies

This website does not set its own cookies. The Lidora app uses one essential cookie to keep you signed in, and nothing for advertising or tracking.

7. How long we keep it

We keep enquiry details for as long as needed to deal with your enquiry, and customer account data for as long as you use Lidora. When an account is closed, its data is deleted, apart from what we must keep by law. Backups are removed automatically over time.

8. Keeping it safe

Lidora uses encrypted connections (HTTPS), encrypted storage for access tokens and passwords to connected services, scrambled passwords, optional two-step login, separate data for each business and daily backups.

9. Your rights

Depending on where you live (for example under UK or EU GDPR, or US state laws), you may have the right to see, correct, delete or receive a copy of your information, and to object to how it is used. Email hello@lidoracrm.com and we will reply within 30 days. If your information is in a business’s Lidora account, please contact that business first; we will help them respond. You can also complain to your local data protection authority (in the UK, the Information Commissioner’s Office).

10. Changes

We may update this policy. The date at the top shows when it last changed.