This explains what personal data Fleek Fintech collects on this website (fleekfintech.com) and when you use Fleek CRM or Metal ERP (including their Android apps), how we use it, who we share it with, and the choices you have. Sections 1 to 10 cover this website; Section 11 covers Fleek CRM; Section 12 covers Metal ERP.
1. Who we are
Fleek Fintech (“Fleek,” “we,” “us”) operates fleekfintech.com — the corporate/marketing website for our two products, AdvisorOS and Fleek Financial Planning.
Sections 1 to 10 cover this website. Section 11 covers Fleek CRM, our contact-management and messaging service for advisors and distributors. Section 12 covers Metal ERP, our billing, collections and ordering service for metal and bartan shops, and its Android app. If you’re a client or advisor using the Fleek Financial Planning platform itself (client.fleekfinance.in or advisor.fleekfinance.in), that platform has its own, separate privacy policy covering the financial data it handles — this site doesn’t collect or store any of that.
2. Information we collect
This is a marketing website. It collects far less than a financial platform would:
| What | When |
|---|---|
| Name, work email, company/firm name, message, and what you’re interested in | Only if you submit the contact form |
| Page views, referring site, approximate location (country/region), device type, and which buttons/links you click | Automatically, for every visitor, via our analytics (see Section 3) |
We do not ask for or collect PAN, financial account details, investment holdings, or any other financial information on this website.
3. Analytics — how we track site usage
We use Umami, a self-hosted, privacy-focused analytics tool that we run ourselves — visitor data never leaves our own servers or goes to a third-party analytics company.
- Umami does not use cookies and does not track you across different websites.
- It doesn’t build an individual visitor profile — your IP address is used only momentarily to work out an approximate country/region and is not stored.
- It records aggregate events like which page you viewed, which button you clicked (e.g. “Get a Demo”), and how you arrived at the site (e.g. from a search engine).
4. Other services this website uses
| Service | Purpose | What’s shared with them |
|---|---|---|
| Google Fonts | Loads the typefaces used on this site | Your browser requests font files directly from Google, which sees your IP address the same way it would for any web request |
| Brevo | Delivers the email when you submit our contact form | Whatever you typed into the contact form (name, email, company, message) |
5. How we use your information
- Contact form submissions are used only to respond to your enquiry — to follow up about a demo, answer a question, or get back to you about a partnership.
- Analytics data is used in aggregate to understand which pages and products visitors are most interested in, so we can improve the site.
We do not sell, rent, or share your contact-form information with anyone for marketing purposes.
6. How long we keep it
Contact form submissions are sent to us by email and are not stored in a database on this website — they’re kept only in our team’s email inbox, for as long as is reasonably needed to follow up and keep a record of the enquiry. Aggregate analytics data (which contains no personal identifiers) is retained to track trends over time.
7. Your rights
Under India’s Digital Personal Data Protection Act, 2023, you have the right to:
- Ask what personal data we hold about you (in this case, typically just your contact-form submission)
- Ask us to correct inaccurate information
- Ask us to delete your information
- Withdraw consent at any time
To exercise any of these, email us using the details in Section 9.
8. Children’s data
This website is intended for advisors, firms, and business enquiries — it is not directed at children, and we do not knowingly collect information from anyone under 18.
9. Contact us
Questions about this policy, or a request relating to your data? Email us at contact@fleekfinance.in, call +91 8956506362, or use our Contact page. Fleek Fintech LLP, Pinnacle, The Woods, Wakad, Pune 411057, India. Complaints about how we handle personal data can go to the same email or phone.
10. Changes to this policy
We may update this policy from time to time as this website changes. The “Last updated” date at the top reflects the most recent revision.
11. Fleek CRM
Fleek CRM lets a business import and manage contacts, send them WhatsApp and email messages with their permission, receive replies in a shared Inbox, and book calls. This section explains how we handle personal data in it.
11.1 Two kinds of personal data
- Information about our customers and their staff (the firm that signs up and the people who use Fleek CRM). We decide why and how this is used, and this section explains it.
- Information about our customers’ own contacts (the people a customer imports and messages). The customer decides why and how this is used, and Fleek acts as their processor under our Data Processing Addendum. If you are one of a customer’s contacts, please contact that customer first; we will help them with any request you make.
11.2 What we collect about customers and their staff
- Account details: name, work email, mobile number, role, organisation name, and registration numbers (for example ARN or SEBI), address and logo you choose to add.
- Sign-in and security: encrypted credentials, session tokens, sign-in times and IP addresses, and a record of important actions (accepting our terms, exports, support access).
- Billing: plan, invoices and payment status. Payments are handled by our payment provider (Razorpay); we do not store card or UPI details.
- Connections you set up: your WhatsApp Business account identifiers, your sending domain and, if you choose, Google Calendar.
- Usage and support: which features are used, errors, and messages you send us. Error and log data are filtered to remove personal data.
11.3 Why we use it
To provide and secure Fleek CRM, to bill you, to support you, to meet legal obligations, to protect against misuse, and to improve the product using aggregate usage. We do not sell personal data and we do not use it to advertise.
11.4 Who receives it
Only service providers that help us run Fleek CRM, under contract: hosting, storage and backups, email and WhatsApp delivery (Meta and Brevo), payments (Razorpay) and, if you switch it on, Google Calendar. The full list for customer contact data is in the Data Processing Addendum. We may also disclose information where the law requires it. Some providers process data outside India.
11.5 How we protect it
Phone numbers, email addresses and message text in Fleek CRM are encrypted before storage, each customer’s data is kept separate, access is limited and recorded, and we have an incident process. Fleek staff cannot read customer contacts or messages except in a time-limited, audited exception that the customer can see and end.
11.6 How long we keep it
Customer and staff account information is kept while the account is active and for as long afterwards as the law or a dispute requires (for example invoices). A customer’s contacts and messages are kept for one month after the customer cancels and are then deleted, as explained in the Data Processing Addendum. Backups are overwritten within 4 days.
11.7 Cookies and similar storage
Fleek CRM stores a sign-in token and a few preferences in your browser so you stay signed in and your settings are remembered. We do not use advertising cookies.
11.8 The Fleek CRM Android app
Fleek CRM is also available as an Android app on Google Play. The app opens the same Fleek CRM service in a secure browser view on your phone, so everything in this section applies to it.
- The app itself requests no Android permissions. When a team member adds an image or video to a message template, or uploads a spreadsheet to import contacts, the phone’s file chooser asks them to pick the file, and only that file is used. The app does not use your location, your phone’s contact list, the camera or the microphone.
- The app keeps a sign-in token and a few preferences in the browser view on your phone, as described in 11.7. We do not use advertising cookies or advertising identifiers. If you sign in with Google, Google tells us your name and email address; we never receive your Google password.
- The app has no in-app purchases and collects no payment details. Your organisation’s plan is managed on our website.
- An organisation’s admin can ask us to delete the organisation’s account and data from the app (CRM Settings, then Your data) or at advisor.fleekfinance.in/delete-account. We reply within 7 days and delete within 30 days of confirming the request. What is deleted, and what we must keep, is explained on that page and in 11.6.
12. Metal ERP and the Tally+ Android app
Metal ERP (metal.fleekfinance.in) is billing, collections and ordering software for metal and bartan shops. Its Android app, listed on Google Play as Tally+, opens the same service in a secure browser view on your phone. This section explains how we handle personal data in Metal ERP and in the app.
12.1 Two kinds of personal data
- Information about a shop and its staff (the business that signs up and the people who log in). We decide why and how this is used, and this section explains it.
- Information a shop puts into Metal ERP about its own customers and suppliers, and the orders its customers place through a catalog link. The shop decides why and how this is used, and Fleek acts as the shop’s processor. If you are one of a shop’s customers, please contact that shop first; we will help it with any request you make.
12.2 What we collect
- Account details: firm name, user names and email addresses, each user’s role, and a password that is stored only in hashed form.
- Business records the shop enters or imports: customers and suppliers (name, phone number, address, GSTIN, opening balance), items, prices and photos, invoices and payments, payment reminders, purchase bills and supplier price lists the shop uploads.
- Orders through a catalog link: a customer who orders from a shop’s link gives their name and phone number and the items they want. No account or app is needed.
- Photos: when a user adds an item photo, the phone’s browser (Chrome) asks to use the camera or the gallery, only for that photo. Nothing is accessed in the background.
- Voice line (optional): when a team member taps the microphone on the invoice screen, the phone’s browser asks for microphone access. The audio is streamed through our server to our speech-to-text provider (Deepgram), which sends back the words we put on the invoice line. We do not store the recording.
- Tally data (optional): if a shop installs our Tally companion agent, we receive the ledgers, stock items and vouchers it syncs and, if the shop turns it on, a backup copy of its Tally company file.
- WhatsApp: when a shop sends an invoice, statement, reminder or order update by WhatsApp, we send the message and the recipient’s phone number to WhatsApp (Meta) and keep the delivery status.
- Technical data: IP address, browser or device type, and error and security logs.
The app does not use your location or your phone’s contact list, and it uses the microphone only when a team member uses the voice line. We do not run advertising and we do not sell personal data.
12.3 Why we use it
To provide Metal ERP (create invoices, track payments, send the messages a shop asks for, and sync with Tally), to keep it secure and fix faults, to meet legal obligations, and to answer your requests.
12.4 Who receives it
Only service providers that help us run Metal ERP, and only what the feature needs: our hosting provider and Cloudflare R2 (where the service and its files, such as photos, PDFs and Tally backups, are stored); WhatsApp (Meta), to deliver the messages a shop sends, and the Facebook SDK, which loads only on the screen where a shop connects its WhatsApp number; Google Fonts, from which your browser fetches the typefaces when a page opens; Deepgram, our speech-to-text provider, which receives the audio of the voice line and a short list of the shop’s most-used item names (so it recognises them) and returns text; and, if a shop switches on document reading, Anthropic, which reads the uploaded file to return a result. We may also disclose information where the law requires it. We do not share it with advertisers or data brokers.
12.5 How we protect it
Data travels over encrypted connections (HTTPS), each shop’s data is kept separate from other shops’, passwords are stored hashed, and access is limited to the people who need it to run the service. If there is a breach that affects a shop, we will tell the shop as the law requires.
12.6 How long we keep it
A shop’s data is kept while its account is active. If the shop closes its account or asks us to delete it, we delete the data within one month and backups are overwritten shortly afterwards. We may keep limited records for longer where the law requires it or to settle a dispute.
12.7 Deleting your account
A shop’s owner can ask us to delete the account and its data at metal.fleekfinance.in/delete-account, or by emailing contact@fleekfinance.in. Deletion is permanent, so download or export what you need first.
12.8 The Android app and browser storage
The app stores a sign-in token and a few preferences in the browser view on your phone so you stay signed in and your settings are remembered. We do not use advertising cookies or advertising identifiers. The app itself requests no Android permissions; when you add a photo, your phone’s browser asks for camera or gallery access, and when you use the voice line, for the microphone.