Security and safety
Automation that spends money must be secure and predictable. These are the principles and controls we build on.
Respecting your IndiaMART account
No IndiaMART passwords
The extension works inside the session you signed in to yourself. We never ask for, store or transmit your IndiaMART password.
No bypassing of security checks
CAPTCHAs, verification steps, sign-in pages and access controls are never bypassed. Automation pauses and asks you to act.
Only permitted interactions
The extension performs the same actions available to you in the seller panel, at the pace your limits allow.
Protecting your data
Encrypted connections
All traffic between your browser, the extension and our servers uses HTTPS (TLS).
Password hashing
Account passwords are hashed with Argon2id. They are never stored or logged in readable form.
Short-lived sessions
Access tokens expire after 15 minutes; refresh tokens rotate on each use and a reused token ends the session.
Organization isolation
Every record belongs to one organization, and every request is checked against it on the server.
Revocable browser access
Each browser gets its own credential and short-lived license. Revoking it stops automation on that browser at once.
Audit log
Sign-ins, setting changes, device connections and automation controls are recorded.
Data minimization
Only the lead details needed for filtering are read. Buyer names are not collected by default.
Retention limits
Activity and lead records are deleted automatically after their retention period.
Rate limiting
Sign-in and other sensitive endpoints are rate limited to slow down password-guessing attacks.
Protecting your budget
Server-enforced limits. Daily and hourly limits are counted on the server, so several browsers cannot exceed them together.
One action per lead. Duplicates are blocked by a database constraint, not just by the browser.
Fail safe. Offline, uncertain or failed situations never lead to an automatic retry.
Emergency stop. Available to every team member, effective for the next lead.
Reporting a security issue
If you believe you have found a security vulnerability, please email support@buyleadpilot.com with the details. Please do not test against other customers’ data. See also our privacy policy.
Try it on your own leads, in Test Mode
See which leads your filters would buy before anything is purchased. 14-day trial, no card required.