Privacy Policy

CRM (“Company”, “we”, “us”, or “our”) operates CRM. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully.

We collect information that you provide directly to us, including:

• Account registration information (name, email address, company name, password)
• Billing information (processed securely via Stripe — we do not store full card numbers)
• Content you upload or create within the Service (contacts, emails, notes, call logs)
• Communications you send to us (support requests, feedback)

We also collect information automatically, including:

• Log data (IP address, browser type, pages visited, time and date of visits)
• Usage data (features used, actions taken within the Service)
• Device information (hardware model, operating system, unique device identifiers)
• Cookies and similar tracking technologies

We use the information we collect to:

• Provide, operate, and improve the Service
• Process transactions and send related information (receipts, invoices)
• Send administrative communications (account updates, security alerts)
• Respond to your comments and questions and provide customer support
• Monitor and analyze usage patterns and trends
• Detect, investigate, and prevent fraudulent activity and security incidents
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your contact data (your customers' data) for any purpose other than providing the Service to you.

We share data with trusted third-party providers who assist in operating our Service. These providers are contractually obligated to protect your data and may only use it as directed by us:

• Stripe — Payment processing. When you provide payment information, it is transmitted directly to Stripe using TLS encryption. We do not store credit card numbers. See Stripe's Privacy Policy.
• Twilio — SMS and voice calling features. Contact phone numbers and message content are transmitted through Twilio to deliver communications on your behalf. See Twilio's Privacy Policy.
• Resend — Email delivery. Email content and recipient addresses are processed through Resend to deliver emails on your behalf. See Resend's Privacy Policy.

We retain your account information for as long as your account is active or as needed to provide you the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except as required by law or for legitimate business purposes (such as resolving disputes or enforcing agreements).

Contact data you import and store in the Service (your customers' data) is deleted within 30 days of account termination upon request.

We implement reasonable technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted connections (TLS), hashed passwords, and regular security reviews.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

Depending on your location, you may have certain rights regarding your personal information, including:

• Access — Request a copy of the personal information we hold about you.
• Correction — Request correction of inaccurate or incomplete data.
• Deletion — Request deletion of your personal information (right to be forgotten).
• Portability — Request a machine-readable export of your data.
• Objection — Object to certain processing of your data.
• Restriction — Request restriction of processing in certain circumstances.

To exercise any of these rights, please contact us at support@example.com. We will respond within 30 days.

We use session cookies to authenticate users and maintain login state. We do not use third-party tracking cookies for advertising purposes. You can configure your browser to refuse cookies, but this may prevent you from using certain features of the Service.

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete that information.

This Privacy Policy is governed by the laws of the State of Florida, United States, consistent with our Terms of Service. We comply with applicable U.S. federal and state privacy laws and make good-faith efforts to accommodate GDPR requirements for users in the European Economic Area.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a notice on the Service at least 30 days before the changes take effect. Continued use of the Service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our privacy practices, please contact us: