Privacy Policy

Data we collect

• Account data: name, email, company name, and a hashed password.
• CRM data you enter: leads, clients, projects, units, contracts, payments, notes.
• Connected-channel data (with your consent): when you connect a Facebook Page, Instagram professional account, or Telegram bot, we receive the Page/account identifiers, an access token, and the content of messages sent to your connected accounts, so we can show them as leads and let you reply from the CRM.
• Technical data: basic logs needed to operate and secure the service.

How we use data

• To provide the CRM: capture inbound messages as leads and let you reply.
• To display Page/account status and, where authorized, page and campaign insights.
• To operate, secure, and support the service.

We do not sell your data or the data of your customers, and we do not use CRM data for advertising.

Cookies, analytics and advertising on our public pages

Our public pages — the home page, sign-in, registration and these legal pages — use two tools that set cookies and record visits: Meta Pixel (Meta Platforms Ireland Ltd.) and the LoudPilot tag. They record the pages you view, the ad or campaign you came from, and when you send our contact form or create an account; the contact form’s e-mail or phone number is passed to LoudPilot so we can follow up on your request. We use this to measure and improve our advertising. These tools are not used inside the CRM, client or broker workspaces.

You can block or delete these cookies in your browser, and control Meta ads in your Facebook ad settings.

Sharing and processors

We share data only with service providers who process it on our behalf to run the platform — currently our cloud infrastructure provider DigitalOcean, LLC (hosting, database, storage), and on our public pages Meta and LoudPilot (see above). We do not otherwise disclose personal data to third parties except where required by law.

Data retention & security

Data is stored on our provider’s infrastructure and encrypted in transit (TLS). Access tokens are stored server-side and never exposed to the browser. We retain data for as long as your account is active or as needed to provide the service.

Your rights & data deletion

You can disconnect any channel at any time in Settings → Integrations (“Remove”), which deletes the stored access token for that channel. To request deletion of your account and all associated data, see our Data Deletion instructions or email us. You may also request access to or correction of your data.

Contact

UPLA — [email protected]