Privacy Policy

Information We Collect

We collect information to provide and improve coreCRM:

• Account information: Name, email, company name, and role when you create an account
• CRM data: Contacts, deals, invoices, emails, tasks, and other data you enter into the Service
• Integration credentials: OAuth tokens for connected services (Gmail, Zoho, Teamwork) — stored encrypted
• Usage analytics: How you interact with the Service to improve performance and features

How We Use Your Information

• Provide and maintain the CRM service, including contact management, deal tracking, and invoicing
• Sync data with your connected integrations (Gmail, Zoho, Teamwork, Mailgun)
• Generate reports and analytics on your pipeline, revenue, and team performance
• Send transactional emails (invoices, notifications, workflow alerts)

Data Security

We take the security of your data seriously:

• All data encrypted in transit (TLS 1.3) and at rest (AES-256)
• Integration credentials (OAuth tokens) are encrypted using Laravel's encryption
• Role-based access control ensures users only see data they're authorized to view
• Regular backups with point-in-time recovery capability

Data Sharing

We do not sell your data. We only share data when:

• You explicitly connect a third-party integration (Gmail, Zoho, Teamwork, Mailgun)
• Required by law, regulation, or legal process
• Necessary to protect the rights, safety, or property of our users or the public

Your Rights

• Access: Request a copy of all data we hold about you and your organization
• Export: Download your contacts, deals, invoices, and other CRM data at any time
• Deletion: Request complete deletion of your account and associated data
• Disconnect: Revoke any third-party integration access at any time from your settings

Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies or share cookie data with third parties. Analytics cookies, if used, are anonymized and help us understand how to improve the Service.