Privacy Policy

1. Introduction

CRM Infos (“we”, “us”, “CRM Infos”) provides a cloud-based, multi-industry CRM and lead-management platform. This Privacy Policy explains what personal data we collect, why we collect it, how we protect it and the choices you have. It is designed to meet the requirements of India’s Digital Personal Data Protection Act, 2023 and Rules, 2025, the Information Technology Act, 2000, and, where applicable, the EU/UK GDPR and the California CCPA/CPRA.

By creating an account or using the service you confirm that you have read this policy.

2. Our role and your role

We act in two roles:

• Account data (your name, email, phone, company, billing details): we are the Data Fiduciary / Controller.
• Customer Data (the leads, contacts, notes, call details and files you or your team add or import): you are the Data Fiduciary / Controller and we are your Data Processor. We process it only on your instructions to provide the service.

As our customer you are responsible for having a lawful basis and valid consent to upload your leads’ personal data to the CRM, and for responding to requests from your own leads. We will reasonably assist you with such requests.

3. Data we collect

4. How we use data

• To create your account, run the CRM and provide support and training.
• To process payments, send invoices and manage your subscription.
• To keep the service secure, prevent fraud and misuse, and fix bugs.
• To send service, security and billing notices. Marketing messages are sent only with your consent and you can opt out at any time.
• To comply with legal obligations and enforce our terms.

We do not sell personal data and we do not use Customer Data for advertising.

5. Sharing and integrations

We share data only when needed and only with:

• Service providers such as cloud hosting, email/SMS/WhatsApp delivery, analytics and payment gateways, under confidentiality and data-protection obligations.
• Integrations you enable (for example lead portals, Facebook Ads, WhatsApp, IndiaMART, Justdial, webhooks). Data flows to or from these services as you configure them and is governed by their own policies.
• Authorities when required by law, court order or to protect rights and safety.
• A successor in a merger or sale of the business, with notice to you.

6. International transfers

Our servers and providers may be located in India or other countries. Where personal data is transferred across borders we rely on contractual safeguards (such as Standard Contractual Clauses where GDPR applies) and on the transfer rules permitted under applicable Indian law. A Data Processing Addendum is available to business customers on request.

7. Retention, export and deletion

We keep account data while your account is active and for the period needed for legal, tax and accounting purposes. You can export your Customer Data yourself at any time while your plan or trial is valid; this is how we support your right to data portability. After the plan expires, export is not available. Expired accounts are retained for up to 30 days only to allow renewal and restoration, and are then permanently deleted or anonymised (and removed from backups within a reasonable further period), unless law requires longer retention. We will notify you at least 48 hours before final deletion. You may also ask us to delete your data earlier at any time.

8. Security and breach notification

We use reasonable administrative, technical and physical safeguards, including role-based access, protected password storage, access logging and restricted staff access. No system is completely secure. If a personal data breach affects you, we will notify you and, where required, the relevant authority (including the Data Protection Board of India) without undue delay, with details of what happened and the steps taken.

Please keep your login details confidential and use a strong password. Tell us immediately about any unauthorised access.

9. Your rights

Depending on where you live, you may have the right to: access and receive a summary of your data; correct or update it; erase it; withdraw consent at any time (as easily as it was given); nominate another person to exercise your rights; object to or restrict processing; data portability; opt out of sale/sharing (CCPA/CPRA, we do not sell data); and lodge a complaint with your data-protection authority.

To exercise a right, write to support@crminfos.com. We may verify your identity first. If you are a lead of one of our customers, please contact that business directly; we will assist them.

10. Cookies

We use essential cookies and local storage for log-in sessions and your theme preference, and limited analytics to improve the product. You can control cookies in your browser; blocking essential cookies may stop the CRM from working.

11. Children

The service is for businesses and is not directed at children under 18. We do not knowingly collect children’s data. If you believe a child has provided data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. The “Last updated” date shows the latest version. For material changes we will notify you by email or in the dashboard.

13. Contact and grievance redressal

CRM Infos
Update Soon
Email: support@crminfos.com
Phone / WhatsApp: +91 Update Soon

Grievance Officer: Grievance Officer, CRM Infos. We acknowledge complaints promptly and aim to resolve them within the time limits set by law. If you are not satisfied, you may approach the Data Protection Board of India or your local supervisory authority.