Privacy Policy

This explains what we collect and how we protect it. This is a starting template, have it reviewed by legal counsel before launch.

What we collect

Account details (name, email), the CRM data you enter (contacts, deals, tickets, messages), and basic usage/security logs. We don’t sell your data.

How it’s protected

Data is encrypted in transit (TLS) and at rest. Each customer’s data is isolated by organization and access is role-controlled. Files are served via short-lived signed URLs. See our security overview for details.

Cookies

We use a single essential cookie to keep you signed in, plus local storage for preferences (like theme). We don’t use third-party advertising/tracking cookies.

Subprocessors

We rely on infrastructure providers (e.g. hosting, database/storage, email delivery, and AI processing) strictly to operate the Service. They process data on our behalf under their own safeguards.

Your rights

You can export your data, correct it, or delete it. Workspace owners can permanently delete the entire workspace from Settings. Email privacy@theecrm.com for any request.

Retention

We keep data while your account is active and delete it on request or after account closure, subject to legal obligations.