Privacy Policy

1. Introduction

Welcome to 247 CRM, operated by Flex Tech Design ("Company", "we", "us", or "our"). We are committed to protecting your privacy and ensuring the security of your personal information.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our CRM platform and WhatsApp messaging integration services (the "Service").

By using our Service, you consent to the data practices described in this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, company name, phone number, and password when you create an account.
• Business Data: Companies, contacts, deals, tasks, notes, and other CRM data you enter into our system.
• WhatsApp Messages: Text messages and voice notes you send to our WhatsApp Business number for CRM interactions.
• Payment Information: Billing details processed through our secure payment providers (we do not store full credit card numbers).

2.2 Information Collected Automatically

• Usage Data: How you interact with our Service, including features used, pages visited, and actions taken.
• Device Information: IP address, browser type, operating system, and device identifiers.
• Cookies and Tracking: We use cookies and similar technologies to improve user experience and analyze usage patterns.

2.3 Information from Third Parties

• WhatsApp/Meta: Phone number and profile information when you connect via WhatsApp.
• Authentication Providers: Basic profile information if you sign in using third-party authentication.

3. How We Use Your Information

We use the information we collect to:

• Provide the Service: Process your CRM data, facilitate WhatsApp conversations, and deliver AI-powered responses.
• Process Voice Notes: Transcribe audio messages using AI transcription services to enable voice-based CRM interactions.
• Improve Our Service: Analyze usage patterns to enhance features, fix bugs, and develop new functionality.
• Communicate with You: Send service updates, security alerts, and support messages.
• Ensure Security: Detect and prevent fraud, abuse, and unauthorized access to your account.
• Comply with Legal Obligations: Meet legal requirements and respond to lawful requests from authorities.

4. WhatsApp Messaging Consent

By registering your phone number with 247 CRM and initiating conversations via WhatsApp, you expressly consent to:

• Receiving automated responses from our AI-powered CRM assistant.
• Having your messages processed to understand intent and execute CRM actions.
• Having voice notes transcribed for text-based processing.
• Receiving service notifications and updates via WhatsApp.

Opt-Out: You can stop receiving WhatsApp messages at any time by sending "STOP" to our business number, removing your phone number from your profile settings, or contacting our support team.

5. Data Sharing and Disclosure

We may share your information with:

5.1 Service Providers

• Meta/WhatsApp: To enable WhatsApp Business messaging functionality.
• AI Providers (OpenAI/Anthropic): To process natural language and generate intelligent responses.
• Cloud Infrastructure (Supabase/Vercel): To host and deliver our Service.
• Payment Processors: To handle billing and subscriptions.

5.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

6. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: All data is encrypted in transit (TLS/SSL) and at rest (AES-256).
• Access Controls: Strict role-based access controls limit who can access your data.
• Multi-Tenant Isolation: Your data is logically separated from other customers using row-level security.
• Regular Audits: We conduct regular security assessments and penetration testing.
• Secure Infrastructure: We use enterprise-grade cloud providers with SOC 2 compliance.

7. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Upon account deletion:

• Active CRM data is deleted within 30 days.
• Backups are purged within 90 days.
• Anonymized analytics data may be retained indefinitely.
• Legal or compliance records may be retained as required by law.

8. Your Rights

Under applicable data protection laws (including GDPR), you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data ("right to be forgotten").
• Portability: Request your data in a portable, machine-readable format.
• Restriction: Request limitation of processing in certain circumstances.
• Objection: Object to processing based on legitimate interests.
• Withdraw Consent: Withdraw consent for processing at any time.

To exercise these rights, please contact us at privacy@247crm.co or use the settings in your account dashboard.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States and European Union. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission, to protect your data in compliance with applicable laws.

10. Children's Privacy

Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete such information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: