Legal and commercial policy

Privacy Policy

How CRMExpert collects, uses, shares, secures and retains personal and business information.

Effective and last reviewed: 30 July 2026
This policy applies to services supplied under the CRMExpert brand by CRMExpert.

Information collected

We collect account identity, company and contact details, billing records, support conversations, device and usage logs, and business records submitted by authorised users.

Card, bank and UPI credentials are entered with the payment provider; we receive transaction reference, status, amount and limited billing information.

Purpose and lawful use

Information is used to deliver and secure the service, manage tenants and users, process payments, provide support, prevent fraud, send service notices and meet legal duties.

We do not sell customer business data or personal information.

Customer-controlled records

For leads, employees, patients, members and other records uploaded by a customer, that customer determines the purpose and must provide notices and obtain lawful consent.

Sharing and processors

Necessary information may be shared with contracted hosting, storage, analytics, email, payment, communications, support and AI providers, or where required by law or fraud prevention.

Cookies, logs and transfers

Essential cookies maintain login and security state. Logs may contain IP address, browser, device, route and timestamps.

Providers may process information in India or other regions where they operate, subject to appropriate contractual and technical safeguards.

Retention and security

Records are retained while the service is active and for reasonable recovery, accounting, dispute and legal periods. Backups expire under controlled schedules.

Controls include tenant authorisation, hashed passwords, encrypted transport, rate limits, audit records, monitoring and backups; no online system guarantees absolute security.

Your rights and choices

Subject to law and identity verification, you may request access, correction, export or deletion and withdraw optional marketing consent. Tax, fraud, security or contractual records may still require retention.

Children and grievances

The service is intended for businesses and authorised adults, not children. Customers using records of minors must follow applicable law.

Privacy questions and verified rights requests may be sent to the grievance contact below.

Include your registered account email and invoice or receipt number in billing requests. You can also use our contact/request form.