Privacy Policy

1. Information We Collect

• Account data: name, work email, password hash, role, and organization details you provide at signup.
• Customer Data: contacts, opportunities, projects, emails, and other records your team enters to use the Service.
• Billing data: subscription plan and invoice history.
• Usage data: log data, device/browser information, and product analytics needed to operate and improve the Service.

2. How We Use Information

We use collected information to:

• Provide, maintain, and secure the Service;
• Process payments and manage subscriptions;
• Send transactional emails (invites, notifications, billing receipts) and, where you've opted in, product updates;
• Power automated lead scoring and opportunity health scoring based on your account's own record data;
• Comply with legal obligations and enforce our Terms of Service.

3. Third-Party Processors

We share data with the following categories of processors, solely to operate the Service:

• Email delivery: our transactional email provider — delivers invites, notifications, and receipts on our behalf.
• Infrastructure: our cloud hosting and database providers, who store data at rest.

We do not sell personal information.

4. Cookies

We use essential cookies/local storage to keep you signed in and remember preferences (e.g. theme). We do not use third-party advertising trackers on the authenticated application.

5. Data Retention

We retain Customer Data for as long as your account is active. Following cancellation or termination, Customer Data is retained for 30 days to allow export or reactivation, after which it is deleted, except where longer retention is required by law (e.g. billing records).

6. Security

We apply industry-standard safeguards including encryption in transit, hashed credentials, role-based access control, and tenant data isolation. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Under Jamaica's Data Protection Act, 2020 — and equivalent rights if you're located elsewhere (e.g. GDPR, CCPA) — you have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing.

• Export: a workspace admin can download a full export of your workspace's data at any time from Settings → Privacy & Data, with no need to file a request.
• Deletion: a workspace admin can request permanent deletion of the entire workspace from the same page — this is scheduled 14 days out and can be cancelled any time before then.
• Individual records: to correct or delete your personal data specifically (rather than the whole workspace), or for any other request, contact us at the address below; we will respond within the timeframe required by applicable law.

8. International Transfers

Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers of personal data.

9. Children's Privacy

The Service is intended for business use and is not directed to individuals under 16. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or in-app notice before taking effect.

11. Contact

Privacy questions or data requests can be sent to [email protected].