Template notice: this document is a template and has not been reviewed by a lawyer. It is not final.
Privacy Policy
Last updated: [DATE]
This policy explains what information we collect and how we use it.
1. Who we are
[LEGAL ENTITY NAME] operates 44CRM Next. Contact: support@example.com.
2. Information we collect
Account information (name, email, company name, hashed password); the Customer Data you enter (contacts, accounts, tasks, notes and communication log entries); billing information handled by our payment processor [to be named]; and technical data such as IP address, browser and usage logs needed to run and secure the Service.
3. How we use information
To provide, secure, support and improve the Service; to process payments; to communicate with you about your account; and to meet legal obligations. We do not sell personal information and do not use advertising trackers on our website.
4. Customer data
You are the owner of Customer Data and we process it on your behalf. See the Terms of Service. Each company's data is isolated from other companies' data.
5. Sharing
We share information only with service providers that help us operate the Service (such as hosting and email delivery [list providers]), when required by law, or in a business transfer. Providers are bound to protect it.
6. Security
Connections use HTTPS. Data is separated per company at the application and database level, passwords are stored hashed, and key actions are recorded in an audit log. No method of transmission or storage is completely secure. [Add encryption-at-rest, backup and incident-response details once confirmed.]
7. Cookies
We use a signed, essential session cookie to keep you signed in. This website does not use analytics or advertising cookies [confirm before adding any].
8. Retention and deletion
We keep data while your account is active and for [30] days after cancellation, then delete or anonymize it, except where we must retain it by law. Backups age out on a rolling schedule.
9. Your rights
Depending on where you live you may have rights to access, correct, export or delete your personal information. Contact us to exercise them. If you are a contact in a customer's CRM, please contact that customer first. [Add GDPR/CCPA specifics as applicable.]
10. Children
The Service is not directed to children under 16 and we do not knowingly collect their information.
11. Changes and contact
We will post updates here with a new date. Questions: support@example.com.