1. Overview & Commitment
At DataBridgeCRM ("we", "our", "us"), protecting your privacy and ensuring the security of your corporate and personal data is our highest priority. This Privacy Policy details how DataBridgeCRM collects, uses, stores, and protects information when you access our website, use our SaaS platform, CRM, ERP, and communication tools.
We adhere strictly to applicable global data protection regulations including GDPR, CCPA, and Indian Information Technology (IT) laws.
2. Information We Collect
We collect information to provide seamless services, account management, and security across our software ecosystem:
- Account & Registration Data: Name, business email address, phone number, company name, address, payment details, and user role allocations.
- Customer & Lead Data: Information uploaded or integrated by you into the DataBridgeCRM suite (e.g., lead contacts, sales pipelines, communication history).
- Usage & Diagnostic Data: IP addresses, browser types, operating system specs, feature usage logs, and system performance telemetry.
- Communication Data: Messages, feedback, support tickets, and API interaction logs.
3. How We Use Your Information
We process collected data exclusively for valid business purposes:
- To provision, operate, maintain, and enhance our CRM/ERP platform capabilities.
- To process subscription billing, issue invoices, and manage client transactions securely.
- To deliver critical system alerts, feature updates, and technical support responses.
- To monitor system integrity, detect fraud, prevent unauthorized access, and ensure server uptime.
- To train our internal AI assistants strictly on anonymized and non-sensitive aggregated telemetry, never on user raw personal records.
4. Data Sharing & Third Parties
We never sell, rent, or trade your personal or business data to third parties.
Data is shared only in the following necessary contexts:
- Trusted Subprocessors: Cloud infrastructure providers (AWS / Google Cloud), secure payment gateways (Stripe / Razorpay), and SMS/WhatsApp gateway partners.
- Legal & Regulatory Compliance: When required by court order, law enforcement request, or legal process to comply with valid legal obligations.
- Business Transfers: In the event of a merger, acquisition, or sale of company assets, client data remains bound by the protections of this policy.
5. Data Security Standards
DataBridgeCRM implements enterprise-grade security protocols to prevent unauthorized access, alteration, disclosure, or destruction of data:
- Encryption: AES-256 encryption at rest and TLS 1.3 encryption in transit.
- Access Control: Multi-factor authentication (MFA), role-based access control (RBAC), and strict internal data isolation.
- Backups: Redundant automated daily backups stored securely across isolated cloud availability zones.
6. Your Rights & Data Control
Depending on your jurisdiction, you possess the following rights regarding your data:
- Right to Access & Export: Request a complete copy of your stored personal and account data in a structured format (JSON/CSV).
- Right to Correction: Update inaccurate or incomplete account details directly through account settings or support.
- Right to Erasure (Right to be Forgotten): Request permanent deletion of your account and associated storage records upon subscription termination.
7. Cookies & Tracking Technologies
We use essential cookies to maintain user session state, remember user interface preferences, and analyze traffic performance. You may disable non-essential cookies via your browser settings without disabling essential platform functionality.
