1. Introduction
Welcome to Absterco CRM ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our customer relationship management platform.
By using Absterco CRM, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, and password when you create an account
- Profile Information: Job title, company name, and other professional details
- Business Data: Customer contacts, deals, communications, and other CRM data you input
- Payment Information: Billing details processed through secure third-party payment processors
2.2 Information Collected Automatically
- Usage Data: Pages visited, features used, time spent on the platform
- Device Information: IP address, browser type, operating system
- Cookies: Session cookies for authentication and preferences
- Log Data: Server logs, error reports, and security events
2.3 Information from Third Parties
- Google OAuth: Email address, name, and profile picture when you sign in with Google
- Integration Partners: Data from connected services (email, calendar, etc.)
3. How We Use Your Information
We use your information to:
- Provide, operate, and maintain our CRM platform
- Authenticate your identity and manage your account
- Process your transactions and send you related information
- Send you technical notices, updates, and support messages
- Respond to your comments, questions, and customer service requests
- Monitor and analyze usage patterns to improve our services
- Detect, prevent, and address technical issues and security threats
- Comply with legal obligations and enforce our terms of service
4. Data Security
We implement industry-standard security measures to protect your data:
- Encryption: Data encrypted in transit (TLS/SSL) and at rest (AES-256)
- Authentication: Secure passwordless OTP and OAuth 2.0 authentication
- Access Controls: Role-based access control (RBAC) and multi-tenant data isolation
- Monitoring: 24/7 security monitoring and incident response
- Backups: Regular automated backups with point-in-time recovery
- Compliance: SOC 2 Type II compliance (in progress)
5. How We Share Your Information
We do not sell your personal information. We may share your information in the following circumstances:
- With Your Consent: When you explicitly authorize us to share data
- Service Providers: Third-party vendors who assist in operating our platform (hosting, analytics, payment processing)
- Legal Requirements: When required by law, court order, or government request
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- Organization Members: Data you input is shared with other members of your organization
6. Data Retention
We retain your information for as long as your account is active or as needed to provide you services. You may request deletion of your account at any time, after which we will delete or anonymize your data within 30 days, except where retention is required by law.
7. Your Privacy Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and data
- Portability: Export your data in a machine-readable format
- Objection: Object to certain processing of your data
- Withdraw Consent: Withdraw consent for data processing where applicable
To exercise these rights, please contact us at privacy@absterco.com
8. Cookies and Tracking
We use cookies and similar tracking technologies to:
- Maintain your session and keep you logged in
- Remember your preferences and settings
- Analyze how you use our platform to improve performance
- Prevent fraud and enhance security
You can control cookies through your browser settings, but disabling cookies may affect functionality.
9. Third-Party Services
Our platform integrates with third-party services:
These services have their own privacy policies, and we encourage you to review them.
10. International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:
- Standard Contractual Clauses approved by the European Commission
- Data Processing Agreements with third-party processors
- Compliance with GDPR, CCPA, and other applicable privacy laws
11. Children's Privacy
Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us, and we will take steps to delete such information.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the new policy on this page with an updated "Last Updated" date
- Sending you an email notification (for significant changes)
- Displaying a prominent notice within the platform
Your continued use of the platform after changes become effective constitutes acceptance of the revised policy.
13. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us: