Privacy Policy

1Scope

This policy explains how CRM+ collects, uses, shares and protects personal data when you visit crmplus.space, use the dashboard, or interact with our AI agents.

2Data we collect

Account dataName, email address, phone number, company name.
Purpose: creating and securing your account.

Usage logsIP address, device or browser details, and timestamps.
Purpose: fraud prevention and product analytics.

Conversation dataChat transcripts and the files you upload to train the AI.
Purpose: delivering and improving AI responses.

Payment dataThe last four digits of your card and your billing address, processed by Stripe.
Purpose: billing and issuing VAT invoices.

Marketing dataEmail preferences.
Purpose: sending updates and offers, only with your consent.

CookiesSession cookies.
Purpose: remembering settings and measuring performance.

Country detectionWhen you open the pricing page, your IP address is sent in real time to the country.is service to determine your country only; we do not store the address.
Purpose: to show your country’s prices and currency automatically.

3Legal bases

We rely on:

Contract (Article 6(1)(b) GDPR) to provide the service.
Legitimate interests, to improve security and the user experience.
Consent, for marketing and optional model training.
Compliance with the laws of the GCC states.

4How we use personal data

Providing, maintaining and customising the AI agents.
Training models within your own workspace.
Fraud detection and security monitoring.
Billing and regulatory compliance.
Product research and analytics.
Marketing, with the option to unsubscribe at any time.

5Sharing and disclosure

We share personal data only with:

Processors working under contract, such as AWS, Vercel, OpenAI, Stripe and Twilio.
Integration partners you connect, such as HubSpot.
Authorities where legally required.
Prospective buyers in a merger, under a non-disclosure agreement.

6International transfers

Servers are hosted in AWS Bahrain and AWS eu-central-1. If data moves outside the Gulf or the European Union, we use Standard Contractual Clauses together with additional technical measures.

7Retention

Account data: the life of the account plus 3 years.
Chat transcripts: 24 months by default, configurable from 0 to 36 months.
Financial records: 7 years, for tax compliance.

8Security

We apply ISO 27001-aligned controls, TLS 1.3 encryption in transit, AES-256 at rest, role-based access, and annual penetration testing.

9Your rights

Subject to local law, you may request access, correction, erasure, portability, restriction, or object to processing. Email privacy@crmplus.space. We verify identity and respond within 30 days.

10Cookies and similar technologies

We use strictly necessary, functional and analytics cookies. You can manage your preferences from your browser or the cookie banner.

11Automated decision-making

AI output may constitute automated processing. No decision with legal or similarly significant effects is made without human review.

12Marketing communications

We send product updates or promotional messages only with your consent. You can unsubscribe at any time.

13Children's privacy

CRM+ is not directed at minors under 18. We do not knowingly process children's data.

14Changes to this policy

Material updates will be announced by email or in the dashboard at least 15 days before they take effect.

15Contact and complaints

Questions or complaints? Email support@crmplus.space. You may also lodge a complaint with your local data protection authority.