Privacy Policy

1. Introduction

UpCRM ("we," "our," or "us") is a customer relationship management platform that helps businesses manage clients, companies, invoices, and communications. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

We collect information necessary to provide and improve our services:

• Account information: Email address, name, and role when you sign in
• Business data: Client details, company information, invoices, notes, and alerts you create
• Email integration: When you connect Gmail, we store access tokens to send and read emails on your behalf; we do not store email content beyond what is necessary for the service
• Telegram: If you connect your Telegram account, we store your Telegram ID for notifications and bot features
• Usage data: Logs and analytics to improve our platform and troubleshoot issues

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the UpCRM platform
• Authenticate users and manage access
• Process invoices and send emails on your behalf
• Deliver notifications via Telegram and the dashboard
• Power AI features for chat assistance and invoice extraction
• Support multi-organization and multi-tenant data isolation
• Comply with legal obligations and respond to lawful requests

4. Data Storage and Security

Your data is stored securely using industry-standard hosting (e.g., Supabase, Vercel). We use encryption in transit (HTTPS) and at rest. Access to data is restricted by role and organization. We do not sell your personal information to third parties.

5. Third-Party Services

We integrate with third-party services to provide functionality:

• Supabase: Database and authentication
• Google (Gmail): Email sending and reading
• Telegram: Notifications and bot
• Anthropic (Claude): AI chat and invoice OCR

Each service has its own privacy policy. We recommend reviewing them when you use these integrations.

6. Retention and Deletion

We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data by contacting us. Some data may be retained where required by law.

7. Your Rights

Depending on your location, you may have the right to:

• Access and receive a copy of your data
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability

To exercise these rights, contact us using the details below.

8. Cookies

We use essential cookies for authentication and session management. These are required for the platform to function. We do not use third-party advertising cookies.

9. Changes

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Continued use of UpCRM after changes constitutes acceptance.

10. Contact Us

For questions about this Privacy Policy or your data, please contact us at the address or email provided by your organization administrator.