Information We Collect
We collect personal and business information such as name, email address, phone number, company details, and CRM data submitted through our platforms. We may also collect technical data including IP address, browser type, device information, and usage analytics.
CRM & Client Data
Our CRM and SaaS platforms may store customer records, leads, communications, call logs, and related business data. This data remains the property of our clients, and we process it solely to provide, maintain, and improve our services.
How We Use Information
We use collected data to deliver digital solutions, manage CRM operations, provide support, improve performance, enhance automation, and communicate service updates. We do not sell or rent personal data to third parties.
Data Security & Protection
We implement industry-standard security measures including encryption, secure cloud infrastructure, firewalls, role-based access control, and regular monitoring to protect data from unauthorized access, misuse, or disclosure.
Third-Party Integrations
Our services may integrate with trusted third-party providers such as payment gateways, hosting services, analytics tools, and communication platforms. These providers operate under strict confidentiality and data protection standards.
Data Retention
We retain data only for as long as necessary to fulfill service obligations, comply with legal requirements, or as directed by our clients using our CRM and SaaS systems.
Your Rights
You have the right to request access, correction, or deletion of your personal data. CRM clients may request export or removal of their stored business data at any time.
Policy Updates
We may update this Privacy Policy periodically to reflect changes in our services, technology, or legal requirements. Updates will be posted on this page with a revised effective date.
Mobile Application (Repoxa CRM App)
This section applies specifically to the Repoxa CRM mobile application available on Google Play.
Information Collected by the App
In addition to the information described above, the Repoxa CRM mobile app collects:
- Account information (name, email) when you register, log in, or sign in with Google
- Authentication tokens, stored securely on your device to keep you signed in
- Device push notification tokens (Firebase Cloud Messaging), used to send you reminders and updates
- CRM data you access or create through the app (leads, contacts, activities, reminders), synced with your Repoxa account
Biometric Authentication
If you enable Face/Fingerprint unlock, biometric data (such as your fingerprint or facial pattern) is processed entirely on your device using your device's secure hardware (Android Keystore). Repoxa Technologies does not have access to, collect, or store any biometric data on our servers.
Google Sign-In
If you choose to log in using Google Sign-In, we receive your name, email address, and profile information from Google, in accordance with Google's own privacy policy, to create or access your Repoxa account.
Push Notifications
We use Firebase Cloud Messaging (a Google service) to deliver notifications. This requires a device token, which is used solely to send you app-related notifications and is not shared with third parties for advertising purposes.
Permissions
The app may request permissions for notifications and, where applicable, biometric authentication. These permissions are used only for the purposes described above and can be managed or revoked at any time through your device settings.
Account and Data Deletion
You may request deletion of your account and associated data at any time by contacting [email protected]. We will process such requests in accordance with applicable law and our data retention obligations described above.
WhatsApp Business Platform
This section applies to the WhatsApp features of Repoxa CRM, including WhatsApp numbers, chats, templates and campaigns.
Information We Process
When a client connects a WhatsApp Business account, we process the WhatsApp Business Account ID, phone number ID, the connected business phone number and an access token, which is stored encrypted. When the client sends or receives messages through the CRM, we process the message content, the recipient's phone number, message templates and delivery status (sent, delivered, read, failed).
How We Use It
We use this information only to let our clients send and receive WhatsApp messages, run campaigns, show conversation history inside their CRM, and provide support. We do not sell this data, and we do not use message content for advertising.
Meta as a Service Provider
Messages are delivered through Meta's WhatsApp Business Platform (Cloud API). Meta processes this data under its own terms and privacy policy. Clients own their WhatsApp Business assets and can manage them in Meta's WhatsApp Manager.
Client Responsibilities
Our clients are responsible for having a lawful basis and the recipient's consent (opt-in) before messaging them, and for following WhatsApp's Business Messaging Policy. People who do not want to receive messages can tell the business that sent them, and the client can stop messaging them from within the CRM.
Data Deletion Instructions
To delete your account or WhatsApp-related data, email [email protected] from your registered email address with the subject "Data Deletion Request" and the phone number or account concerned. We will confirm the request and process it in line with applicable law and the retention terms above. Clients can also disconnect a WhatsApp number in their CRM settings, which stops further message processing for that number.
Contact Us
If you have any questions about this Privacy Policy or your data, please contact us at [email protected].