Privacy Policy | CRMLead Pro

1. Introduction

DevLogic Technologies Pvt Ltd ("DevLogic", "we", "us", or "our") operates CRMLead Pro, available at crmleadpro.in. We are committed to protecting the personal data of our users and complying with applicable data protection laws, including the Information Technology Act, 2000 (India) and, where applicable, the EU General Data Protection Regulation (GDPR).

This Privacy Policy explains what data we collect, how we use it, how we store it, and your rights regarding that data. By using CRMLead Pro, you agree to the practices described in this policy.

2. Data Controller

The data controller for personal data processed through CRMLead Pro is:

DevLogic Technologies Pvt Ltd
Bengaluru, Karnataka, India
Website: devlogichtechnologies.in
Privacy contact: privacy@crmleadpro.in

3. Data We Collect

We collect the following categories of personal data:

Account & Identity Data: Name, email address, phone number, company name, and role — collected when you register or update your profile.
Usage & Activity Data: Pages visited, features used, session duration, IP address, browser type, and device information — collected automatically via cookies and server logs.
Customer & Lead Data (CRM Content): Data you import or enter into CRMLead Pro about your own customers and leads. You are the controller of this data; we process it as a data processor on your behalf.
Payment & Billing Data: Billing name, address, GST number, and payment method details. Card data is processed by PCI-DSS-compliant payment gateways (e.g., Razorpay); we do not store raw card numbers.
Communications Data: Support tickets, emails, and chat messages you send to us.
Cookies & Tracking: Session cookies, analytics cookies (e.g., anonymised Google Analytics), and preference cookies. You can manage cookie preferences via our Cookie Settings.

4. How We Use Your Data

We use your personal data to:

Provide, operate, and improve the CRMLead Pro platform
Process your subscription payments and issue GST-compliant invoices
Send transactional communications (account alerts, invoices, security notices)
Send product updates and marketing communications (with your consent; you may opt out at any time)
Provide customer support and respond to enquiries
Detect, prevent, and investigate fraud, abuse, or security incidents
Comply with legal obligations under Indian law and applicable regulations
Perform analytics to understand usage patterns and improve the service

5. Legal Bases for Processing (GDPR)

Where GDPR applies (EU/EEA users), we rely on the following legal bases:

Contract: Processing necessary to perform our agreement with you (e.g., delivering the service, processing payments).

Legitimate Interests: Improving the service, preventing fraud, and sending product-related communications.

Consent: Marketing emails and non-essential cookies — you may withdraw consent at any time.

Legal Obligation: Compliance with Indian tax law, court orders, and other legal requirements.

6. Data Storage & Residency

Your data is stored on servers located in India. We use Google Cloud Platform (GCP) India region (asia-south1 — Mumbai) as our primary infrastructure provider. Backups are encrypted and stored within the same region. We do not transfer your personal data outside of India except where necessary for the provision of the service (e.g., email delivery via Resend, which uses EU servers). Such transfers are governed by appropriate data transfer mechanisms.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we retain data for up to 90 days before permanent deletion, except where longer retention is required by law (e.g., financial records for 7 years as required under Indian tax laws).

8. Third-Party Sharing

We do not sell your personal data. We share data only with:

Service providers (e.g., Razorpay for payments, Resend for email, Google Cloud for hosting) under strict data processing agreements
Legal authorities when required by law, court order, or to protect our rights
Business successors in the event of a merger or acquisition (with prior notice)

9. Your Rights

Depending on your location, you have the following rights:

Access

Request a copy of your personal data we hold.

Rectification

Correct inaccurate or incomplete data.

Erasure

Request deletion of your data ("right to be forgotten").

Portability

Receive your data in a machine-readable format.

Restriction

Request we limit processing of your data.

Objection

Object to processing based on legitimate interests.

Withdraw Consent

Withdraw consent for marketing at any time.

Lodge a Complaint

File a complaint with a supervisory authority (EU) or the Indian IT regulator.

To exercise these rights, email us at privacy@crmleadpro.in. We will respond within 30 days.

10. Security

We implement industry-standard security measures including AES-256 encryption at rest, TLS 1.3 in transit, role-based access controls, multi-factor authentication, and regular penetration testing. See our Security Policy for full details.

11. Cookies

We use essential cookies (required for the service to function), analytical cookies (anonymised, to understand usage), and preference cookies. Non-essential cookies require your consent. You can manage cookies via your browser settings or our cookie consent banner.

12. Children's Privacy

CRMLead Pro is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have inadvertently collected data from a minor, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notification at least 14 days before the changes take effect. Continued use of CRMLead Pro after the effective date constitutes acceptance.

14. Contact Us

For any privacy-related queries or to exercise your rights, contact our Privacy Team at privacy@crmleadpro.in.