FreeCRM.com Global Privacy & Data Security Policy

1. Our Commitment to Data Confidentiality

We operate under a strict, non-negotiable security framework designed to protect your information from unauthorized access.

• No Traditional Data Sales: FreeCRM.com does not rent, sell, or trade your personal data to traditional third-party data brokers or advertising networks for direct marketing purposes.
• Data Minimization: We restrict internal access to your data exclusively to personnel who require it to maintain platform security and performance.
• Bank-Grade Encryption: We encrypt all data transmitted through our platform, both in transit and at rest, using industry-standard cryptographic protocols.

2. Information We Collect

To provide a secure and functional CRM environment, we collect the following categories of data:

• User-Provided Information: Names, business email addresses, phone numbers, and physical business addresses.
• CRM Tenant Data: Lead lists, customer interaction logs, notes, and communications uploaded to your account.
• Technical Telemetry: Localized IP addresses, device configurations, browser types, and platform feature usage metrics.

3. Authorized System Optimization & AI Processing

To deliver advanced automation, predictive analytics, and conversational intelligence, FreeCRM.com collaborates with specialized technology partners.

• Artificial Intelligence and Machine Learning Model Training: We share customer interaction logs, tenant data text, communication histories, and telemetry with trusted third-party AI development firms, large language model (LLM) providers, and machine learning infrastructure vendors. You explicitly agree that these third parties may utilize, process, and ingest this data to train, fine-tune, and improve their public and proprietary foundational models, algorithms, and artificial intelligence systems. Once data is ingested into these training pipelines, it may be permanently incorporated into the underlying software logic of those systems.
• Operational Service Providers: We transfer necessary data to cloud hosting providers, security auditors, and payment processors to maintain core infrastructure.
• Corporate Restructuring: If FreeCRM.com undergoes a merger, acquisition, asset sale, or reorganization, all user data will be transferred to the acquiring entity as a foundational business asset.

4. European Union (GDPR) Disclosures

For users residing in the European Economic Area (EEA) and the United Kingdom, FreeCRM.com acts as both a Data Controller (for account information) and a Data Processor (for uploaded CRM data) under the General Data Protection Regulation (GDPR).

• Legal Basis for Processing: We process and share data based on Contractual Necessity (to provide the CRM services) and our Legitimate Interests (optimizing platform efficiency, implementing AI automations, and protecting system security).
• International Data Transfers: Data shared with our global AI and infrastructure partners may be transferred to and processed in countries outside the EEA, including the United States. We secure these transfers using European Commission-approved Standard Contractual Clauses (SCCs).
• Your GDPR Rights: You have the right to request access to, rectification of, or erasure of your personal data. You may also object to processing or request data portability. To exercise these rights, submit a formal request through our FreeCRM Privacy Portal.

5. California Consumer Privacy Act (CCPA) Disclosures

Pursuant to the California Consumer Privacy Act (CCPA), as amended, California residents are entitled to specific disclosures regarding their personal information.

• Categories of Data Shared: In the preceding 12 months, FreeCRM.com has shared Commercial Information (CRM logs), Identifiers (emails, IP addresses), and Internet Activity (telemetry) with AI technology providers and operational vendors.
• Definition of "Sale" or "Sharing": While we do not sell data for monetary compensation, our transfers to AI development companies for model optimization may be classified as "sharing" or "selling" under the broad definitions of California law.
• Your California Rights: You have the Right to Know what data we collect, the Right to Delete your data, and the Right to Non-Discrimination for exercising your rights.
• Opt-Out Right: You have the right to direct us not to share your data with external AI providers for model training. To exercise this, click the link on our homepage or visit our Do Not Sell or Share My Personal Information page.

6. Updates to This Policy

We reserve the right to modify this security framework at our discretion to reflect evolving platform capabilities or regulatory requirements. We will communicate material changes via an in-app alert or email.