Privacy Policy

1. Introduction

Welcome to PermerCRM ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our PermerCRM platform (the "Service").

By accessing or using our Service, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

4. Lawful Basis for Processing

We process your personal data under the following legal bases:

• Consent: Where you have given clear consent for us to process your data for a specific purpose.
• Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
• Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party (e.g., improving our AI models), provided those interests are not overridden by your rights.

5. Your Data Rights

Depending on your location, you may have the following rights regarding your personal data:

• Right to Access: You can request a copy of the data we hold about you.
• Right to Rectification: You can ask us to correct inaccurate or incomplete data.
• Right to Erasure: You can request that we delete your data (the "Right to be Forgotten").
• Right to Data Portability: You can request to receive your data in a structured, machine-readable format.
• Right to Object: You can object to the processing of your data for specific purposes (e.g., direct marketing).

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. In the event of account deletion or prolonged inactivity, we maintain a 90-day retention period before permanently purging your data from our active systems, unless a longer period is required for legal or regulatory compliance.

7. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state or country. We ensure that such transfers are conducted with appropriate safeguards, such as Standard Contractual Clauses (SCCs), to protect your privacy.

8. Data Security

We implement industry-standard security measures to protect your information, including TLS/SSL encryption, strict access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.