Privacy Policy

1. Who we are and our role

PerfectCRM is operated by MNARS MARKETING AGENCY PRIVATE LIMITED, registered at F-110, Sector-36, Greater Noida, Uttar Pradesh 201310, India. For website visitors, account holders, billing contacts and our own business operations, we act as the data controller.

A PerfectCRM customer controls the lead, contact, customer, conversation and form-submission data placed in its workspace. For that data, we generally act as its service provider or data processor and follow its documented instructions.

2. Information we collect

• Account and workspace data: name, email address, mobile number, authentication identifiers, organisation, role, preferences and support communications.
• CRM data: lead and customer contact details, notes, stages, follow-ups, purchases, revenue, lifetime value, reviews and consent records supplied by the customer or its authorised sources.
• Forms and attribution: submitted answers, landing URL, referrer, UTM and custom campaign parameters, consent and anti-abuse signals.
• Connected-platform data: authorised Meta business, Page, ad-account, Pixel, campaign, lead-form and WhatsApp Business identifiers; messages, message status, templates, permitted assets and performance data where enabled.
• Technical data: IP-derived security information, browser/device information, timestamps, audit events, diagnostics and usage necessary to operate and protect the service.
• Billing data: plan, invoice, tax, transaction and payment-status information. Complete card, bank or UPI credentials are handled by the payment provider and are not stored by PerfectCRM.

3. How and why we use data

• Provide authentication, tenant-isolated workspaces, CRM, forms, reporting, messaging, automations and customer support.
• Carry out the workspace owner’s authorised instructions, including permitted Meta/WhatsApp synchronisation and conversion reporting.
• Process subscriptions, maintain invoices and prevent payment or account abuse.
• Secure the service, troubleshoot errors, keep audit history and meet legal obligations.
• Improve product reliability using aggregated or de-identified operational information. We do not sell personal data.

4. Legal grounds and customer responsibility

Depending on the context, processing is based on performance of a contract, consent, compliance with law, or legitimate interests such as security and service improvement. Workspace owners remain responsible for providing required notices, collecting valid consent, respecting opt-outs and ensuring they have authority to upload contacts, send messages, connect advertising assets and instruct us to process customer data.

5. Meta and WhatsApp platform data

PerfectCRM requests only permissions needed for features the user chooses. Connected data is used to display authorised assets, receive leads or messages, report outcomes, and operate requested workflows. It is not used for unrelated advertising or sold to third parties.

You may disconnect an integration from PerfectCRM and remove PerfectCRM from Meta Business Integrations. Disconnection stops future access but does not by itself delete CRM records already retained under the workspace’s lawful instructions. Use our Data Deletion page to request deletion.

6. Sharing and service providers

We disclose data only to authorised workspace members; infrastructure, authentication, communications, analytics, support and payment providers under appropriate terms; connected services at the user’s direction; professional advisers; and authorities where required by law. Current core infrastructure includes Google Cloud and Firebase. Meta Platforms processes data under its own terms when its services are connected.

7. International processing

Some providers may process information outside India. Where required, we use contractual, organisational and technical safeguards and limit transfers to what is necessary for the service.

8. Retention

Account and workspace data is kept while the service is active and for reasonable legal, tax, security and dispute-resolution periods afterward. Customer-controlled CRM data follows the workspace’s instructions and configured retention. Audit, invoice and security records may be retained where legally necessary. Protected backups expire under their normal rotation schedule after deletion from active systems.

9. Security

We use tenant isolation, access controls, least-privilege service identities, encryption in transit, protected secret storage, audit logging, backups and operational monitoring. No system can guarantee absolute security. Users must protect credentials, enable appropriate account security and report suspected misuse promptly.

10. Your choices and rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability or withdrawal of consent. Workspace CRM requests should normally be directed first to the business that collected the information; we assist that business where required. Marketing and WhatsApp opt-outs must be honoured by the relevant workspace.

11. Children

PerfectCRM is a business service and is not directed to children. Customers must not use it to collect children’s personal data without all notices, authority and parental consent required by law.

12. Cookies and local storage

We use essential browser storage for authentication, security, session continuity and user preferences. Any non-essential analytics or advertising technology will be subject to applicable notice and consent requirements.

13. Changes to this policy

We may update this policy to reflect product, provider or legal changes. The current version and effective date will remain published here. Material changes will be communicated where required.