Privacy Policy

1. Who we are

CRM Bob is operated by Master 22 Solutions LLC. We are the controller of personal data used to provide and administer CRM Bob, except where we process customer-uploaded contact data on a customer's instructions. This policy explains what personal data we handle when you use CRM Bob and what you can do about it.

2. Data we collect

• Account data: your name, email address and workspace details, including profile information from Google when you sign in with Google.
• Customer data: the contacts, deals, campaigns and notes you choose to store in your workspace.
• Technical data - logs and diagnostic information generated when you use the app, used to keep it secure and working.
• Subscription data - your selected plan, subscription status, billing period and Paddle customer or subscription identifiers. Paddle collects and processes payment-card and billing details directly as Merchant of Record; CRM Bob does not receive your full card details.

3. How we use it

We use personal data to perform our contract with you by providing the Service and administering your subscription; for our legitimate interests in securing and improving CRM Bob, preventing fraud and responding to support requests; with your consent where required for marketing; and to meet legal obligations. We do not sell personal data.

4. Contacts you upload

When you import contacts, you are responsible for having a lawful basis to store and process their details. For that data you are the controller and we act as your processor, handling it only on your instructions.

5. Service providers

We share data only as needed with service providers that support cloud hosting, database infrastructure, authentication, analytics, customer support and email delivery. Paddle.com acts as our online reseller and Merchant of Record and processes information needed for sales, subscription management, payments, tax compliance, invoicing, customer service and refunds under its own privacy notice. We may also share data with professional legal or accounting advisers and with public authorities where required by law.

6. Security

Access to workspace data is restricted to authenticated members of that workspace using database-level access rules, and data is encrypted in transit. No system is perfectly secure, so please use a strong, unique password and tell us promptly if you suspect unauthorised access.

7. Retention

We keep account and workspace data while your account is active and for a reasonable period afterward to support recovery, security and legal obligations. Support and transaction records may be kept as long as required for tax, accounting, fraud prevention or dispute handling. Data is deleted or anonymised when it is no longer needed for these purposes.

8. Your rights

Depending on where you live, you may have the right to access, correct, erase or export your personal data; restrict or object to processing; withdraw consent; and complain to your local data-protection authority. Where applicable, you may also have a right to data portability. You can exercise these rights in the app or by contacting us. We generally respond to valid requests within one month where GDPR applies.

9. Cookies

We use essential cookies and similar browser storage to keep you signed in and secure. If analytics or marketing cookies are introduced, we will request consent where required and provide controls to manage those preferences. We do not use cookies to build advertising profiles.

10. International transfers

Some providers may process data outside your country, including outside the UK or European Economic Area. Where required, we rely on adequacy decisions, standard contractual clauses or other lawful safeguards for those transfers.

11. Changes and contact

If this policy changes we will update the date above and notify you of material changes. To ask a privacy question or make a request, contact Master 22 Solutions LLC at contact@master22solutions.com.