Privacy Policy

Information you provide

• Account information — name, email address, password, profile photo, and workspace details when you register.
• Workspace content — contacts, deals, tasks, documents, chat messages, invoices, and time entries that you or your team add to the platform.
• Billing information — subscription plan, billing contact, and payment details. Card numbers are processed by our payment providers and never stored on our servers.
• Communications — messages you send to our support team, survey responses, and newsletter subscriptions.

Information collected automatically

• Usage data — pages viewed, features used, and actions taken on our website and within the platform.
• Device data — IP address, browser type, operating system, and device identifiers.
• Cookies and similar technologies — see our Cookie Policy for details.

Information from integrations

When you connect third-party channels such as WhatsApp, Instagram, or Facebook Messenger, we receive messages, contact profiles, and related metadata from those platforms so that your automations and inbox can work. This data is processed on your behalf and according to your instructions.

• Provide, operate, and maintain the platform;
• Process transactions and manage subscriptions;
• Deliver chat automation, AI-assisted replies, and workflow features you configure;
• Send service announcements, security alerts, and support replies;
• Send marketing communications where you have opted in (you can unsubscribe at any time);
• Monitor performance, debug errors, and improve our services;
• Detect, prevent, and address fraud, abuse, and security issues;
• Comply with legal obligations.

For account, billing, and usage data, MrGeeksCRM acts as a data controller. For content your workspace stores in the platform — such as your customers' contact details and chat conversations — the workspace owner is the controller and MrGeeksCRM acts as a data processor, handling that data only on the workspace's instructions. See our GDPR page for more on this distinction.

Where the GDPR or similar laws apply, we process personal data under:

• Contract — to provide the services you signed up for;
• Legitimate interests — to secure, improve, and market our services in ways you would reasonably expect;
• Consent — for optional cookies and marketing emails;
• Legal obligation — for tax, accounting, and compliance requirements.

We do not sell personal data. We share information only with:

• Service providers — hosting, payment processing, email delivery, error monitoring, and analytics vendors bound by data processing agreements;
• Messaging platforms — Meta (WhatsApp, Instagram, Messenger) and other channels you connect, as needed to send and receive messages;
• Your workspace — content you add is visible to teammates according to the roles and permissions configured by your workspace admins;
• Legal authorities— when required by law, court order, or to protect our rights and users' safety;
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

We retain personal data for as long as your account is active or as needed to provide the services. Workspace content is deleted or returned following account termination, subject to a short backup retention window. We may retain limited data longer where required for legal, tax, or dispute-resolution purposes.

We use industry-standard safeguards to protect your data, including encryption in transit, access controls, role-based permissions, audit logging, and continuous monitoring. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security — please use a strong, unique password and enable available account protections.

Your information may be processed in countries other than your own. Where data is transferred out of the European Economic Area, the UK, or Switzerland, we rely on appropriate safeguards such as Standard Contractual Clauses. See our GDPR page for details.

Depending on your location, you may have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. You can exercise most of these directly in your account settings, or by contacting us at privacy@mrgeekscrm.com. If your data was added to MrGeeksCRM by one of our customers (for example, a business you interacted with), please contact that business directly — we will support them in responding to your request.

MrGeeksCRM is a business tool and is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. For material changes, we will notify you by email or an in-app notice before the changes take effect.

Questions about this policy or our data practices? Email us at privacy@mrgeekscrm.com or reach out via our contact page.