Legal
Privacy Policy
Last updated: [DATE]
This policy explains what information MinaCRM collects, how it's used and stored, who it's shared with, how long it's kept, and the choices you have. MinaCRM is operated by [COMPANY LEGAL NAME], [REGISTERED ADDRESS] ("we").
What we collect
- Account details: your name, work email, role and workspace, and the chat accounts you connect (Telegram user ID and username, Google Chat identity).
- Sales records you and your team add: companies, contacts (names, titles, emails, phone numbers), deals, tasks, notes, activities, calendar events, invoices and deal files.
- Messages you send to MinaCRM in Telegram or Google Chat, including voice notes, images and documents, and what MinaCRM remembers from them to help you.
- Connected services, only if you connect them: Gmail (to send emails you approve), Google Calendar and Google Drive (shown only to you).
- Connected AI apps: when you connect an app such as Claude, which app it is, the access you granted (read only or read & write), and when it was last used.
- Technical logs: request logs and errors, used to keep the service running and secure.
How we use it
- To run MinaCRM for you: log your updates, answer questions about your pipeline, send reminders and briefs, and draft emails for you to approve.
- To keep a history of every change so it can be reviewed and undone.
- To secure the service and fix problems.
We don't sell your data, and we don't use it for advertising. [CONFIRM: we don't use customer data to train AI models.]
Who can see it
Inside your workspace, companies, contacts, deals, invoices and deal files are shared with your team. Your tasks, notes, activities, synced calendar and Drive, email drafts, conversation with MinaCRM and change history are visible only to you. See Privacy & permissions for the full list.
Service providers we share data with
We use these providers to run MinaCRM. Each processes data only to provide its part of the service.
| Provider | What for |
|---|---|
| Supabase | Database and file storage [REGION] |
| Hostinger | Servers that run MinaCRM [REGION] |
| Cloudflare | Network security and delivery |
| OpenCode Zen, Groq | AI models that read your messages and records to answer and act on them |
| Gmail, Calendar, Drive and Google Chat — only for features you connect or use | |
| Telegram | Delivering your conversation with MinaCRM |
| Mailgun | Sending team invitation emails |
| Tavily, Proxycurl | Looking up public information about companies and LinkedIn profiles, when you ask |
AI apps you connect yourself (for example Claude) receive the MinaCRM data they read on your behalf, and handle it under their own terms and privacy policy.
How long we keep it
- Sales records and your account: for as long as your workspace is active, then [RETENTION AFTER CLOSURE, e.g. deleted within N days].
- Change history: [RETENTION].
- Technical logs: [RETENTION].
- Sign-in links and codes expire within minutes; connected-app access lasts up to 90 days unless used or disconnected sooner.
Your choices
- Disconnect Gmail, Calendar, Drive, chat apps or AI apps at any time in the dashboard's Settings.
- Ask your workspace admin to correct or remove your records, or contact us to access, export or delete your data.
- [CONFIRM ANY JURISDICTION-SPECIFIC RIGHTS, e.g. under the Philippine Data Privacy Act of 2012.]
Security
Access is per person and checked on every request. Sign-in tokens and connected-app tokens are stored only as one-way hashes. Data travels over HTTPS. [CONFIRM: encryption at rest via providers.]
Contact
Questions or requests: [PRIVACY CONTACT EMAIL]. [DATA PROTECTION OFFICER, if applicable.]
We'll post changes to this policy on this page and update the date above.