Privacy Policy

This Privacy Policy explains how CRMEO (“we”, “us”) collects, uses, shares and protects personal information when you use the CRMEO platform, websites and mobile applications (the “Service”). CRMEO is a business tool used by companies (“Customers”) to manage their own leads and calls; for most data, the Customer is the data controller and CRMEO acts as a processor on their behalf.

1. Information we collect

• Account data — name, email, phone, company, role and login credentials.
• Lead & CRM data — contact details, notes, pipeline stage and activity your team adds, including leads received from connected sources such as Meta (Facebook/Instagram) Lead Ads.
• Calling data — call logs, durations, outcomes and, where the Customer enables it, call recordings uploaded from agents’ phones.
• Mobile & device data — app version, device model, battery and connectivity for the live monitor; and, only where the staff member has consented, live location (while logged in) and live call-audio monitoring (with an on-device alert).
• Usage & log data — IP address, timestamps and actions, used for security and audit logs.

2. How we use information

• To provide, secure and improve the Service and its features.
• To sync leads from connected integrations and route them to the right agents.
• To enable Customer oversight features (live monitor, consented location and consented live-listen) that the Customer configures for its own staff.
• To communicate about the Service and provide support.

3. Meta (Facebook & Instagram) data

When a Customer connects a Facebook Page, we use Meta’s APIs only to receive Lead Ads submissions and basic page information needed to deliver those leads into that Customer’s CRM. We request only the permissions required for this (such as managing the page’s lead access and retrieving leads). We do not sell this data and use it solely to provide the Service to the connecting Customer, consistent with the Meta Platform Terms and Developer Policies.

4. Sharing

We do not sell personal information. We share it only with: (a) the Customer whose workspace the data belongs to; (b) service providers (e.g. cloud hosting, storage, messaging) under contract; and (c) authorities where required by law.

5. Retention

We keep personal information for as long as the Customer’s account is active or as needed to provide the Service. Call recordings are retained per the Customer’s configured retention period and then deleted. Location history is kept for a limited window and pruned automatically. See Data Deletion for how to request removal.

6. Security

We use encryption in transit, access controls, per-company data isolation (row-level security), encrypted storage of sensitive tokens, and audit logging. No method is 100% secure, but we work to protect your data.

7. Your rights

Depending on your jurisdiction you may have rights to access, correct, export or delete your personal information. For CRM/lead data, requests are generally directed to the Customer that controls it; we assist Customers in fulfilling such requests. You can also contact us directly using the email below.

8. Children

The Service is for business use and not directed to children under 18.

9. Changes

We may update this Policy and will revise the “last updated” date above. Material changes may be communicated through the Service.

This document is a general template and not legal advice. Please have it reviewed by a qualified lawyer for your jurisdiction before relying on it.