Privacy Policy
On this page
Who we are / data controller
CIPHER CRM is operated by CIPHER Craft Pvt. Ltd., a company registered in India and based in Rajkot, Gujarat. For our own website visitors, marketing contacts and account holders, we act as the data controller. For the end-customer records our customers upload into the CRM, we act as a processor on the customer's behalf (see "Sharing & sub-processors").
Contact: hello@ciphercrm.co · +91 97122 00017. Data or privacy grievances can be raised with our Grievance contact (see "Contact & Grievance Officer").
What data we collect
In plain terms: the details you give us for a demo or account, basic usage and log data, and whatever your team stores inside the CRM.
- Account & contact details - name, work email, company, phone number you submit for a demo, trial or support.
- Billing details - where you are a paying customer, the information needed to process your subscription.
- Usage & telemetry - basic, first-party information about how the product and site are used, to keep them working and secure.
- Device & log data - information such as IP address, browser type and pages requested, recorded in standard server logs.
- Communications - the content of messages you send us by email, WhatsApp, phone or form.
- Customer-uploaded end-user data - the contacts and records your team stores inside CIPHER CRM. For this data you are the controller and CIPHER is the processor.
See our Cookie Policy for what is (and isn't) stored in your browser.
How we use data & lawful bases
In plain terms: we use your data to run the service you asked for, to reply to you, to keep things secure, and - only if you opt in - to send you updates.
- To deliver the service (host your CRM, process transactions, provide support) - lawful basis: contract.
- To respond to demo, trial and support requests - lawful basis: contract / steps to enter a contract.
- To send marketing updates you have opted into - lawful basis: consent (withdrawable anytime).
- To keep the platform secure, prevent abuse and improve the product - lawful basis: legitimate interest, balanced against your rights.
- To meet legal, tax and regulatory duties - lawful basis: legal obligation.
Sharing & sub-processors
In plain terms: we never sell your data and never hand it over for advertising. Only the vetted tools that help run the service see it, each under contract.
We do not sell personal data and do not share it for third-party advertising. We share data only with:
- Vetted sub-processors that help us run the service - cloud hosting, transactional email and product analytics - each under a contract with data-protection safeguards.
- Professional advisers and authorities where required by law.
The categories and our commitments (including a Data Processing Agreement under GDPR Article 28) are set out on our Compliance page, where the canonical sub-processor list is available on request.
International transfers
In plain terms: if your data ever sits on a server in another country, it travels under legal safeguards like Standard Contractual Clauses.
Where personal data is transferred outside its country of origin - for example to a cloud region operated by a sub-processor - we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms recognised under applicable law.
Retention
In plain terms: we hold on to data only as long as we genuinely need it, or as long as the law says, then it goes.
We keep personal data only as long as we need it for the purpose it was collected, or as long as the law requires:
- Enquiry & marketing data - until you ask us to delete it or withdraw consent.
- Account & billing data - for the life of the account plus any period required for tax, accounting and legal reasons.
- Customer-uploaded CRM data - for as long as the customer's account is active; deletion follows the customer's instructions as controller.
Your rights
In plain terms: you can ask to see, correct or delete your data, or object to some uses - just email us and we respond within 30 days.
Subject to applicable law, you can exercise the following rights over your personal data:
- Access - a copy of the data we hold about you.
- Rectification - correction of inaccurate or incomplete data.
- Erasure - deletion where the law allows.
- Portability - your data in a portable, machine-readable form.
- Objection / restriction - to certain processing.
- Withdraw consent - at any time, for anything you opted into.
How to exercise them: email hello@ciphercrm.co. We verify your request and respond within 30 days. Where CIPHER holds the data on behalf of a customer, we route your request to that customer as the controller.
Cookies & tracking
Our website uses only essential, first-party storage needed to make the site work. We do not currently run third-party analytics, advertising or tracking cookies, so no non-essential trackers load before you would ever be asked to consent. If that changes, we will update this policy and add a compliant, runtime-gated consent banner.
Full detail is in our Cookie Policy.
Security
In plain terms: your data is encrypted in transit, locked behind role-based access, and monitored. Full detail on the Security page.
We apply technical and organisational measures to protect personal data, including encryption in transit over HTTPS/TLS, role-based access controls and monitoring. Read more on our Security page.
Children's data
In plain terms: CIPHER is a business tool, not meant for children. If a child's data reaches us by mistake, tell us and we delete it.
CIPHER CRM is a business tool. It is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
Changes to this policy
We may update this policy as our practices or the law change. The Effective and Last updated dates at the top show the current version. Material changes will be highlighted on this page and, where appropriate, notified to you.
Contact & Grievance Officer
For any privacy question or to raise a grievance under India's IT Rules, 2021 and the DPDP Act, 2023, contact CIPHER Craft Pvt. Ltd.:
✉️ hello@ciphercrm.co · 📞 +91 97122 00017 · 📍 Rajkot, Gujarat, India.
We acknowledge grievances and work to resolve them within the timelines set by applicable law.