1. Introduction
Welcome to urfavcrm.com ("we", "our", "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our SaaS platform, and interact with our services (collectively, the "Services"). By using urfavcrm.com, you consent to the data practices described in this policy.
2. Information We Collect
We collect information that you provide directly to us, as well as data collected automatically:
- Account Information: Name, email address, password hashes, and organization details provided during registration or via Google OAuth 2.0.
- Integration Data: Encrypted access tokens, refresh tokens, platform IDs, and profile details when you connect third-party platforms (e.g., Meta, Facebook, Instagram, Threads, WhatsApp, TikTok, LinkedIn, YouTube).
- Communication Data: Comments, direct messages (DMs), and other interactions processed through our Unified Inbox on behalf of your connected social media channels.
- Usage Data: IP addresses, browser types, session tokens, and interaction metrics with our platform.
3. How We Use Your Information
- To provide, maintain, and improve our unified social media management platform.
- To authenticate your identity and manage your organization sessions securely.
- To process and publish your scheduled content to connected third-party platforms.
- To facilitate AI-powered replies using third-party AI models (e.g., Google Gemini API). Note: Processed text may be sent to these AI providers solely for the purpose of generating automated responses.
- To send transactional emails, alerts, and system notifications via our email service provider (Zoho SMTP).
4. Data Sharing and Third-Party Services
We do not sell your personal data. We may share information with:
- Social Media Platforms: To execute the functionalities you authorize (e.g., posting content, reading messages).
- Service Providers: Cloud hosting (VPS), storage providers, payment gateways (Midtrans), and email delivery services that assist us in operating our platform.
- Legal Obligations: If required by law, regulation, or legal process to protect the rights, property, or safety of urfavcrm.com, our users, or others.
5. Data Security
We implement industry-standard security measures, including AES-256 encryption for access tokens, Argon2 hashing for passwords, and stateless session JWTs transmitted over HTTPS. However, no internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security but strive to protect your data using commercially acceptable means.
6. Your Roles and Responsibilities
When managing social media interactions via urfavcrm.com, your organization acts as the Data Controller for your end-users' (customers') data. urfavcrm.com acts strictly as a Data Processor. It is your responsibility to ensure compliance with applicable data protection laws (e.g., GDPR, CCPA) regarding the collection and handling of your customers' personal information.
7. Changes to This Privacy Policy
We reserve the right to modify this Privacy Policy at any time. Any changes will be effective immediately upon posting the updated policy on this page, with an updated "Effective Date". Your continued use of the Services signifies your acceptance of the revised Privacy Policy.
8. Contact Us
If you have any questions or concerns regarding this Privacy Policy, please contact us at our designated support channels.