INUBIZ CRM

Privacy Policy

Last updated August 2026

INUBIZ CRM (“we”, “the Service”) is a customer relationship management tool operated by INUBIZ at crm.inubiz.co. This policy explains what we collect, why, and how you stay in control of it.

Who controls the data

Each workspace is controlled by the organisation that created it. That organisation is the data controller for the leads and contacts it stores; INUBIZ is the data processor acting on its instructions.

What we collect

Account data

  • Your name, email address and hashed password.
  • If you sign in with Facebook: your Facebook user ID, name, email and profile picture URL.
  • Session records (IP address, browser user agent, timestamps) used to keep you signed in securely.

Workspace and CRM data

  • Leads, contacts, companies, deals, tasks, notes and files that you or your team create or import.
  • Leads delivered by Meta Lead Ads, including the answers submitted on your lead form and the campaign, ad set and ad that produced them.
  • WhatsApp conversations exchanged through your connected WhatsApp Business number, including delivery status.
  • Activity and audit records showing who changed what, and when.

Integration credentials

When you connect Meta or WhatsApp we store the access tokens needed to sync leads and send messages. Tokens are encrypted at rest with AES-256-GCM and are never exposed to the browser.

How we use it

  • To provide the Service: showing, assigning, and messaging your leads.
  • To deliver notifications you have asked for (assignment alerts, mentions, replies).
  • To keep the Service secure — rate limiting, audit logging and abuse prevention.

We do not sell personal data, and we do not use your CRM contents to train machine-learning models.

Meta Platform data

Our use of information received from Meta APIs follows the Meta Platform Terms and Developer Policies. We request only these permissions:

  • email, public_profile — to create your account when you sign in with Facebook.
  • pages_show_list — to let you pick which Facebook Page to connect.
  • pages_read_engagement — to read that Page’s lead forms and their questions, so you can map them to CRM fields.
  • pages_manage_metadata — to subscribe that Page to lead notifications.
  • leads_retrieval — to download the leads submitted on your own forms.
  • whatsapp_business_messaging, whatsapp_business_management — to send and receive messages on your WhatsApp Business number.

Lead data retrieved from Meta is stored only in your workspace and is used solely to let your team follow up on it. Disconnecting the integration stops all further syncing immediately.

Sharing

We share data only with:

  • Members of your own workspace, according to their role.
  • Meta, when you send a WhatsApp message or when we fetch your leads.
  • Our hosting and email providers, strictly to run the Service.
  • Authorities, where we are legally required to.

Retention

Workspace data is kept until you delete it or delete the workspace. Workspace owners can set a retention period in Settings. Deleting a workspace permanently removes its leads, conversations, files and integration credentials. Audit logs may be retained for up to 12 months for security purposes.

Your rights

You can access, export, correct or delete your data at any time from Settings, or by emailing privacy@inubiz.co. Depending on your location you may also have the right to object to processing or to lodge a complaint with your data protection authority. See Data deletion for the deletion process, including the Meta data deletion callback.

Security

  • All traffic is served over HTTPS.
  • Passwords are hashed with scrypt; we never store them in plain text.
  • Third-party tokens are encrypted at rest.
  • Every webhook from Meta is verified with an X-Hub-Signature-256 signature check.
  • Access is scoped per workspace and enforced on the server for every request.

Contact

INUBIZ — privacy@inubiz.co