Privacy Policy

My Business CRM · Kiash Infotech Pvt Ltd · Effective / last updated: 05 Oct 2026

This Privacy Policy describes how Kiash Infotech Pvt Ltd (“Kiash”, “we”, “us”, or “our”) collects, uses, stores, and shares information when you use My Business CRM (the “Service”) available at https://crm.kiashinfotech.com, related mobile / web applications, and integrations (including WhatsApp / Meta and Google services where enabled).

By creating an account or using the Service, you agree to this Policy. If you do not agree, please do not use the Service.

1. Who we are

Data controller: Kiash Infotech Pvt Ltd
Email: kiashinfotech@gmail.com / info@kiashinfotech.com
Website: https://kiashinfotech.com
Product: https://crm.kiashinfotech.com

2. Information we collect

• Account information: name, email address, phone number, password (hashed), company / organisation name
• Business CRM data you upload or create: leads, customers, notes, follow-ups, quotations, invoices, attendance, reports, and related files
• Messaging / WhatsApp data: Phone Number ID and access tokens you provide (stored encrypted), message metadata and content required to send/receive messages you initiate
• Payment / subscription data: plan selection and billing status; card details are processed by payment providers if used (we do not store full card numbers)
• Device & technical data: IP address, browser/app type, device identifiers, logs, and approximate location derived from IP for security and diagnostics
• Support communications: emails or messages you send to our support team

3. How we use information

• Provide, operate, and improve CRM features (leads, documents, attendance, team access, reports)
• Authenticate users and secure accounts
• Send transactional emails / notifications related to your account
• Enable WhatsApp / Meta messaging features you configure
• Process subscriptions and prevent fraud/abuse
• Comply with legal obligations and enforce our Terms

We do not sell your personal information.

4. Google services (for Google app / API review)

If My Business CRM or a related Google-listed app connects to Google APIs (for example Google Sign-In, Google Drive, Google Sheets, or Gmail APIs where enabled), we use information received from Google APIs only to provide the features you request, and in accordance with the Google API Services User Data Policy, including the Limited Use requirements.

• Google user data is not sold
• Google user data is not used for advertising
• Google user data is not shared with third parties except as needed to operate the Service (e.g. hosting) or with your direction
• Access is limited to the scopes you approve in Google’s consent screen

5. WhatsApp / Meta

When you connect WhatsApp Business via Meta Cloud API, message content and phone numbers are processed to deliver messaging features you request. Meta’s policies also apply. You are responsible for obtaining any required customer consent for business messaging.

6. Sharing of information

We may share information with:

• Infrastructure providers (hosting, email delivery, storage) strictly to run the Service
• Meta / WhatsApp and Google, when you connect those integrations
• Professional advisers or authorities when required by law

Company admins control access for their own team users inside the tenant account.

7. Data retention & security

We retain account and CRM data while your account/subscription is active and for a reasonable period afterwards for backups, dispute resolution, and legal compliance, unless you request earlier deletion where applicable. Access tokens are stored encrypted. We use reasonable technical and organisational safeguards; no method of transmission or storage is 100% secure.

8. Your rights & data deletion

Subject to applicable law, you may request access, correction, or deletion of your personal data. Business customers control CRM records for their organisation and may export/delete data in-product where available.

Account / data deletion request: email kiashinfotech@gmail.com from your registered email with subject “Delete My Business CRM account”. We will verify ownership and process deletion within a reasonable time (typically within 30 days), except where we must retain data for legal reasons.

9. Children’s privacy

The Service is intended for business use by adults. We do not knowingly collect personal information from children under 13 (or the minimum age required in your country). If you believe a child has provided data, contact us and we will take appropriate steps to delete it.

10. International transfers

Your information may be processed on servers in India or other locations where our service providers operate. By using the Service you understand that your information may be transferred to and processed in those locations.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “last updated” date at the top will change when we do. Continued use of the Service after an update means you accept the revised Policy.

12. Contact

Kiash Infotech Pvt Ltd
Email: kiashinfotech@gmail.com
Alternate: info@kiashinfotech.com
Phone: +91 98116 59761
Website: https://kiashinfotech.com