Privacy Policy

1. Information We Collect

You give us

• Account information — your name, email, and hashed password when your team administrator creates your ClientOS account.
• CRM content — the leads, contacts, pipeline stages, follow-ups, comments, call logs, payment records, and files your team creates. This data belongs to your organization; we process it as a data-processor on your organization’s behalf.
• Attachments — files you upload to a lead (e.g. proposals, signed contracts) are stored on our file provider and accessible only to your organization.

Automatically

• Usage & security data — request timestamps, IP address, device type, and app version, for security, rate-limiting, and diagnostics.
• Crash logs — on iOS, Apple may share anonymous crash data via standard diagnostics. Opt out in iOS Settings → Privacy & Security → Analytics & Improvements.

We do not collect

• Advertising identifiers — ClientOS does not request the IDFA, does not call App Tracking Transparency, and uses no third-party advertising or attribution SDKs.
• Location, contacts, calendars, or health data.

2. How We Use Your Information

• To provide the CRM to you and your organization.
• To authenticate you and keep your account secure.
• To send follow-up reminders and notifications you opt into.
• To respond to support requests and comply with legal obligations.

3. Sub-processors

We share data only with the providers necessary to run the Service:

• UploadThing — file/attachment storage
• OneSignal — push notification delivery
• Resend — transactional email
• Upstash Redis — caching and rate-limiting
• Apple Push Notification service (APNs) — iOS push
• Our cloud hosting and managed PostgreSQL provider

We never sell your personal data, and we do not share it with advertisers or data brokers.

4. Data Retention & Deletion

We retain your account data while your account is active. You can delete your account from the iOS app (Profile → Delete account) or by emailing us; your personal data and the comments you authored are permanently removed within 30 days. CRM content shared with your organization follows your organization’s retention policy.

5. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal data, and to withdraw consent. To exercise these rights, email support@easykrd.com.

6. Security

Passwords are hashed. Sessions use signed tokens. All traffic uses TLS. File access is scoped to the authenticated user’s organization.

7. Children

ClientOS is a business tool, not directed at children under 13, and we do not knowingly collect their data.

8. Changes & Contact

We may update this policy; material changes are announced in-app at least 14 days before taking effect. Questions? Email support@easykrd.com — Easy Technology Company.