Privacy Policy

Scope and Roles

This Privacy Policy applies to the processing of personal information and Google user data through Ecer CRM's website, applications, and related services.

Ecer CRM is primarily a customer relationship management service for businesses and organizations. A business customer generally determines the purposes, internal rules, and member permissions for business data processed within its Ecer CRM account. We process such data according to the business customer's instructions and our agreement with that customer.

This Privacy Policy does not apply to products or services independently provided by third parties and governed by their own privacy policies.

Information We Collect or Process

Information You or Your Organization Provides

• Account and identity information: your name, company name, department, job title, username, email address, telephone number, and account identifiers
• CRM information: customer and contact details, sales opportunities, follow-up records, tasks, labels, notes, and business materials
• Email information: recipients, subject lines, message bodies, signatures, attachments, drafts, and sending settings
• Service and support information: inquiries, issue descriptions, feedback, complaints, and customer support communications

Information Generated Automatically

To operate and secure the Service, we may process device type, browser and operating-system version, IP address, login and access times, pages and features used, activity logs, crash and error reports, network information, and security-event information.

Cookies and Similar Technologies

We may use essential cookies, local storage, and similar technologies to maintain login sessions, remember language or interface preferences, protect account security, and improve the Service.

Information Obtained Through Google OAuth and the Gmail API

• Basic Google Account information: your Google Account identifier, name, email address, and profile picture
• Authorization credentials: OAuth access tokens, refresh tokens, authorized scopes
• Gmail message metadata: message or thread identifiers, sender, recipients, subject, sending or receipt time, labels, folders
• Gmail message content: message bodies, snippets, and quoted content
• Gmail attachment information and content: attachment names, types, sizes, and contents

How We Use Information

We may use the information described above to:

• Create, authenticate, maintain, and administer Ecer CRM accounts
• Provide CRM features for customers, contacts, sales opportunities, tasks, follow-up records, and team collaboration
• Connect Gmail at your request and synchronize, display, search, and manage your messages within Ecer CRM
• Allow you to compose messages, save drafts, send, reply to, or forward messages, and work with attachments
• Associate a specific email with a customer, contact, sales opportunity, or follow-up record
• Provide customer support, respond to requests, and resolve technical issues
• Protect accounts and systems and prevent fraud, abuse, spam, and unlawful activity
• Perform our contracts, comply with legal obligations, and handle disputes or regulatory requests

We do not use Google user data to build advertising profiles, serve personalized or interest-based advertisements, assess creditworthiness, or make lending decisions.

Google User Data Limited Use Commitment

Ecer CRM's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We use Google user data only to provide or improve the Gmail and CRM features that you actively use
• We do not transfer, sell, or disclose Google user data to third parties except as described in Section 5
• We do not provide Google user data to advertising platforms, data brokers, or information resellers
• We do not use multiple accounts to bypass Gmail account limits, spam filters, or other safety mechanisms

Sharing, Transfer, and Disclosure

We do not sell personal information or Google user data. We may share, transfer, or disclose information only in the following necessary circumstances:

• Authorized Members of Your Organization: As configured by the business customer
• Service Providers Acting on Our Behalf: For cloud computing, server hosting, data storage, security, and customer support
• Google: When you use Gmail connection and email features
• Security and Legal Compliance: To investigate fraud, abuse, or respond to valid legal requirements
• Merger, Acquisition, or Asset Transfer: With prior explicit consent and continued policy compliance

Storage, Retention, and Deletion

Storage Principles

We retain information only for the shortest period necessary to achieve the purposes described in this Privacy Policy.

Retention Periods for Google User Data

• OAuth access and refresh tokens: Deleted within 24 hours after disconnection
• Synchronized Gmail messages: Deleted within 30 days after disconnection
• Temporary caches: Cleared within 7 days
• Backup copies: Overwritten within 90 days
• Security and audit logs: Retained for no longer than 180 days

How to Delete Data or Revoke Authorization

• In Ecer CRM, go to "Settings / Email Accounts / Account Management" and choose "Disconnect" or "Delete"
• Sign in to the Google Account Third-party connections page and remove Ecer CRM's access
• Email ask@ecer.com with the subject "Google User Data Deletion Request"

Information Security

We use administrative, technical, and physical safeguards appropriate to the relevant risks, including:

• HTTPS/TLS and other secure protocols for data in transit
• Encryption at rest for OAuth access and refresh tokens
• Authentication, least-privilege access, role-based permissions, and audit logging
• Confidentiality and security requirements for employees and service providers
• Vulnerability management, backup and recovery, and security-incident response

Your Rights and Choices

Subject to applicable law, you may request access to, a copy of, correction of, supplementation of, or deletion of your personal information. You may also request restriction of or object to particular processing, withdraw consent, close your account, manage enterprise-member permissions, or request an explanation of a decision based on automated processing.

International Data Transfers

When you choose to connect Gmail, authorization requests, API calls, and related data may be transferred between Google systems and Ecer CRM systems outside your country or region. We make such transfers only to provide the Gmail and CRM features you select and apply encryption, access controls, contractual restrictions, and other safeguards.

Children's Privacy

Ecer CRM is a business service for enterprises and organizations and is not designed for children. Individuals under 18 should not independently connect Gmail or submit personal information to the Service.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the Service, legal requirements, or Google policies. The updated policy will be posted on a publicly accessible page at https://ecercrm.com and will state the date of the latest revision.

Contact Us