Privacy notice

Who operates IntelliCRM?

The operator’s legal company name, registered address and data-controller details are pending. The contact for this draft is sadasivanarun84@gmail.com. The intended governing country is the United Arab Emirates.

Information the application processes

Account details include your name, email, organisation and team membership. When you connect a supported business mailbox, the application processes email content and metadata to identify contacts, companies, project roles, relationship changes and supporting evidence. Organisation settings may include your website and an optional AI-provider API key.

Why this information is used

The application uses this information to authenticate users, maintain organisation records, produce evidence-backed recommendations and support review of proposed changes. Website analysis helps describe the services an organisation sells. The final notice must specify the legal basis for each processing activity.

Connected services and AI

Supabase provides authentication and the database. Supported mailbox connections use the provider’s authorisation flow. Relevant email and website content is sent to the configured AI provider for analysis; the current implementation uses Anthropic models. The exact hosting regions, processor terms and cross-border transfer arrangements depend on the deployment and must be documented before public launch.

Access and security

Application access is scoped by organisation and user role. Mailbox refresh tokens and optional organisation API keys are encrypted at rest by the application. These controls do not eliminate all security risks. Only connect business mail you have permission to process.

Cookies

Authentication cookies maintain your sign-in session. A workspace-selection cookie supports platform administrator access to an organisation. No advertising or analytics cookies have been added by this frontend. Connected providers may have their own policies.

Retention and deletion

A final retention schedule has not been established. The current application does not automatically purge email bodies on a fixed schedule. Contact us about access, correction, export or deletion requests; those processes and their applicable timeframes must be finalised with the legal operator.

Your privacy choices

You can review connected mailbox settings and revoke provider authorisation through your email provider. Revoking a connection does not automatically delete previously stored records. Contact us to discuss those records and privacy requests.

The UAE Government’s overview of data protection laws describes the federal framework and separate regimes that may apply. Applicable rights and obligations depend on the final operator and deployment; this draft makes no certification of compliance.