Privacy Policy

1. Scope and roles

SoarSCRM generally acts as an independent controller for registration, subscription, support, security, and business relationship data. For personal data submitted by business customers through conversations, contacts, materials, translation, automation, and backup features, we generally act as a processor following customer instructions. Customers must give required notices and ensure lawful processing.

2. Information we collect

Information may include account and contact details, organization and subscription data, support communications, device and log data, security events, usage records, and conversations, contacts, files, and customer labels that you submit or make available through connected platforms. We do not ask for data unrelated to the features you use.

3. Purposes and legal bases

We use information to create and administer accounts, perform orders, provide and secure the services, process payments and support, troubleshoot, comply with law, prevent fraud, and improve products where permitted. The legal basis may be contract, legitimate interests, legal obligation, or consent, depending on the data and applicable law.

When Google Ads Enhanced Conversions is enabled and the required authorization has been obtained, we may normalize the email address and/or valid international-format phone number provided for the SoarSCRM platform account associated with a registration, effective-use event (such as a successful translation), or payment. We apply SHA-256 hashing and upload the hashes to Google with advertising click identifiers, event times, transaction identifiers, and conversion counts for conversion matching, attribution, and measurement of advertising effectiveness. Plain-text email addresses or phone numbers are not placed in campaign links.

These contact details come from the platform account information you provide to SoarSCRM, and exclude customer contacts, conversations, and message content that you manage in the CRM. Hashing is a protective measure and does not make the data anonymous; Google may match the hashes with information it holds.

4. Sharing, subprocessors, and transfers

We disclose information to contractually bound providers only as needed for cloud hosting, content delivery, payments, email, monitoring, support, translation, or AI features, and when required by law, a corporate transaction, or user safety. Selling contact lists is not our business.

International transfers use contractual or other safeguards recognized by applicable law. Actual providers, data regions, and transfer mechanisms must match the subprocessor list and order in effect at publication.

Google processes this information as an advertising measurement provider under the applicable Google data processing terms and privacy policies. Processing may take place outside your country or region and remains subject to applicable data protection requirements. For how Google uses partner information and the relevant data rules, see https://policies.google.com/technologies/partner-sites and https://support.google.com/adspolicy/answer/7475709 .

5. Retention and security

We retain information as needed to provide services, perform contracts, resolve disputes, and meet legal duties, then delete or de-identify it under product settings, orders, and backup rotation. We use risk-appropriate access controls, transmission protection, logging, backups, and incident response, but no system can promise absolute security.

6. Your rights and choices

Depending on local law, you may request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or complain to a regulator. Requests involving data controlled by a business customer should normally be sent to that customer first; we will reasonably assist the customer.

The services are not directed to children below the age set by applicable law. Contact us if you believe child data was collected without proper authorization.

You may refuse or withdraw the consent required for this advertising measurement without affecting core services such as account login and message processing, by contacting [email protected]. Withdrawal does not affect lawful processing based on valid consent before withdrawal. Publication or reading of this policy, or continued use of the services, does not itself constitute consent to Enhanced Conversions data sharing.

7. Updates and contact

We will explain material changes through the page, product notice, or another reasonable method and update the version and effective date. Send privacy or deletion requests to [email protected].