Privacy Policy

1. Data we collect

• Account: name, email, phone number, language. Passwords are never stored in plain text, only as an Argon2 hash.
• When you sign in with Google: the name, email and identifier of your Google account.
• Company: name, address, line of business, products, staff list, seats and invoices.
• Data inside the CRM: leads and their contacts, notes, tasks, calls and recordings, chat messages, uploaded files.
• Technical data: IP address, browser type, sessions and a log of important actions.
• If you connect the Telegram bot: your Telegram identifier and username.

2. Why we use it

We do not sell data and do not use it for advertising.

• To sign you in and keep the account secure.
• To provide the CRM and store company data.
• To send messages about payments, the trial and notifications.
• To reach the owner by phone and give support during the trial.

3. Google user data

The name, email and identifier received from Google are used only to sign you in and identify your account. They are not shared with third parties and are not used for advertising.

HunterCRM's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Customer data in the CRM

Each company is responsible for the leads and customer data it enters into the CRM. HunterCRM processes this data only on behalf of that company and only to provide the service. Each company has its own separate database.

5. Attendance and FaceID

If a company turns on the Attendance module, the time, location and a photo go into the company database at check-in and check-out. Photos are deleted after 60 days.

For FaceID a digital sample of the face (128 numbers) is computed on the employee's phone or browser and stored only with their consent. This is biometric data and it is not given to outside services. The employee can delete it at any time, and it is deleted when they leave. The company controls this data and is responsible for informing its employees.

6. Third-party services

Data is shared only as far as the service needs it and within the features you use:

• Google: sign-in, a Google Sheets table you connect, website fonts.
• Payme and Click: payments. Card details are entered on their side, HunterCRM does not receive or store them.
• Utel: telephony you connect and call recordings.
• Meta: leads from ad forms you connect.
• Telegram: notifications through the bot you connect.
• Email provider: system emails.
• Hosting: servers are located in the European Union (Lithuania).

7. Security

• All connections are encrypted with HTTPS.
• Passwords are hashed. Integration keys and two-factor secrets are stored encrypted.
• Each company has a separate database and a permission system.

8. Cookies

We use only the cookies needed to run the service: session, protection and language. Your theme choice is stored in your browser. We do not use advertising or analytics cookies.

9. Data retention

Data is kept while the account or company is active. After a deletion request, data is deleted within 30 days. Data required by law, such as payment records, may be kept for the required period.

10. Your rights

You can view and correct your data, ask for it to be deleted and withdraw your consent. You can change your name and phone in Settings → Profile. For anything else, write to the email below. If your data was entered into a company’s CRM, please contact that company first.

11. Age limit

The service is for businesses and is not intended for anyone under 18.

12. Changes

If this policy changes, this page is updated and the date above changes.

13. Contact

For privacy questions: