Privacy Policy

This Privacy Policy describes how OrioCRM ("we," "our," or "us") collects, uses, and shares information about you when you use our services. It applies to the OrioCRM platform and website at oriocrm.com.

1. Information We Collect

Information You Provide

• Account data: Name, email address, company name, phone number when you register
• Payment data: Billing address and payment method details (processed securely by our payment providers — we do not store full card numbers)
• CRM data: Customer records, sales data, repair tickets, and other business data you enter into the platform
• Communications: Messages you send us via contact forms or email

Information Collected Automatically

• Usage data: Pages visited, features used, actions taken within the app
• Device data: IP address, browser type, operating system
• Log data: Server logs including request timestamps and error reports

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the OrioCRM platform
• Process payments and manage subscriptions
• Send transactional emails (receipts, account alerts, security notices)
• Respond to your support requests
• Detect and prevent fraud and abuse
• Comply with legal obligations

We do not use your data to train AI models sold to third parties, nor do we sell your data to advertisers.

3. How We Share Your Information

We may share your information with:

• Service providers: Hosting, payment processing, email delivery, and analytics providers who process data on our behalf under strict data processing agreements
• Legal requirements: When required by law, court order, or governmental authority
• Business transfers: In connection with a merger, acquisition, or sale of assets (you will be notified in advance)

We never sell your personal data to third parties.

4. Data Storage and Security

Your data is stored on secure servers hosted in data centres with industry-standard physical and logical security controls. We implement encryption in transit (TLS) and at rest, access controls, and regular security audits.

While we take commercially reasonable steps to protect your data, no system is completely secure. We encourage you to use strong passwords and enable two-factor authentication.

5. Data Retention

We retain your account data for as long as your account is active or as needed to provide services. After account deletion, we retain anonymised usage data for analytics and retain certain records as required by law (e.g., financial records for 7 years).

6. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Export your CRM data in a machine-readable format
• Objection: Object to certain processing activities

To exercise any of these rights, please contact us or email privacy@oriocrm.com.

7. Cookies

We use essential cookies to maintain your session and provide the Service. We also use analytics cookies to understand how users interact with our platform. You can control cookie preferences through your browser settings.

8. Children's Privacy

OrioCRM is not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the platform at least 14 days before changes take effect.

10. Contact Us

If you have privacy-related questions or concerns, please contact our Privacy Team:

• Email: privacy@oriocrm.com
• Contact form: oriocrm.com/contact
• Address: Nairobi, Kenya