Privacy policy

When your business uses 1Stop CRM, you are the controller of your customers' data and we are the processor. We handle it to provide the service and for no other purpose.

We do not sell customer data, and we do not use the contents of your conversations to train models.

Account data: your name, email address, and the organization you belong to.

Customer data: the contacts, conversations, messages, leads and notes you create or receive through connected channels.

Channel credentials: access tokens for the accounts you connect. These are encrypted at rest with AES-256-GCM and are never displayed back to any user.

Operational data: audit logs of important administrative actions, and technical logs needed to run and secure the service.

Connecting Facebook, WhatsApp or Telegram means data flows between those platforms and your workspace under their terms as well as ours. We only request the permissions the features you use require, and you can disconnect a channel at any time.

Each organization is isolated: your records are never readable from another workspace.

We keep data for as long as your workspace is active. When you cancel we retain it for a limited period so you can reactivate, then delete it.

You can export your organization data at any time from Settings, and request deletion by contacting us.

Traffic is encrypted in transit. Credentials are encrypted at rest. Access is governed by role-based permissions, with sessions that expire and can be revoked per device.

Important administrative and lead-management actions are recorded in an audit trail available to your administrators.

Depending on where you are, you may have rights to access, correct, export or delete personal data we hold about you.

To exercise any of them, email hello@1stop.ad and we will respond within the period required by applicable law.