Privacy Notice

Who is responsible

icrmpro is the seller and data controller for the account and service information described below. For customer information you place in your own quotations and invoices, you are responsible for your lawful use of that information. CRM records stay in your browser; icrmpro does not operate a cloud archive of those records.

Information and purposes

• Account information: email address, account identifier, authentication credentials or provider identifiers, and sign-in/session information are processed through Lovable Cloud to create your account, authenticate you, recover access and secure the service. If you choose Google or Lovable sign-in, that provider supplies the identity information needed for sign-in and processes information under its own privacy policy.
• Subscription information: your account identifier, payment customer and subscription identifiers, plan, status, paid period, cancellation state and payment-event timestamps are stored to provide paid access, manage subscriptions and reconcile billing. We do not store full payment-card details.
• Local CRM data: customer names, addresses, emails, telephone numbers and tax identifiers, document descriptions and prices, uploaded photos, logos, signatures, settings, layouts and backup dates are stored in your browser to prepare documents. They are not uploaded to our subscription database. Documents or backups you download or share go to locations and recipients you choose.
• Service and support information: device and technical information, security logs, errors, and information you provide in a support request may be processed to protect the service, diagnose problems and answer requests. Do not include customer documents or signatures in support messages unless necessary.

Legal bases

We process account and subscription data to perform our contract with you; security, necessary diagnostics and service improvement for legitimate interests; records required by law for legal obligations; and optional activities where consent is required on the basis of that consent. You may withdraw consent without affecting processing that was lawful before withdrawal.

Visitor analytics

This published site records page visits and clicks on buttons and links for every visitor; there is currently no analytics-choice banner. It also records where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, and errors. Clicks are identified by their position on the page, not their text. Page visits, time on page, page speed and errors are recorded for every visitor without cookies and without identifying anyone.

Lovable’s visitor analytics uses no cookies, stores nothing on your device, does not keep IP addresses and does not identify visitors or recognize returning visitors. Detailed data is retained for 90 days and daily summaries for one year. Lovable collects this data for us. Lovable’s privacy policy explains how it handles it.

Who receives information

Service providers for hosting, authentication, analytics and support, including Lovable, receive information needed to operate the service. Google receives information when you choose Google sign-in. Paddle receives account and purchase information as Merchant of Record for product sales, subscription management, payments, tax compliance and invoicing, and processes it under its privacy notice. Professional legal and accounting advisers may receive necessary records; authorities may receive information where required by law. We do not sell your local CRM records.

Browser storage, cookies and external services

The app uses essential browser storage for CRM records and settings and to keep you signed in. Authentication providers and Paddle may use their own cookies or storage during sign-in or checkout; see their notices and browser controls. The checkout service loads when you choose to subscribe. Google Fonts receives requests for fonts, which may include your IP address and browser information. No advertising pixels or separate marketing analytics are currently installed. Lovable’s cookie-free analytics does not mean the app itself stores nothing.

You can manage cookies and site data in your browser, but clearing site data can sign you out and permanently remove local documents. Download a private backup before clearing it.

Retention and security

Local CRM data remains until you delete it, replace it through an import, clear site data, or your browser removes it. Downloaded files remain wherever you save them. Account and subscription data is kept while needed to provide the service and afterward only as necessary for legal, accounting, dispute-resolution and security purposes, then deleted or anonymized. Analytics retention is specified above.

We use appropriate technical and organizational measures, including encrypted connections and account-scoped access controls. No system is completely secure. Local CRM storage and exported JSON backups are not encrypted by the app; protect your device and backup files. There is no automatic backup or guaranteed recovery after device loss.

Your rights and international processing

Depending on applicable law, you may request access, correction, erasure, restriction, portability or object to processing, withdraw consent, and complain to your local data-protection authority. For account-related requests, contact icrmpro using the seller contact details supplied with your purchase; purchase and payment requests can be made at paddle.net. Local records can be exported and managed on your device. We respond within applicable legal deadlines, including one month where GDPR applies.

Our providers may process information outside your country. Where UK/EEA transfer rules apply, transfers must rely on appropriate safeguards such as adequacy decisions or standard contractual clauses. Your jurisdiction and the providers’ notices determine the rights and safeguards applicable to you.