Privacy policy

To run GenZCRM for you we collect:

Your account

Name, email, mobile number, company name and address when you sign up or invite a team member.

Billing

GSTIN and billing address for invoices. Card, UPI and net-banking details are entered on Cashfree’s payment page and never touch our servers.

Your customers’ data

Whatever you put into the CRM: lead names, phone numbers, email addresses, notes, quotations and invoices. This is your data; we only store and display it for you.

WhatsApp Business credentials

Your Meta Business Account ID, Phone Number ID and access token, so the CRM can send and receive messages on your number. Tokens are stored encrypted and can be removed from Settings at any time.

Usage and device information

Login times, IP address and browser type, kept in your account’s activity log so an admin can see who did what.

• To sign you in and keep each company’s data completely separate from every other company on GenZCRM.
• To send and receive WhatsApp messages and automated follow-ups through Meta’s WhatsApp Cloud API, on your behalf.
• To generate GST-compliant quotations and invoices for your customers.
• To keep an activity log that your admins can review.
• To manage your WhatsApp message balance and stop sending when it runs out.
• To email or WhatsApp you about your account: receipts, plan expiry, password resets. We do not send marketing to your customers.

We do not sell your data or your customers’ data to anyone. Data leaves GenZCRM only to the services needed to run it:

Meta Platforms (WhatsApp)

Message templates, recipient numbers and message content are sent to Meta’s official API so they can be delivered. Meta’s own business data terms apply to that part.

Cashfree Payments

Handles plan payments and wallet top-ups. They receive your name, email, phone and the amount; we receive a confirmation.

Hosting

The application and database run on servers provided by HostCoin. They host the data; they do not access it.

Law

If an Indian court or authority legally requires it, we may have to disclose data. We will tell you unless the law prevents it.

• Separate workspaces. Every company on GenZCRM has its own isolated workspace. One company cannot see another’s leads, clients or messages.
• Encryption in transit. Everything between your browser and our servers goes over HTTPS (TLS).
• Encrypted credentials. WhatsApp access tokens and passwords are stored encrypted or hashed, never in plain text.
• Role-based access. Inside your workspace, what each person can see is set by your admin (Admin, Manager, Employee, plus per-module permissions).
• Activity log. Logins, exports and deletions are recorded so you can audit them.

• While your account is active, we keep your data so the CRM keeps working.
• Deleted leads sit in Trash for 30 days, then are removed permanently.
• If you close your account, we delete your workspace and its data within 30 days, except invoices and payment records we must keep for Indian tax law (currently up to 8 years).

Your customers’ data is yours. At any time you can:

• Export your leads, contacts and clients from the CRM as CSV.
• Correct your profile, company and billing details from Settings.
• Disconnect WhatsApp and remove stored Meta credentials from Settings → Company.
• Delete your account by writing to us at the address below. We confirm deletion by email.

If you are one of our customers’ customers (for example, you received a WhatsApp message from a business using GenZCRM), the business that messaged you controls your data. Contact them first; we will help them act on your request.

GenZCRM uses a login cookie and local browser storage to keep you signed in and remember preferences such as your sidebar state. We do not use advertising cookies or third-party trackers on the app.

If we make a change that affects how your data is handled, we will email account owners before it takes effect and update the date at the top of this page.

GenZCRM is built and operated by Optima Webdesign.