Privacy Policy

This Privacy Policy explains how [Legal entity name — e.g. "Crm Line MChJ"] ("CRM Line", "we", "us") collects, uses, stores and protects data when businesses use our service, including data we obtain through Meta Platforms (Facebook and Instagram).

Who we are

CRM Line is a customer-messaging platform. Our clients are businesses that use Instagram to communicate with their customers. We provide a shared inbox where a client's team can read and reply to the messages people send to that client's Instagram professional account. We act as a data processor / service provider on behalf of our clients, who are the controllers of their customers' data.

What data we collect

When a client connects their Instagram professional account, we receive and process the following, strictly to provide the messaging service:

• Message content exchanged between the client and the people who message them on Instagram.
• Sender profile information such as the Instagram username, Instagram-scoped user ID, and profile picture, so agents can identify who they are talking to.
• Account and conversation metadata such as timestamps and conversation status, used to organise the inbox.
• Client account details such as the name, email and login credentials of the client's own team members who use CRM Line.

How we use data

We use the data described above only to operate and improve the messaging service, specifically to:

• Display incoming Instagram conversations in the client's shared inbox.
• Let the client's agents assign, read, and reply to those conversations.
• Keep the conversation history available to the client's team.
• Provide the client with volume and response-time information about their own inbox.
• Maintain the security and reliability of the service.

We do not sell data, and we do not use the data we obtain from Meta for advertising or for any purpose unrelated to providing the service to that client.

How data is shared

We share data only with service providers that help us run CRM Line — for example our cloud hosting provider — and only to the extent needed to provide the service. These providers are bound by confidentiality and data-protection obligations. We may also disclose data where required by law.

Where data is stored

Data is stored on secure servers hosted at [hosting location — e.g. "Uzbekistan" or your cloud region]. We apply encryption in transit and access controls so that only authorised personnel and the client's own team can access their data.

How long we keep data

We keep conversation data for as long as the client uses CRM Line, or as needed to provide the service. When a client stops using CRM Line, or requests deletion, we delete their data within a reasonable period, unless we are required to retain it by law.

How to delete your data

A client can request deletion of their data at any time by emailing [privacy@crmline.example]. A client can also disconnect CRM Line from their Instagram account at any time from their Instagram or Meta settings (Settings → Apps and websites), which revokes our access. Upon a verified request, we will delete the associated data as described above.

Data protection rights

Depending on their location, individuals may have rights to access, correct, or delete their personal data. Because CRM Line acts on behalf of our clients, requests from an end user are handled together with the relevant client. To exercise a right, contact us or the business you messaged on Instagram.

Compliance with Meta's policies

Our use of data obtained through the Meta and Instagram platforms complies with Meta's Platform Terms and Developer Policies. We access this data only through Meta's official APIs, request only the permissions our service needs, and use the data solely for the purposes described in this policy.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Contact us

If you have questions about this policy or how we handle data, contact us at:

• Email: [privacy@crmline.example]
• Company: [Legal entity name]
• Address: [Business address, Tashkent, Uzbekistan]