Privacy Policy

1. Introduction

Sambandh (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our customer relationship management platform and related services (collectively, the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access or use the Service.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us, including:

• Account registration information (name, email address, password)
• Profile information (company name, job title, phone number)
• Contact data you store in the Service (names, emails, phone numbers, notes, and other contact fields)
• Deal and pipeline data you create within the Service
• Communications you send through or store in the Service
• Payment and billing information (processed by our payment provider)
• Support requests and feedback you submit to us

2.2 Information Collected Automatically

When you use the Service, we automatically collect certain information, including:

• Device information (browser type, operating system, device identifiers)
• Log data (IP address, access times, pages viewed, referring URL)
• Usage data (features used, actions taken, frequency and duration of activities)
• Cookies and similar tracking technologies

2.3 Information from Third-Party Services

When you connect third-party services (such as Gmail, Outlook, or Google Calendar), we receive information from those services as authorized by you, including email metadata, calendar events, and contact information.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Send technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyze trends, usage, and activities in connection with the Service
• Detect, investigate, and prevent fraudulent transactions and other illegal activities
• Personalize and improve your experience

4. Data Storage and Security

We store your data on secure servers with industry-standard encryption at rest and in transit. We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

Your CRM data (contacts, deals, notes, and communications) is encrypted using AES-256 encryption. Access to production systems is restricted to authorized personnel and protected by multi-factor authentication.

5. Third-Party Sharing

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With vendors who assist us in providing the Service (hosting, payment processing, email delivery, analytics), subject to confidentiality obligations.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice provided to you.
• With Your Consent: When you have given us explicit consent to share your information.

We use Vercel Analytics for aggregated, privacy-friendly website analytics. We use Supabase for database hosting and authentication. We use Resend for transactional email delivery. No third-party tracking pixels or advertising networks are used.

6. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data.
• Right to Restrict Processing: Request that we limit processing of your data.
• Right to Data Portability: Request your data in a structured, machine-readable format.
• Right to Object: Object to the processing of your personal data.

To exercise any of these rights, please contact us at support@sambandh.io. We will respond to your request within 30 days.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you the Service. If you close your account, we will delete or anonymize your data within 30 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes, in which case we will retain it for no longer than 12 months.

8. Cookies

We use cookies and similar tracking technologies to collect and track information and to improve and analyze our Service. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

• Essential Cookies: Required for the operation of the Service (authentication, security).
• Analytics Cookies: Help us understand how users interact with the Service.

We do not use advertising or marketing cookies. We do not engage in cross-site tracking.

9. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date. We will provide email notification for material changes.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

• Email: support@sambandh.io
• Address: Sambandh, Inc.