CRM Privacy Policy - Kabooly

Introduction

Welcome to Kabooly CRM. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our CRM platform.

Information We Collect

We collect information that you provide directly to us, including:

Account information (name, email address, password)
Contact information you store in the CRM
Communication preferences and settings
Usage data and analytics

Calendar Sync Data

If you choose to connect your Google Calendar or Microsoft Outlook calendar, we access:

Calendar event details (title, date, time, duration, location)
Your availability/free-busy information
Calendar event attendees (where relevant to CRM contacts)

We only access calendar data after you explicitly authorise the connection. You can disconnect your calendar at any time from your account settings.

Facebook Lead Ads Data

If you connect a Facebook Page you manage, we access the following through Meta's APIs, on your behalf:

The list of Facebook Pages you manage, and basic Page details, so you can choose which Page to connect
Leads submitted through that Page's Meta instant (lead ad) forms, including the contact details a person enters such as name, email address and phone number

We only access this data after you explicitly authorise the connection, and only for the Page or Pages you select. You can disconnect a Page at any time from your account settings, which stops us importing any new leads from it.

How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our services
Process your transactions and manage your account
Send you technical notices and support messages
Respond to your comments and questions
Protect against fraudulent or illegal activity

Data Security

We implement appropriate technical and organizational measures to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Your Rights

You have the right to:

Access and receive a copy of your personal data
Rectify inaccurate or incomplete data
Request deletion of your personal data
Object to or restrict processing of your data
Data portability

To request deletion of your data, see our Data Deletion page.

Third-Party Services

Our service uses third-party services including Supabase for database and authentication, and Resend for email delivery. These services have their own privacy policies governing the use of your information.

Third-Party Calendar Integrations

Kabooly CRM offers optional integration with third-party calendar services to help you manage appointments and view availability alongside your customer data.

Google Calendar Integration

When you connect your Google Calendar account, Kabooly CRM uses the Google Calendar API to:

Read your calendar events to display them within the CRM
Create, update, and delete calendar events when you schedule appointments through Kabooly
Check your availability to prevent double-booking

Kabooly CRM's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy , including the Limited Use requirements. We only request the minimum permissions necessary to provide the calendar sync functionality.

Microsoft Outlook Calendar Integration

When you connect your Microsoft account, Kabooly CRM uses the Microsoft Graph API to:

Read your Outlook calendar events to display them within the CRM
Create, update, and delete calendar events when you schedule appointments through Kabooly
Check your availability to prevent double-booking

We only request the minimum permissions necessary to provide the calendar sync functionality and comply with Microsoft's API terms of use.

How We Handle Calendar Data

Storage: Calendar data is cached temporarily to display within the CRM interface and is refreshed regularly from the source calendar
No sharing: Your calendar data is never shared with third parties or used for advertising purposes
User control: You can disconnect your calendar integration at any time from your account settings, which immediately revokes our access to your calendar data
Deletion: When you disconnect a calendar or delete your Kabooly account, any cached calendar data is deleted within 24 hours

Facebook Lead Ads Integration

Kabooly CRM offers an optional integration that imports leads from your Facebook Page's Meta instant (lead ad) forms directly into your CRM as new contacts, so you can follow them up.

What We Access

When you connect a Facebook Page, Kabooly CRM uses Meta's APIs to:

Show the list of Pages you manage, so you can choose which one to connect
Subscribe to new lead notifications for that Page
Retrieve the responses a person submits to a lead form, so we can create a matching contact in your account

How We Handle Facebook Lead Data

Purpose: Lead data is used only to create and update contacts inside your own Kabooly CRM account
Storage: Imported leads are stored as contacts in your account
No sharing: Your Facebook lead data is never sold, shared with other customers, or used for advertising
Access: Only users within your own Kabooly CRM account can see the leads imported into that account
User control: You can disconnect a Page at any time from your account settings, which stops Kabooly importing any new leads from that Page
Deletion: You can delete imported contacts at any time, and you can request deletion of all your data. See our Data Deletion page for how

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy, please contact us at: [email protected]