Summary: SalesEntra collects only the data needed to run the CRM. We never sell your data. You can delete your account and all associated data at any time by contacting us.
1. Who We Are
SalesEntra CRM ("we", "our", or "us") is a cloud-based customer relationship management platform operated by MHD Tech. Our platform is accessible at salesentra.web.app.
For privacy questions, contact us at mhddevops9@gmail.com.
2. Data We Collect
2.1 Account Information
- Name, email address, and profile photo (from Google or Microsoft sign-in)
- Role and permissions within your organization
- Authentication tokens (stored securely, never shared)
2.2 CRM Data
- Customer records you create: names, companies, contact details, notes
- Sales activities: calls, meetings, emails, tasks, deals, purchases
- Contracts and documents generated within the platform
- Daily reports and sales performance data
2.3 Integration Data
- Google: When you connect Gmail or Google Calendar, we access your emails and calendar events solely to display them within SalesEntra. We do not store email content on our servers beyond what you explicitly log to a CRM record.
- Microsoft 365: Same principle applies to Outlook and Microsoft Calendar data.
- VoIP (Zadarma): Call metadata (duration, direction, phone numbers) is logged for CRM records. Audio recordings, if enabled, are stored per your Zadarma account settings.
2.4 Usage Data
- Login timestamps and session activity
- Feature usage (for improving the product — no personal content is analyzed)
- Error logs and performance metrics
3. How We Use Your Data
- To provide and operate the SalesEntra CRM service
- To authenticate your identity and enforce role-based access control
- To sync your email and calendar when you explicitly connect those services
- To generate reports, forecasts, and analytics visible only to you and your team's admins
- To send transactional notifications (password resets, system alerts)
- To improve platform performance and fix bugs
We do not use your data for advertising, sell it to third parties, or share it with anyone outside your organization without your explicit consent.
4. Data Storage & Security
All data is stored in Google Firebase (Firestore), hosted in the European Union region. We implement:
- Role-based access control (RBAC) with 9 permission levels
- Firebase App Check to prevent unauthorized API access
- HTTPS-only connections with HSTS enforced
- Audit logs for sensitive admin actions
- Session management with automatic timeout
5. Third-Party Services
SalesEntra integrates with the following third-party services, each governed by their own privacy policies:
6. Google API Scopes — Limited Use Disclosure
SalesEntra's use of data received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We only request Gmail and Calendar access when you explicitly connect Google in Settings → Integrations
- Gmail data is used only to display emails inside SalesEntra and log selected emails to customer records
- Calendar data is used only to display your events and create new events on your behalf
- We do not use Google user data to serve advertising
- We do not allow humans to read your Google data unless you provide explicit permission or it is required for security purposes
7. Data Retention
Your CRM data is retained as long as your account is active. If you request account deletion:
- Your user profile and authentication data are deleted within 7 days
- CRM records you created may be retained by your organization's admin per their own data policies
- Email/calendar content is never stored beyond the session — it is fetched live from Google/Microsoft each time
8. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and data
- Object to processing or request restriction
- Data portability (export your CRM data)
To exercise any of these rights, email us at mhddevops9@gmail.com.
9. Cookies
SalesEntra uses only functional cookies necessary for authentication (Firebase session tokens and MSAL state). We do not use tracking or advertising cookies.
10. Children's Privacy
SalesEntra is a business tool not intended for use by persons under 16 years of age. We do not knowingly collect data from minors.
11. Changes to This Policy
We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page and notify active users by email for material changes.