Effective date: 27 October 2026
Who we are
CRMCEO is operated by SKILLSET SQUAD PRIVATE LIMITED. In this policy, “CRMCEO”, “we”, “us” and “our” refer to that company.
Our business contact address is D-0011, Akshar Business Park, Sector 25, Vashi, Navi Mumbai, Maharashtra, India. For privacy questions, access or deletion requests, consent withdrawal or complaints, contact [email protected]. You can also reach us through the CRMCEO Help Center.
This policy covers our public website, account and subscription administration, support services and the personal data processed through CRMCEO. Features and the information they process depend on the modules, settings and integrations enabled for your organisation.
Your organisation’s workspace data
We manage personal data used to operate CRMCEO, such as account, billing, website-enquiry and support information. When an organisation puts client, employee or other business information into its workspace, that organisation determines why it uses the information and how its users should handle it. We process workspace content to provide the service and follow the organisation’s authorised instructions, subject to applicable law.
For questions about information your employer or another organisation holds in CRMCEO, contact that organisation first. It controls workspace access, permissions, monitoring choices and its business records. You can also contact us for help identifying the appropriate route for a privacy request.
Information we process
- Account and business information: names, work email addresses, contact details, company information, account identifiers, roles, preferences and subscription information.
- Workspace content: information users enter or upload, including lead and client records, projects, tasks, messages, contracts, invoices, payments, expenses, files and reports.
- Employee information where enabled: employee profiles, attendance, leave, shifts, time logs, payroll-related records and documents supplied by the organisation or its users.
- Monitoring information where enabled: activity records, application or website activity, idle time, screenshots and task timing collected through the configured monitoring tools or desktop application.
- Support and enquiries: messages, contact details, attachments and the information you choose to share when requesting help or a demonstration.
- Payment records: billing information, transaction references, amounts, payment status and related subscription records returned by a payment provider.
- Technical information: information needed to deliver and protect the service, which may include IP addresses, browser and device information, authentication events, cookies, error information and service-usage events. The information recorded varies by component and configuration.
Please share only information needed for your use of CRMCEO. Workspace administrators should limit access and avoid entering unnecessary sensitive information.
How we use information
We use personal data to create and manage accounts; deliver workspace features; process subscriptions and payment records; respond to enquiries and support requests; send service, account and security communications; investigate problems; protect against misuse; and meet applicable legal obligations.
Where enabled, we also use information to provide requested AI functions, understand service usage, improve our website, measure advertising or send optional marketing communications. We rely on the permissions, consent or other grounds available under applicable law for the relevant activity. An optional feature is used only in the context in which it has been enabled or requested.
AI features
When you use an AI feature, the prompt, selected text and other context needed to carry out that request may be sent to the AI provider configured for the service or your organisation. The information sent depends on the feature and its configuration. Provider processing is also subject to its terms and privacy practices.
Check your organisation’s rules before submitting confidential, employee or client information to an AI feature. Review generated output before using it. Enabling AI does not mean that every workspace record is automatically submitted to an AI provider.
Employee monitoring
Employee monitoring is an optional workspace function, separate from ordinary attendance and time tracking. Your organisation decides whether to enable it, which users or devices it applies to, the configuration used and who may access the resulting records.
Organisations using monitoring must give appropriate notices, obtain any necessary authorisations and comply with applicable workplace and data-protection requirements. This policy does not replace an employer’s monitoring notice. Ask your organisation what is collected, how it is used and how to raise concerns. Visiting our public website alone does not install a desktop monitoring application.
Cookies, support chat and optional tracking
CRMCEO uses cookies or similar storage for functions such as authentication, security, session continuity and display preferences. Opening support chat loads the support service and may store visitor or conversation information so the conversation can continue. Our CRM integration does not automatically attach your CRM profile, company records or the page of a private record to a support conversation; information you type or attach in chat is provided by you.
Analytics and advertising technologies may be used where deployed and enabled. Their use is subject to the notices and choices applicable to those technologies, including consent where required. You can also manage cookies through your browser, although blocking essential storage can affect sign-in and other features.
If you receive optional marketing emails, use the available unsubscribe instructions or contact [email protected] to opt out. Service, billing and security communications may still be necessary to operate your account.
Service providers and other disclosures
We use service providers to operate CRMCEO. These include Cloudflare for file storage and related infrastructure services, ZeptoMail for email delivery, and Cashfree and/or Razorpay for payments, depending on the payment option used. We receive the payment information needed to administer the transaction; payment providers process the payment details submitted through their services under their own terms and privacy notices.
We also use hosting, support, security and operational services, and may use configured AI, analytics, advertising or other integration providers when those functions are enabled. Providers receive the information needed for their role. Where an organisation connects another service, information may be transferred according to that organisation’s settings and instructions.
We may disclose information to your organisation’s authorised users, to comply with applicable law or valid legal process, to protect people and the service, or in connection with a business reorganisation subject to appropriate protections and required notices. This policy does not authorise unrestricted access to another organisation’s workspace.
International processing
Information may be processed in India and in other countries where we or our service providers operate. Cloud infrastructure and connected services may use international locations. Applicable restrictions and requirements for international processing remain relevant; we do not promise that every copy of information stays in India.
Retention and deletion
We keep information while it is needed to provide an active service and for the purposes described in this policy. Our standard retention periods are:
- Workspace data after cancellation: up to 90 days from workspace cancellation, after which it is scheduled for deletion or anonymisation unless a longer period is required for a lawful reason.
- Support conversations: up to 90 days from the last activity in the conversation, unless the information is still required to resolve an ongoing matter or meet a legal obligation.
- Backups: a rolling period of up to 90 days from each backup’s creation. Deleted live data may remain in restricted backup copies until those copies expire. This can extend beyond the live-workspace deletion date.
Information needed for accounting, tax, fraud prevention, dispute resolution or another legal obligation may be kept for the period required for that purpose. An earlier valid deletion request or an organisation’s agreed instructions may also affect retention. Data that has been irreversibly anonymised may be retained without identifying you.
These periods are not a guarantee that a particular record can be restored. On cancellation, ask your administrator to arrange any available export you need before the retention period ends. If backup data is restored, applicable deletion instructions must be reapplied.
Security
We use technical and organisational measures appropriate to the service, such as access controls and protected connections, and work to limit access to authorised people and service providers. Your organisation also has responsibilities for its users, permissions, devices, credentials and the information it enters. No service can guarantee absolute security.
We investigate personal-data incidents and provide notices where required by applicable law. Please report a suspected privacy or security issue to [email protected] without sending passwords, authentication codes or unrelated confidential records.
Your choices and rights
Depending on applicable law and our role in processing the information, you may request access to information about your personal data, correction or updating, erasure, withdrawal of consent, grievance handling or other available rights, including nomination where applicable. Withdrawing consent does not invalidate processing already lawfully carried out and may affect a feature that needs the information.
Send requests to [email protected] with enough information to identify your account and explain the request. We may need to verify your identity or authority using proportionate information. For organisation-controlled workspace records, we may refer the request to the organisation or assist it in responding. We respond within the timelines applicable to the request and explain relevant limitations or exceptions.
If you remain dissatisfied after contacting us, you may use the complaint routes available under applicable law. This policy does not limit your statutory rights.
Children’s information
CRMCEO is a business service and is not directed at children. An organisation entering information about a minor must have the authorisation required for that activity and follow applicable law. Contact us if you believe a child’s information has been provided without the required authority so that we can review the matter with the relevant organisation.
Changes and contact
We may update this policy to reflect changes to the service or applicable requirements. The current version will be published on this page with its effective date, and additional notice will be provided when required.
For privacy questions, requests or complaints, write to [email protected], addressed to the Privacy Contact, SKILLSET SQUAD PRIVATE LIMITED. Our business contact address is D-0011, Akshar Business Park, Sector 25, Vashi, Navi Mumbai, Maharashtra, India.