Privacy Policy

This policy covers the website naeemcrm.com, the client CRM workspaces hosted at *.naeemcrm.com, the NaeemCRM Android app, and our apps on the Meta developer platform (Naeem CRM Sync for Lead Ads and NaeemCRM for WhatsApp). These services are operated by Naeem, an independent performance marketing consultant based in Kerala, India (“we”, “us”).

Questions about this policy or your data: hello@naeemcrm.com.

• Enquiry form: name, company, email, phone/WhatsApp, country, industry, your message and whether you’re interested in the CRM.
• Lead data from Meta Lead Ads: when a business connects its Facebook Page to Naeem CRM, we receive the answers people submit in that business’s Lead Ad forms (typically name, email, phone and form answers), plus the form, ad and campaign IDs.
• Facebook account and Page details: when a business owner connects through Facebook Login, we receive their basic profile (name, user ID) and the Pages, ad accounts and access tokens they choose to grant.
• WhatsApp messages: when a business connects its WhatsApp Business number, we receive the messages its customers send to that number (and the business’s replies), the sender’s name and phone number, and, for Click-to-WhatsApp ads, the ad and campaign it came from. During setup the business can choose to share its contacts and recent chat history.
• CRM usage data: login details for workspace users, notes, tasks and pipeline activity they enter.
• Technical data: IP address, browser type and server logs needed for security and troubleshooting.

• Deliver new leads from a client’s Facebook Lead Ads into that client’s own CRM workspace, and alert their sales team.
• Send conversion events (for example, “lead qualified” or “deal won”) back to the client’s own Meta ad account via the Conversions API, so their campaigns can optimise.
• Reply to enquiries and provide the marketing and CRM services clients pay for.
• Keep the service secure, prevent abuse and fix problems.

Data received through Meta APIs (such as Pages, Lead Ads and Marketing APIs) is used only to provide the features the connecting business has asked for, in line with the Meta Platform Terms and Developer Policies.

• Access is limited to the Pages and ad accounts the business owner explicitly authorises.
• Access tokens are stored encrypted on our server and used only for that business’s workspace.
• The business can remove our access at any time in Facebook → Settings → Business Integrations, or in Meta Business Settings.

A business can connect its WhatsApp Business number to its CRM at naeemcrm.com/connect-whatsapp, using Meta’s WhatsApp Embedded Signup. The business keeps using the WhatsApp Business app on its phone; we only receive a copy of the conversations.

• What we do with it: create or update a lead in that business’s own CRM workspace for each new chat, log the conversation on the lead and alert the assigned staff member.
• What we don’t do: we don’t send bulk or marketing messages, read chats of numbers that were not connected by their owner, or use message content for advertising.
• Who controls it: the connecting business controls its customers’ WhatsApp data. We process it on the business’s behalf.
• Disconnecting: the business can disconnect at any time in WhatsApp Manager or Meta Business Settings, or by emailing us. New messages then stop arriving in the CRM.

Use of the integration is also covered by our Terms of Service.

The NaeemCRM Android app lets a client’s staff use their CRM workspace on their phone. It signs in to that workspace with the staff member’s own username and password and stores only a login token on the phone, in the phone’s secure storage.

• The app shows the same leads, deals, calls and alerts the staff member can see on the web.
• Call and WhatsApp buttons open the phone’s own dialler and WhatsApp app; we don’t record calls or read WhatsApp on the phone.
• The app checks for new alerts while it’s open and shows them as phone notifications. It doesn’t track location or contacts.
• Logging out removes the login token from the phone.

We share personal data only when needed to run the service:

• The client business that owns the lead or ad account (its leads appear only in its own workspace).
• Hosting and email providers that store our servers and deliver notification emails, under confidentiality obligations.
• AI service provider (DeepSeek): for some ad enquiries we send only the person’s name to an AI service to estimate nationality, so the lead reaches the right team. No phone number, email or other details are sent.
• Meta, when a client asks us to send conversion events back to its own ad account.
• Authorities, if required by law.

• Enquiries: up to 24 months, unless you become a client.
• Client CRM data: for as long as the client’s contract is active. After it ends, the client can export its data; we delete the workspace within 30 days.
• Server logs: up to 90 days.

Workspaces run over HTTPS, each client has a separate workspace, user access is role-based, and we keep regular backups. No method is 100% secure, but we take reasonable steps to protect your data.

You can ask to access, correct, export or delete your personal data, or object to how it’s used. Email hello@naeemcrm.com and we’ll respond within 30 days. If your data came from a business’s Lead Ad, we may pass your request to that business, as it controls that data.

To delete the data Naeem CRM holds about you, including data received through Facebook:

1. Remove the app: go to Facebook → Settings & privacy → Settings → Apps and websites (or Business Integrations), find Naeem CRM Sync or NaeemCRM and click Remove.
2. WhatsApp: a business can disconnect its number in Meta Business Settings → Accounts → WhatsApp accounts, or ask us to remove it. Customers who messaged a business can ask that business, or us, to delete their chats from the CRM.
3. Request deletion: email hello@naeemcrm.com with the subject “Data deletion request”, including your name and the email or Facebook account used.
4. Confirmation: we delete your data within 30 days and email you a confirmation.

We may update this policy from time to time. The “Last updated” date at the top shows the latest version.