Privacy Policy

Last updated: June 2026

1. Introduction

MB-CRM ("we", "our", "the Service") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share information when you use our platform, in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

MB-CRM is an invite-only, private B2B platform. Access is granted exclusively to individuals who have received a manual invitation from an authorized administrator.

2. Data Controller

Organisation: MB-CRM
Contact: Login as a manager and go to Support page to create a new ticket.

3. Data We Collect

Identity data: Full name, email address, phone number.
Account data: Role, team assignment, login timestamps.
CRM data: Lead records, meeting notes, activity logs, follow-up tasks.
Usage data: IP address, browser type, pages visited, session duration.
Work data: Timesheet entries, training progress, exam scores.
Payment data: Subscription details processed by Stripe (we do not store card numbers).
Communication data: Emails sent via Gmail integration, call recording links.

4. Legal Basis for Processing (GDPR Art. 6)

We process data primarily for the performance of our contract (providing the CRM service, managing accounts, and billing), legitimate interests (security and fraud prevention), and legal obligations (tax records).

5. Your Rights (GDPR Chapter III)

You have the right to access, rectify, erase, restrict, or port your data, and to object to processing. To exercise these rights, please contact us via the Support page within your account.

6. Data Retention

We retain personal data for as long as your account is active and for up to 7 years afterwards to comply with legal obligations (tax, accounting). Data is securely deleted or anonymised after this period.