Privacy Policy

Last updated: March 15, 2026

1. Introduction

This Privacy Policy describes how OnlyCRM (hereinafter - "Service", "we") collects, uses, stores, and protects users' personal data. By using our Service, you agree to the terms of this Policy.

2. Data We Collect

When using the Service, we may collect the following data:

• Account data: name, email address, password (encrypted)
• Telegram account data: identifier, username, session strings (encrypted)
• Usage data: information about dialogs, messages, actions within the Service
• Technical data: IP address, browser type, device information
• Payment data: transaction and balance information

3. How We Use Data

Collected data is used for:

• Providing and improving the Service
• Managing subscriptions and billing
• Ensuring account security
• Technical user support
• Service usage analytics
• Fulfilling legal obligations

4. Data Storage and Protection

We implement technical and organizational measures to protect data:

• Encryption of sensitive data (session strings, TOTP secrets) using Fernet algorithm
• Password hashing
• JWT authentication with limited token lifetime
• Secure database connection

Data is stored on protected servers and is accessible only to authorized personnel.

5. Data Sharing with Third Parties

We do not sell or share personal data with third parties, except:

• Payment providers - for transaction processing
• Law enforcement - upon lawful request
• Technical providers - for infrastructure maintenance

6. User Rights

You have the right to:

• Request access to your personal data
• Request correction of inaccurate data
• Request data deletion (subject to legal retention obligations)
• Withdraw consent for data processing

To exercise these rights, contact us through the built-in support.

7. Cookies and Local Storage

Detailed information about cookies and storage technologies is described in the Cookie Policy.

8. Policy Changes

We may update this Policy. Users will be notified of significant changes through the Service. Continued use of the Service constitutes acceptance of the updated Policy.

9. Contact Information

For data privacy questions, please contact us through the built-in support in the Service.