This policy explains what personal data SellableCRM ("we", "us") collects, why, and what you can do about it. SellableCRM is run by Sabour Adeel, trading as SellableCRM, based in Lahore, Pakistan. Contact: hello@sellablecrm.com
1. Who this covers
- Website visitors: people who visit sellablecrm.com or book a demo.
- Agencies: our customers and their team members who use the agency hub.
- Clients and their leads: the businesses our agencies serve, their staff, and the people who contact those businesses (leads). For this data, we act on the agency's behalf.
2. Website visitors
- We don't use analytics or advertising cookies on our website.
- Our website host (GitHub Pages) may log your IP address and browser details for security and to deliver the site.
- Fonts load from Google Fonts, which receives your IP address.
- When you book a demo, our booking calendar (provided through HighLevel) collects your name, email and any notes you add, so we can send the invite and hold the call. The booking calendar may use cookies needed for it to work.
3. Agencies
We collect:
- Account details: your name, email, agency name, and the details of team members you invite.
- Billing details: handled by Stripe. We see the card type and last four digits, never the full card number.
- Client details you send us: business name, website, industry, location, services, hours, lead sources, contact people, and SMS registration details (legal business name, tax ID, contact person).
- Hub activity: tickets, change requests, message edits and an activity log of who did what.
We use this to provide the service, bill you, answer tickets, keep the hub secure and tell you about changes. We may email you about the service. We don't send marketing emails without your agreement.
4. Clients and their leads
When we run a client account, we process lead data such as names, phone numbers, emails, messages, call details and bookings. We do this only on the agency's instructions and only to run that client's lead-to-close system.
- We never sell lead data, and never use it to contact leads for our own purposes.
- Mobile information isn't shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent aren't shared with any third party, except the providers that deliver the messages.
- Anyone who replies STOP to a text is not texted again by that business.
- Leads who want to access or delete their data should contact the business that messaged them. We'll help that business respond.
5. Who we share data with
We use these providers to run the service. Each only gets what it needs:
- HighLevel: client accounts, messaging, calls, booking and inbox.
- Phone carriers and email delivery providers: to deliver texts, calls and email.
- Stripe: payments.
- Supabase and Vercel: hosting and the agency hub's database.
- Google Workspace: our email and calendar.
- GitHub: hosting our website.
We may also share data if the law requires it, or to protect our service and users from fraud or abuse. We don't sell personal data.
6. Where data is stored
Our team is based in Pakistan, and our providers mainly store data in the United States. Your data may be accessed from and stored in countries other than your own. We use providers with recognized security standards.
7. How long we keep it
- Agency account data: while you're a customer, and up to 12 months after, unless you ask us to delete it sooner.
- Billing records: as long as tax and accounting laws require.
- Client and lead data: while the client is active. After cancellation, we keep it for 30 days so the agency can download the export or reinstate the client, then delete it.
8. Security
We limit access to people who need it, use secure logins and encrypted connections, and keep each client's data in its own account. No system is perfectly secure. If a breach affects your data, we'll tell you without undue delay.
9. Your rights
Depending on where you live, you can ask to see, correct, export or delete your personal data, or object to how we use it. Email hello@sellablecrm.com, and we'll reply within 30 days. For lead data, we'll pass your request to the business that holds it.
10. Children
Our service is for businesses. We don't knowingly collect data from children under 16.
11. Changes to this policy
If we make important changes, we'll update the date at the top and email agencies before the changes apply.
Questions or requests: hello@sellablecrm.com