1. Overview

BMP CRM ("we", "us") provides a multi-tenant business management platform. This Privacy Policy explains what personal information we collect, how we use it, and the choices available to you when you use our admin panel and related services.

2. Information we collect

• Account data — name, email, job title, organization details, and authentication credentials (stored hashed).
• Workspace data — CRM records, documents, communications, and configuration you or your team enter into the platform.
• Technical data — IP address, browser type, device identifiers, and usage logs used for security, auditing, and service reliability.
• Billing data — plan selection and payment-related metadata processed by our billing providers.

3. How we use information

We use personal information to provide and secure the Service, authenticate users, enforce organization/tenant isolation, deliver transactional emails (such as invitations and password resets via your organization's configured mail settings), process subscriptions, and comply with legal obligations. We do not sell personal information.

4. Multi-tenant isolation

Customer data is logically separated by organization and tenant. Platform operators access customer data only as needed to operate the Service, provide support you request, or meet legal requirements. Administrators within your organization control user access through role-based permissions.

5. Data retention

We retain account and workspace data for as long as your organization maintains an active subscription or as needed to provide the Service. You may request deletion of your user account subject to your organization's policies and applicable law. Backup copies may persist for a limited period after deletion.

6. Security

We employ encryption in transit, access controls, audit logging, and other safeguards appropriate to the nature of the data we process. No method of transmission or storage is completely secure; please use strong passwords and enable controls available in your workspace.

7. Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal information, or to object to certain processing. Contact your organization administrator or email privacy@bmpcrm.com to exercise these rights.

8. International transfers

We may process data in countries other than where you are located. When we transfer personal information internationally, we use appropriate safeguards consistent with applicable data protection laws.

9. Updates

We may revise this Privacy Policy periodically. The "Last updated" date at the top of this page indicates when changes were last published. Significant changes will be communicated through the Service or by email where appropriate.