Privacy Policy

1Controller and scope

Option CRM is operated by Aniket Samant under RoasBodhi. Each customer remains responsible for the contacts and message content they upload or synchronize. This policy covers the application, not independent third-party services.

2Information processed

• Account profile: name, normalized email, profile phone, security state and policy acceptance.
• Workspace records: contacts, groups, tags, custom fields, campaigns, CRM notes, tasks and deals.
• WhatsApp connection and delivery metadata needed to operate QR sessions and reports.
• Security, audit, device, provider-health, billing order and manual payment-review metadata.
• AI prompts and minimized context only when an authorized user invokes AI assistance.

3Purposes

• Provide and secure accounts, contacts, campaigns, CRM and reports.
• Prevent abuse, enforce tenant isolation, investigate failures and maintain backups.
• Calculate plan eligibility and review payment evidence.
• Improve reliability using privacy-safe aggregate operational measurements.

4Sharing and subprocessors

Data may be processed by configured hosting, database, security, AI or messaging infrastructure only as needed to provide requested functionality. AI providers receive only task context sent through the server-side gateway; customers should avoid unnecessary personal data. Option CRM does not sell contact lists.

5Retention and deletion

Retention depends on account status, operational need, legal obligations and backup cycles. Historical campaign, payment and security audit records may be retained after related editable records are archived. Authorized users can request account data actions at optioncrm@roasbodhi.in.

6Security

Controls include adaptive password hashing, recovery-code hashes, tenant-scoped authorization, encrypted transport, restricted session storage, secret separation, audit events and operational backups. No system can promise absolute security.

7International and third-party processing

Hosting or AI providers may process data outside the customer’s region. Customers must ensure their use and lawful basis permit the selected providers and transfers.

8Children and sensitive data

The service is for business users, not children. Do not upload unnecessary government identifiers, financial credentials, health records or other special-category data.

9Updates and contact

Material policy changes are versioned. Continued use may require renewed acceptance where appropriate. Privacy and support questions may be sent to optioncrm@roasbodhi.in. Account verification and password-reset messages are sent from Option CRM <verify@optioncrm.roasbodhi.in>.