Privacy Policy
Last updated: October 05, 2026. Learn how SGI CRM collects, protects, uses, and respects your business and personal data.
1 Introduction
Welcome to SGI CRM ("we", "our", or "us"). We provide an enterprise-grade Lead Management, WhatsApp CRM, Telephony, and Omnichannel Marketing platform. We are committed to safeguarding the privacy and security of our users, their businesses, and their prospective customers.
This Privacy Policy explains how our platform collects, stores, processes, and shares personal data when you use our website, SaaS application, API endpoints, Meta/Facebook/Instagram integrations, and WhatsApp Cloud API services.
2 Information We Collect
We collect information in the following categories to provide and improve our services:
Name, business name, work email address, phone number, company address, billing details, and login credentials when registering for a tenant account.
When connecting Facebook Lead Ads or Pages via Meta OAuth, we receive Page IDs, Page access tokens, Lead Gen Form IDs, and lead data (name, email, phone, and form answers) submitted by prospective customers.
WhatsApp Business Account ID (WABA), Phone Number ID, template information, and incoming/outgoing customer chat messages routed through official Meta Cloud API webhooks.
Call timestamps, durations, agent remarks, call disposition statuses, and recording links when integrated with telephony providers (such as Exotel or web dialers).
3 How We Use Your Information
- CRM Lead Ingestion: Automatically importing lead form submissions from Facebook Ads into your CRM pipeline.
- Omnichannel Communications: Delivering and sending customer WhatsApp messages and Messenger interactions through official Meta Cloud APIs.
- Team Performance Analytics: Calculating response times, call completion rates, and lead conversion metrics for your staff.
- Account Security & Billing: Processing recurring subscriptions, verifying tenant identity, and preventing fraudulent activities.
- Compliance & Support: Responding to customer inquiries and complying with legal regulatory obligations.
4 Third-Party Service Providers & Meta Platform Policies
We never sell, rent, trade, or monetize your personal or lead data to third parties. We only share information with trusted third-party cloud infrastructure and API service providers necessary to operate our platform:
- Meta Platforms, Inc. (Facebook / WhatsApp / Instagram): For processing Lead Ads webhooks, page metadata, and WhatsApp Cloud API messages.
- Payment Gateways (Razorpay / Stripe / SGI Meta): For processing secure PCI-DSS compliant subscription billing and affiliate commission tracking.
- Cloud Hosting & Database Providers: Encrypted cloud servers and storage located in secure ISO/IEC 27001 certified data centers.
5 Data Retention & Security
We employ industry-standard encryption protocols (TLS 1.3 in transit and AES-256 at rest), automated firewall systems, and strict role-based access control (RBAC). Data is retained only as long as your tenant subscription is active or as required by applicable tax and regulatory laws.
6 Your Privacy Rights & User Data Deletion
Under applicable data protection laws (including GDPR, CCPA, and the Digital Personal Data Protection Act), you have the right to access, rectify, export, or permanently delete your personal information and all connected Meta business assets from our servers.
Learn how to remove our app from Facebook or request immediate database purging.
7 Contact & Privacy Officer
If you have questions, concerns, or requests regarding this Privacy Policy or your data, please contact our Data Protection Team: