Office-Genie CRM ("we", "us") operates the Office-Genie CRM platform at office-geniecrm.base44.app. We act as the data controller for personal data collected through the platform and this website.

If you have any questions about this policy or how we handle your data, contact us through the app or via the contact details provided in your account.

Account data: your name, email address, and role when you register or are invited to the platform.

CRM data you enter: contacts, leads, deals, appointments, messages, and notes you or your team store in the platform on your own behalf.

Usage data: information about how you use the platform (e.g. pages viewed, features used) collected via analytics tools and session recordings.

Payment data: billing and subscription information processed by our payment provider, Stripe. We never see or store your full card details.

Communications: emails, SMS, and chat messages you send or receive through the platform, as part of providing the service.

To provide, maintain, and improve the platform and its features.

To manage your subscription, billing, and account administration.

To send service-related communications such as appointment reminders, workflow notifications, and security alerts.

To detect, prevent, and address technical issues, fraud, and abuse.

To understand usage so we can improve the product — only in aggregate or pseudonymous form for analytics.

Performance of a contract: providing the platform you signed up for, and processing billing.

Legitimate interests: platform security, fraud prevention, and product improvement, balanced against your rights.

Consent: where required — for example, optional analytics cookies — which you may withdraw at any time.

Legal obligation: where we must retain records or respond to lawful requests.

We use strictly necessary cookies to keep you signed in and the platform functioning.

We may use analytics tools to understand aggregate usage of the platform. You can refuse optional cookies through your browser settings without losing access to the platform.

We share personal data only with processors needed to run the platform: hosting and application infrastructure, our payment processor Stripe, email and SMS delivery providers, and authentication providers such as Google when you choose to sign in with them.

Each processor receives only the data needed to perform its function and is bound by contractual data-protection obligations. We never sell your personal data.

The platform is built to ISO 27001 and ISO 9001:2015 certified standards. Data is transmitted over encrypted connections, access is restricted with per-user permissions, and accounts are protected with authentication and role-based access control.

We keep account and billing records for as long as your account is active and for the period required by law afterwards.

CRM data you enter is retained while your account is active; deleting a record removes it from the platform. Closed accounts are paused and their data deleted in line with our retention schedule.

You can request access to your personal data, correction of inaccuracies, deletion of your data, restriction of processing, or a copy of your data in a portable format.

If you believe we mishandle your data you may complain to the Information Commissioner's Office (ICO) in the UK. To exercise any right, contact us and we will respond within one month.

We may update this policy to reflect changes in the platform or the law. The latest version is always published on this page with the revision date below.