We collect the following types of information when you use the Application:

a. Personal Information

• Account Information: When you sign up or create an account, we may collect your name, email address, phone number, and password.
• Member Information: If you add team members to the Application, we may collect their names, email addresses, and roles.
• Contact Information: When you create contacts or leads, we may collect names, phone numbers, email addresses, and other details you provide about your customers or prospects.
• Social Media Information: If you connect your Facebook account, we may collect your Facebook profile information (e.g., name, profile ID) and data related to your Facebook interactions, subject to your Facebook privacy settings.
• WhatsApp Information: If you set up WhatsApp integration, we may collect your WhatsApp phone number and related metadata (e.g., message timestamps) to facilitate communication.
• Google Account Information: If you sign in with Google or connect your Gmail account, we collect your Google profile information (name, email address, profile picture) and, if you authorize the Gmail integration, access to read and send emails on your behalf. See Section 4 for detailed information about Google data handling.

b. Non-Personal Information

• Usage Data: We collect information about how you interact with the Application, such as pages visited, features used, and time spent on the Application.
• Device Information: We may collect details about your device, including IP address, browser type, operating system, and device identifiers.
• Analytics Data: We use analytics tools to collect aggregated data about Application usage, such as click patterns and feature popularity.

c. Third-Party Data

When you import contacts, leads, or other data from third-party services (e.g., Facebook, WhatsApp), we collect only the data you explicitly provide or authorize through those services.

We use the collected information for the following purposes:

• To Provide and Improve the Application: To enable features like contact management, lead tracking, product creation, and customer outreach.
• To Facilitate Communication: To support WhatsApp, Gmail, and other communication integrations for reaching out to customers. When you connect Gmail, we use the integration to send and receive emails directly within the Application on your behalf.
• To Manage Accounts: To authenticate users, manage team member access, and secure your account.
• To Personalize Your Experience: To tailor the Application's features and content based on your preferences and usage.
• To Analyze and Enhance Performance: To monitor Application performance, troubleshoot issues, and improve functionality through analytics.
• To Comply with Legal Obligations: To meet regulatory requirements and respond to legal requests.
• To Communicate with You: To send updates, notifications, or promotional materials (you may opt out of marketing communications).

We do not sell your personal information. We may share your information in the following circumstances:

• With Team Members: Information about contacts, leads, or products may be shared with team members you add to the Application, based on their access permissions.
• With Service Providers: We may share data with trusted third-party providers (e.g., cloud storage, analytics, or communication platforms) to support Application functionality. These providers are contractually obligated to protect your data.
• With Third-Party Integrations: When you connect Facebook or WhatsApp, data may be shared with these platforms to enable integration, subject to their privacy policies.
• For Legal Reasons: We may disclose information if required by law, such as in response to a court order or government request.
• In Business Transfers: If we undergo a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

The Application integrates with third-party services like Google (Gmail), Facebook, WhatsApp, Instagram, and Telegram. When you use these integrations:

• Data shared with these services is governed by their respective privacy policies. We encourage you to review the privacy policies of these services.
• We only collect and process data you explicitly authorize through these integrations.
• You can disconnect third-party integrations at any time through the Application's settings.

Google API Services and Gmail Integration

FirstToFly CRM uses Google API Services to provide Gmail integration functionality. This section describes how we access, use, store, and share Google user data.

What Google Data We Access

When you connect your Gmail account, we request access to:

• Email Reading: Permission to read your emails so you can view and manage email conversations within the Application.
• Email Sending: Permission to send emails on your behalf when you compose and send messages through the Application.
• Profile Information: Your Google account email address and basic profile information for authentication purposes.

How We Use Google Data

We use Google user data exclusively to:

• Display your email conversations within the Application's unified inbox
• Send emails on your behalf when you compose messages in the Application
• Sync email metadata (sender, recipient, subject, timestamps) to enable email tracking and conversation management
• Associate email communications with your contacts and leads in the CRM

How We Store Google Data

• Email content and metadata are stored securely on encrypted servers
• OAuth tokens are stored securely and used only to maintain your Gmail connection
• We retain email data only as long as your Gmail integration is active or as required to provide Application services

How We Share Google Data

• We do not sell, rent, or trade your Google user data to any third parties
• Email data may be visible to team members in your organization based on their access permissions within the Application
• We do not use Google user data for advertising purposes
• We do not use Google user data to train artificial intelligence or machine learning models, except for features that directly benefit you within the Application (such as email categorization) with your explicit consent

Google API Services User Data Policy Compliance

FirstToFly CRM's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data to provide and improve user-facing features that are prominent in the Application's user interface
• We do not transfer Google user data to third parties except as necessary to provide the service, with user consent, or for legal reasons
• We do not use Google user data for serving advertisements
• Human review of Google user data is limited to investigating security issues, complying with applicable law, or with the user's affirmative consent for specific data

Revoking Google Access

You can revoke FirstToFly CRM's access to your Google account at any time by:

• Disconnecting the Gmail integration in the Application's Settings > Channels > Email section
• Removing access through your Google Account permissions page

Upon revocation, we will stop accessing your Gmail data and delete cached email content within 30 days, unless retention is required for legal purposes.

We implement industry-standard security measures to protect your data, including encryption, access controls, and secure servers. However, no system is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

We retain your personal information for as long as your account is active or as needed to provide the Application's services. We may also retain data to comply with legal obligations, resolve disputes, or enforce agreements. You can request deletion of your data (see Section 7).

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your data, subject to legal retention requirements.
• Restriction: Request that we limit the processing of your data.
• Data Portability: Request a copy of your data in a structured, machine-readable format.
• Opt-Out: Opt out of marketing communications or certain data processing activities.

To exercise these rights, contact us at [email protected]. We may require verification of your identity before processing your request.

If you are located outside Singapore, your data may be transferred to and processed in Singapore or other countries where our servers or service providers are located. We ensure that such transfers comply with applicable data protection laws, using mechanisms like Standard Contractual Clauses where required.

The Application is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware of such data, we will take steps to delete it.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy in the Application or by emailing you. The "Last Updated" date at the top indicates when the policy was last revised.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Thank you for trusting FirstToFly Pte Ltd with your data. We are committed to keeping your information safe and secure.