Privacy Policy

This Privacy Policy explains how Qualimize (“we”, “us”) collects, uses, and protects information when you use our website and application (the “Service”). By using the Service, you agree to the practices described here.

We collect information in four ways:

• Account data: name, email address, and password (stored as a salted hash) when you create a workspace or accept an invitation.
• Trial application data: if you apply for a free trial, we collect your name, email, phone number, company name, and the other details the application form asks for, so we can evaluate and process your request.
• Workspace data: leads, campaigns, notes, and activity your organization enters into the Service, scoped entirely to your organization.
• Usage data: basic technical information (browser, device, pages visited) used to keep the Service reliable and secure.

We use collected information to operate and improve the Service, authenticate accounts, provide customer support, and communicate important updates. We do not sell personal information to third parties.

If you submit a trial application, we may contact you by phone or email using the details you provided, to discuss your application and, if approved, to send you access to start your trial.

If your organization connects a Meta (Facebook) Ads account, Qualimize acts on your behalf to:

• Receive lead data from your connected Meta Lead Ads forms (such as name, email, and phone number) and store it as leads inside your workspace.
• Send relevant outcome events back to Meta through the Meta Conversions API when a lead's status changes (for example, Contacted, Qualified, or Converted), so your ad account can optimize toward the outcomes that matter to your business.

Outcome events sent to Meta use cryptographically hashed contact details as match parameters, never plain-text personal information. This exchange only happens for organizations that explicitly connect their own Meta account and credentials, and is used solely to provide this feature. Qualimize's own marketing website also uses the Meta Pixel; see section 5 below.

Our marketing website uses cookies and similar technologies from the Meta Pixel, Google Analytics, Google Tag Manager, and Microsoft Clarity, to measure site performance and ad effectiveness. We also set a first-party cookie to remember your light/dark theme preference, which is not used for tracking.

Microsoft Clarity records how visitors interact with our pages (clicks, scrolling, and mouse movement) to help us understand and improve the site. It does not capture audio or video of you or your screen — recordings are reconstructed from interaction data, not a screen or camera recording — and fields on our forms that collect personal details (name, email, phone, company, and message) are masked before any data leaves your browser.

You can control third-party cookies through your browser settings or an ad-blocking extension. Doing so does not affect your ability to use the Service.

Every organization's data, including leads, campaigns, and users, is logically isolated from every other organization on the platform. Access is enforced by role-based permissions at both the interface and the data-query layer.

We retain workspace data for as long as your organization's subscription is active.

If your subscription stops being active — because a payment is overdue, a free trial ended, or the account was suspended — we keep your workspace data for 90 days from that date. During this period your workspace is locked but nothing is deleted, and restoring an active subscription restores your data and access automatically.

After 90 days of continuous inactivity, workspace data — leads, campaigns, messages, notes, follow-ups, and related activity records — is permanently and irreversibly deleted by an automated process. Your account record, user logins, and billing records are retained, the latter where required for legal or accounting purposes. If you close your workspace yourself, we delete or anonymize your data within a reasonable period, subject to the same legal and accounting exceptions.

We share information with a small number of service providers, solely to operate the Service on our behalf:

• Razorpay — payment processing. We never see or store your full card or bank details.
• Resend — delivery of transactional email (account, billing, and trial notifications).
• Supabase — database hosting.
• Vercel — application hosting.
• Meta (Facebook) — as described in section 4, for organizations that connect a Meta Ads account.
• Google (Analytics, Tag Manager) — website analytics, as described in section 5.
• Microsoft (Clarity) — website behavior analytics, as described in section 5.

Each provider only receives the information it needs to perform its function and is contractually restricted from using it for any other purpose.

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal information. Organization admins can manage most of this directly from workspace settings; for anything else, contact us and we'll help.

Questions about this policy can be sent to qualimize.crm@gmail.com.