Privacy Policy

1. Introduction

Thodar CRM (“we”, “our” or “us”) is a WhatsApp-first sales CRM operated by Avvai Tech Services. This Privacy Policy explains how we collect, use, store and protect personal data when you use our web application, mobile application and related services.

2. Data we collect

• Account data: name, work email, phone number, password hash and organisation details when you register or sign in.
• Lead and customer data: names, phone numbers, email addresses, company names, conversation history, notes, tasks, deal values and any other information your team enters into the CRM.
• WhatsApp data: messages, voice notes, media, profile names, profile pictures and message status receipts received or sent through connected WhatsApp numbers.
• Usage data: IP address, browser type, device information, feature usage and error logs to help us improve the service.

3. How we use your data

• To provide, operate and maintain the CRM and its features.
• To route leads, assign conversations and generate reports for your organisation.
• To send service notifications, security alerts and support responses.
• To analyse usage, fix bugs and improve performance.
• To comply with legal obligations and enforce our terms.

4. Data sharing

We do not sell personal data. We share data only with subprocessors necessary to operate the service (for example, cloud hosting, WhatsApp Business API providers and AI transcription services) and only under written agreements that require appropriate security and confidentiality measures.

5. Data retention

We retain your data for as long as your organisation maintains an active Thodar CRM account. When an account is closed, we delete or anonymise data within 90 days unless a longer retention period is required by law.

6. Security

We use encryption in transit (TLS), encrypted storage, row-level database isolation, role-based access controls and regular security reviews. No method of transmission over the Internet is completely secure, but we follow industry standards to protect your information.

7. Your rights

Depending on your location, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us using the details below.

8. Cookies and tracking

We use essential cookies to keep you signed in and maintain your session. We do not use third-party advertising cookies.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the application before the changes take effect.

10. Contact us

If you have questions about this Privacy Policy or how we handle your data, please contact Avvai Tech Services.