Privacy policy

Last updated: 5 October 2026 This policy explains what Genzam ("Genzam", "we") does with personal data when you use the Genzam ERP service at https://crm.genzam.com, including its connections to WhatsApp, Facebook, Instagram, text messages and email. 1. Who is responsible Genzam is business software. Two roles apply: • For the account of each business that uses Genzam and its staff (names, email addresses, sign-in records, billing), Genzam is the controller. • For the data a business keeps in Genzam about its own customers (contacts, sales, messages, leads), that business is the controller and Genzam processes the data on its behalf and on its instructions. If you are a customer of a shop that uses Genzam, contact that shop first about your data; we will help them answer you. 2. What we collect • Account data: name, email address, role, store, password (stored only as a hash), sign-in and security records. • Business data entered by our customers: products, stock, sales, invoices, accounting records, customers and suppliers. • Messaging data, when a business connects a channel: messages sent and received through WhatsApp, Facebook Messenger, Instagram, SMS and email; the sender's phone number, page-scoped or Instagram-scoped ID, public profile name when the platform provides it; delivery and read statuses; and leads submitted through Facebook or Instagram lead ads. • Connection data: the IDs of the connected WhatsApp Business account, phone numbers, Facebook Pages and Instagram accounts, and the access tokens and app secrets needed to use them. These are stored encrypted and are never shown again after they are saved. • Technical data: IP address, browser and device information, and logs needed to run, secure and fix the service. 3. Data we receive from Meta (WhatsApp, Facebook, Instagram) When a business connects its WhatsApp Business account, Facebook Page or Instagram account, Genzam receives from Meta, through Meta's official APIs, only what is needed to show and answer that business's messages and leads in its Genzam inbox: the messages, the sender's identifiers and profile name, message statuses, and lead-form answers. We use this data only to provide the inbox, reply, campaign and lead features to that business. We do not sell it, use it for advertising, or combine it across businesses. Use of this data follows Meta's Platform Terms and Developer Policies. 4. How we use data To provide and secure the service; to deliver the messages a business sends and file the replies it receives; to send service notices (password resets, invoices, security alerts); to bill our customers; to comply with the law; and to improve the service using aggregated information that identifies no one. Marketing messages are only sent by a business to people who have given consent for that channel, and anyone can stop them by replying STOP or using the unsubscribe link. 5. Who we share it with Service providers that run Genzam for us, under contracts that protect the data: cloud hosting and databases, file storage, email delivery (Amazon Web Services), and the messaging providers a business chooses to connect (Meta for WhatsApp, Facebook and Instagram; Twilio or a local SMS provider). We disclose data when the law requires it. We never sell personal data. 6. How long we keep it Account and business data for as long as the business uses Genzam, then for up to 90 days so it can be exported, unless the law requires longer (for example accounting records). Messages stay with the business's records until the business or the person deletes them. Disconnecting a channel deletes its stored tokens immediately. Logs are kept for a limited period for security. 7. Security Data is encrypted in transit (HTTPS); connection secrets are encrypted at rest; access inside each business is limited by roles and stores; support staff can only open a business's account in a recorded support session whose reason the business can read. 8. Your rights Depending on where you live (for example under the GDPR in the EU, or the laws of Bangladesh), you may ask to access, correct, delete or export your personal data, object to or restrict its use, and withdraw consent. You can also complain to your data-protection authority. To ask, use the contact details below; if a shop holds your data, we will pass your request to it. 9. Deleting your data See https://crm.genzam.com/data-deletion for how to ask us to delete data, including data connected to a Facebook or Instagram login. 10. Changes We will post any change here with a new date, and tell our business customers about important changes. 11. Contact Genzam Use the contact form on https://crm.genzam.com and choose "privacy" in your message.