• This Privacy Policy describes how N-ACH ("we", "our", or "us") collects, uses, stores, and protects your information when you use our Customer Relationship Management (CRM) application and related services (the "Services").

• This Privacy Policy describes how N-ACH ("we", "our",, if you don't mind " or "us") collects and uses information. If you don't agree, please stop using the Services.

SUMMARY OF KEY POINTS

• Information Collected → Personal details (name, NIC, contacts, address, company, social links, images), customer/lead data, product/document info, technical logs.

• Use of Information → To manage contacts, leads, customers, products, and documents; enable CRM functionality; communicate; comply with law; improve services.

• Legal Basis → Consent, contracts, legal obligations, legitimate interests.

• Sharing → Not sold; only shared with service providers, for business transfers, or if legally required.

• Data Retention → Kept as long as needed; deleted/anonymized when no longer required; linked records also deleted.

• Security → Encryption, access controls, monitoring, audits.

• User Rights → Access, correct, delete, withdraw consent, complain to authorities.

• Third-Party APIs → Only used for CRM operations, not for unrelated use.

• Contact Us → Clear company contact details provided.

1. INFORMATION WE COLLECT

We collect different categories of information, depending on how you use the CRM system:

a) Personal Details

• Full Name: first, middle, and last name.

• Identifiers: title, gender, national identity card (NIC) or other government ID.

• Contact Information: mobile number, WhatsApp, telephone number, email address.

• Address Information: address lines, country, state, and area.

• Company Information: employer/company name, “other company” details if manually entered, and job designation.

• Social Media Links: Facebook, LinkedIn, or other social platforms.

• Profile Images: photos uploaded to the system.

b) Lead and Customer Information

• Customer status (Contact, Lead, Customer).

• Products associated with a customer or lead.

• Any special notes, descriptions, or remarks entered by users.

• Uploaded documents linked to products or customer records (document name, type, extension, attachments).

• Dynamic attributes, which are customizable fields for customers, products, or documents, are configured by your organization.
  
  

c) Technical and Usage Information

• Log data generated when using the app (e.g., actions taken, pages visited).

• Device details (model, operating system, app version).

• Optional location data (if permission is granted).

2. HOW WE USE YOUR INFORMATION?

We process and use your information for the following purposes:

• CRM Operations: To create, manage, and edit customer, contact, and lead records.

• Sales and Service: To process product selections, manage product-related documents, and follow up on customer requests.

• Communication: To contact you via email, telephone, or in-app notifications regarding service updates or inquiries.

• Conversion Tracking: To support the conversion of Contacts → Leads → Customers.

• Compliance: To fulfill legal and regulatory obligations (such as record-keeping).

• Improvement and Security: To monitor system performance, prevent unauthorized access, and enhance functionality.

3. LEGAL BASIS FOR PROCESSING

Depending on the nature of the data, we rely on different lawful bases:

• Consent: When you voluntarily provide personal details, documents, or select products.

• Contract: When information is required to provide CRM services, you request.

• Legal Obligation: When we must store or share data to comply with applicable laws.

• Legitimate Interest: When processing is necessary for CRM operation, fraud prevention, and security.

4. SHARING OF INFORMATION

We do not sell or trade your personal data. We may only share it under these circumstances:

• Service Providers: To third-party vendors or partners that provide system hosting, support, or integrations.

• Business Transfers: If the company undergoes a merger, acquisition, or restructuring.

• Legal Requests: To government or regulatory bodies, if required by law.

• User Direction: If you request integrations with third-party tools, your data may be shared accordingly.

5. DATA RETENTION

We keep your information only for as long as necessary to provide CRM services or comply with regulations.

When you delete a record (e.g., customer, product, or document), associated linked entries in supporting tables (CUSTOMER_PRODUCT, CUSTOMER_DOCUMENT, OBJ_VAL) are also removed.

When information is no longer required, we securely delete, archive, or anonymize it.

6. DATA SECURITY

We implement multiple safeguards to protect personal data, including:

• Data encryption for sensitive identifiers and uploaded documents.

• User authentication and strict access controls.

• Monitoring, regular security audits, and updates.

• Secure APIs for retrieving and managing related data (e.g., Titles, Countries, States, Companies).

7.YOUR RIGHTS

 Depending on your local privacy regulations (e.g., GDPR, CCPA), you may have the following rights:

• Access: Request a copy of your personal information.

• Correction: Request updates or corrections to inaccurate data.

• Deletion: Request removal of records, subject to legal/business requirements.

• Consent Withdrawal: Withdraw consent at any time (e.g., for document uploads or optional fields).

• Complaint: File a complaint with your local data protection authority if you believe your rights are being violated.

8.  THIRD-PARTY APIs & INTEGRATION

Our CRM may use third-party APIs to retrieve or store related information (e.g., Titles, Countries, States, Areas, Companies, Designations, Products, and Documents).

• These APIs are used only for CRM functions.

• Data exchanged with third-party APIs is not used for advertising or unrelated purposes.

N-Ach (Pvt) Ltd

185

High Level Rd

Maharagama 10280

Sri Lanka 

9. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country, you may have the right to request access to the personal information we collect from you, change that information, or delete it. To request a review, update, or delete your personal information, please visit https://n-ach.com/contact.