Privacy Policy for Sparc CRM

Last updated: 23/10/2025

Grantham’s CRM (“we”, “our”, or “the app”) is a business management and customer relationship management (CRM) application designed for enterprise and multi-branch organizations. We are committed to protecting your privacy and ensuring transparency in how data is collected, used, and safeguarded.

This Privacy Policy explains how information is collected, used, stored, and protected when you use Grantham’s CRM.

1. Information We Collect

We collect only the information necessary to provide core CRM functionality.

a. User-Provided Information

• Admin account details (email address via Firebase Authentication)
  
  

• Staff details (name, role, branch assignment, PIN)
  
  

• Customer and lead information entered by users
  
  

• Task details, notes, and work entries
  
  

• Expense records and inventory data
  
  

• Branch-related information
  
  

b. Automatically Collected Information

• Timestamps of actions (for audit logs)
  
  

• App usage data required for system functionality
  
  

• Device-related metadata required by Firebase (non-personal)
  
  

2. How We Use Information

The collected data is used strictly for:

• User authentication and authorization
  
  

• Managing branches, staff, customers, and leads
  
  

• Tracking tasks, inventory, funds, and expenses
  
  

• Enabling WhatsApp communication workflows initiated by users
  
  

• Maintaining audit logs and operational transparency
  
  

• Improving app reliability and performance
  
  

We do not use data for advertising, profiling, or resale.

3. Authentication & Security

• Admin users authenticate via Firebase Authentication
  
  

• Staff users authenticate using branch-specific PINs
  
  

• Access is strictly role-based and branch-restricted
  
  

• Data isolation is enforced per branch and per role
  
  

• Secure Firebase infrastructure is used for data storage and transmission
  
  

4. WhatsApp Integration

Grantham’s CRM allows users to initiate WhatsApp messages using pre-configured templates.

• Messages are sent only when explicitly triggered by the user
  
  

• The app does not read, store, or monitor WhatsApp messages
  
  

• Communication occurs via WhatsApp’s official application using device intent (url_launcher)
  
  

• No WhatsApp data is collected or stored by us
  
  

5. Data Storage & Processing

• All data is securely stored using Google Firebase / Cloud Firestore
  
  

• Data is encrypted in transit and protected by Firebase security rules
  
  

• We do not store sensitive personal identifiers beyond business-use data
  
  

• Data is retained only as long as required for business operations
  
  

6. Data Sharing

We do not sell, trade, or rent user data.

Data may only be shared:

• When required by law or legal process
  
  

• To comply with applicable regulations
  
  

• With Google Firebase services solely to operate the app
  
  

7. User Control & Responsibilities

Organizations using Grantham’s CRM are responsible for:

• The accuracy of data entered into the system
  
  

• Managing staff access and PIN security
  
  

• Ensuring customer consent for communications where applicable
  
  

Admins can manage or remove staff and data within the app.

8. Children’s Privacy

Grantham’s CRM is not intended for children under the age of 13.
We do not knowingly collect personal information from children.

9. Third-Party Services

The app uses the following third-party services:

• Google Firebase (authentication, database, analytics necessary for functionality)
  
  

• WhatsApp (external messaging, user-initiated only)
  
  

These services operate under their respective privacy policies.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.
Any changes will be reflected on this page with an updated date.

11. Contact Information

If you have any questions or concerns about this Privacy Policy, please contact:

Email:  orbit.test.personal@gmail.com
App Name: Grantham’s CRM