Privacy Policy
Last updated June 29, 2026
This English text is provided for convenience. In case of any discrepancy, the Russian version prevails.
1. Who we are
SmartCRM24 is an AI-native CRM system that unites a messenger inbox, a sales funnel, and a built-in AI agent. This policy describes how we process personal data when you use our website, demo, and service.
The data controller is SI Abdugafarov Muhammadjon Anvarjonovich (“we”).
You can reach us on Telegram: @muhammad_babolo.
2. What data we collect
On the website. Technical data: IP address, device and browser type, pages visited, referral source. Used only in anonymized analytics.
In the AI-agent demo. Your Telegram identifier, the content of your conversation with the agent, and any contact details you provide voluntarily (name, phone, email, company name).
In the pilot and subscription. Client data to the extent needed for SmartCRM24 to operate: lead cards, conversations from connected channels, deal statuses, catalog, knowledge base. Access is granted only under a contract with the client.
3. Why we process data
- Providing the service: AI-agent replies, maintaining cards, movement through the funnel.
- Improving quality: error analysis and anonymized model optimization. Personal data is not used to train third-party models.
- Communication: responding to requests, arranging the pilot, billing.
- Compliance with the law.
4. Legal basis
We process data on the basis of:
- Your consent (visiting the website, writing to the agent, filling out forms).
- A contract with the client — for the duration of the pilot and subscription.
- The requirements of applicable personal-data legislation.
5. Who we share data with
We do not sell your data and do not pass it to third parties for advertising purposes. As part of running the service, we use a limited set of processors:
- LLM providers (Google Gemini, OpenAI, Anthropic, etc.) — for generating AI replies. Under our agreements with them, the data we send is not used to train their models.
- Cloud providers (Google Cloud, Vercel, AWS, etc.) — hosting and infrastructure.
- Message-delivery providers for messengers and social networks — delivering messages to connected channels (Instagram, WhatsApp, Facebook, Telegram).
- Authorized government bodies — solely upon a lawful request.
For the Instagram, Facebook and WhatsApp channels we use the Meta platforms (Instagram Graph API, Messenger Platform, WhatsApp Business Platform) and comply with the Meta Platform Terms and developer policies. Data obtained through these platforms is used solely to operate the service.
6. Retention periods
- Website logs: up to 90 days.
- Demo-agent conversations: up to 12 months, unless agreed otherwise.
- Client data within the pilot and subscription: for the term of the contract + 30 days after its termination.
- Contractual and accounting documents: 5 years (statutory requirement).
7. Your rights
At any time, you may:
- Request access to your data.
- Request correction of inaccurate data.
- Request deletion of data.
- Withdraw consent given earlier.
- File a complaint with the authorized personal-data protection body.
Send requests on Telegram @muhammad_babolo. We respond within 30 days.
For how to request data deletion, see the Data Deletion page.
8. Cookies and analytics
We use only technical cookies necessary for the website to function, plus anonymized analytics. We do not use advertising cookies or third-party ad-network trackers.
9. Security
Data is transmitted over HTTPS. Storage is with certified cloud providers, with encryption to industry standards. Access to data is limited to staff who need it to operate the service. For Enterprise, an on-prem deployment with private models is available.
10. Changes to this policy
We may update this policy from time to time. The current version is always available at /privacy. We will notify you separately about material changes.
11. Contacts
Send all questions related to personal data and this policy on Telegram: @muhammad_babolo.