Privacy Policy

This Privacy Policy describes how Synergy Consultant ("we", "us", or "our") collects, uses, and protects information when you use the Nivo CRM Android application ("the App"). By using the App, you agree to the practices described in this policy.

Nivo CRM is a business-to-business (B2B) application — it is provided to organisations (real estate developers and brokers) and used by their employees and sales teams. All use of the App occurs in a professional work context.

1. Information We Collect

1.1 Information you provide

• Account credentials: Your name, email address, and mobile number, registered by your organisation's administrator.
• Lead data: Customer names, phone numbers, email addresses, project interests, and notes that you or your team enter into the CRM.
• Call outcomes and notes: Outcome tags, follow-up reminders, and notes you add after calls.
• Site visit records: Scheduled visits, outcomes, and observations logged by sales staff.

1.2 Information collected automatically

• Call log data (duration only): When you initiate a call to a lead through the App, we read your device's call log to retrieve the duration of that call. See Section 4 for full details.
• Device information: Device model, OS version, and app version for technical support purposes.
• FCM token: A Firebase Cloud Messaging token to deliver push notifications (e.g., "Call Now" triggers from the web app to your phone).
• Usage data: Basic in-app actions such as lead status changes and login timestamps, stored in your organisation's Firebase project.

2. How We Use Your Information

We use the information collected solely to provide and improve the Nivo CRM service:

• Display and manage your assigned leads and pipeline
• Auto-log call durations so sales staff do not need to enter them manually
• Send push notifications for desktop-to-phone call triggers and reminders
• Enable your organisation's managers to view team performance and call activity reports
• Deliver WhatsApp messages via the AiSynergy integration on your behalf
• Provide technical support and debug issues
• Improve app performance and fix bugs

We do not use your information for advertising, profiling, or any purpose unrelated to providing the CRM service.

3. Permissions We Request

The App requests the following Android permissions:

• READ_CALL_LOG — To automatically read call duration after a call to a CRM lead is completed. We do not read call logs for numbers outside of your lead contacts.
• CALL_PHONE — To initiate a phone call to a lead directly from the App with one tap.
• READ_PHONE_STATE — To detect when an active call ends so we can trigger the call duration read at the right moment.
• INTERNET — To sync data with your organisation's Firebase database and communicate with Nivo's backend.
• RECEIVE_BOOT_COMPLETED — To restart background listeners after the device reboots (required for FCM push delivery).
• POST_NOTIFICATIONS — To deliver push notifications on Android 13 and above.
• VIBRATE — To vibrate the device on incoming notifications.

All permissions are used exclusively for the purposes described above. No permission is used to track the user outside the app or for any purpose beyond the CRM functionality.

4. Call Log Access

How it works

1. A salesperson taps "Call" on a lead's profile in the App.
2. The App dials the lead's phone number using the device's native dialer.
3. After the call ends, the App reads the call log to find the most recent call matching the dialled number.
4. The call duration (and timestamp) is saved to the lead's activity timeline in the CRM.

What we do NOT do

• We do not read call logs for phone numbers that are not in the CRM as leads.
• We do not upload your entire call history to our servers.
• We do not record, store, or transmit the audio content of calls.
• We do not use call log data for any purpose other than logging durations against CRM leads.

Desktop-to-phone call trigger

When a manager or salesperson clicks "Call Now" on the Nivo web app (desktop), the system sends an FCM push notification to the salesperson's Android device. This causes the phone's native dialer to open and dial the lead's number. Call duration is then auto-logged as described above. No VoIP, no SIM change, and no headset is required.

5. Data Storage & Security

• Storage location: All CRM data is stored on Google Firebase (asia-south1 — Mumbai, India). This ensures your data remains on Indian servers, in compliance with the Digital Personal Data Protection (DPDP) Act, 2023.
• Organisation isolation: Each client organisation has its own isolated Firebase project. Your data is never stored in or accessible from another organisation's database.
• Access control: Firebase Security Rules ensure that only authenticated users from your organisation can read or write data. Role-based access (SuperAdmin, Client Admin, Team Lead, Salesperson) further restricts what each user can see.
• Transmission security: All data is transmitted over HTTPS/TLS. Firebase connections are encrypted end-to-end.
• No local storage of sensitive data: The App does not store lead phone numbers or call log data on the device's local storage beyond temporary processing.

6. Data Sharing

We do not sell, rent, or trade your personal data or your organisation's CRM data. We share data only in the following limited circumstances:

• Within your organisation: Data is shared with other authorised users in your organisation based on their role (e.g., managers can see their team's leads and call logs).
• Google Firebase: Data is stored and synced via Google Firebase, which acts as our cloud infrastructure provider. Google's data processing terms apply.
• AiSynergy (WhatsApp): If your organisation uses the WhatsApp integration, lead names and phone numbers are shared with AiSynergy (our META-certified WhatsApp Business API platform, hosted in India) solely to deliver WhatsApp messages you authorise. See Section 7.
• Legal requirements: We may disclose data if required to do so by law or in response to a valid legal process.

We do not share data with advertisers, data brokers, analytics companies, or any third party for marketing purposes.

7. WhatsApp & AiSynergy Integration

Nivo CRM integrates with AiSynergy — a META-certified WhatsApp Business API (WABA) platform operated by Synergy Consultant, built and hosted in India.

• WhatsApp messages are sent only to leads whose numbers are stored in your CRM.
• Messages are sent only when authorised by your organisation (bulk campaigns, automated follow-ups, or individual messages initiated by a salesperson).
• AiSynergy does not use customer data for any purpose other than delivering WhatsApp messages on behalf of your organisation.
• Message delivery data (delivered, read) is stored in your organisation's CRM database for reporting purposes.

8. Data Retention

• Active accounts: CRM data is retained for as long as your organisation's account is active.
• Account termination: Upon termination of your organisation's subscription, data is retained for 30 days to allow for export, after which it is deleted from Firebase.
• Employee offboarding: When a salesperson's account is deactivated by an admin, their leads are reassigned and their login access is revoked. Historical activity logs are retained as part of the organisation's CRM record.
• Call log reads: Call log data (duration and timestamp) is transferred to Firebase upon read and is not stored locally on the device.

9. Your Rights

As a user of Nivo CRM, you have the following rights regarding your personal data:

• Access: Request a copy of personal data we hold about you.
• Correction: Request correction of inaccurate personal data.
• Deletion: Request deletion of your personal data (subject to your organisation's data retention needs and applicable laws).
• Withdrawal of consent: You may withdraw consent for specific data processing at any time (e.g., by revoking the call log permission in Android Settings). Note that revoking the call log permission will disable the auto-duration-logging feature.
• Data portability: Request your organisation's CRM data in a portable format.

To exercise these rights, please contact your organisation's CRM administrator or reach us directly at the contact details in Section 12.

10. Children's Privacy

Nivo CRM is a business application intended exclusively for use by adults in a professional work context. The App is not directed at, and should not be used by, anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a minor has used this App, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the App's features, or applicable laws. When we make changes, we will:

• Update the "Last updated" date at the top of this page.
• Notify your organisation's administrator via email or in-app notification for material changes.

We encourage you to review this policy periodically. Continued use of the App after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us: