Privacy Policy

1. Who We Are

ZIEN CRM ("we", "our", "us") is a customer relationship management platform for real estate agents, operated at ziencrm.com. This Privacy Policy explains what data we collect, how we use it, and your rights.

2. Information We Collect

• Account data: name, email address, password (hashed), phone number, and username when you register.
• Workspace data: leads, contacts, notes, and other CRM records you create inside ZIEN CRM.
• Meta / Facebook data: when you connect a Facebook Page, we store your Page access token and the lead data submitted via your Meta Lead Forms (name, phone, email, and any custom fields you mapped).
• Usage data: browser type, IP address, pages visited, and time spent, collected automatically for security and product improvement.

3. How We Use Your Information

• To provide and operate the ZIEN CRM service.
• To automatically capture and insert leads from your Meta Lead Forms into your account.
• To send transactional emails (account verification, password reset).
• To improve our product through aggregated, anonymous analytics.
• We do not sell your personal data or your leads' data to any third party.

4. Meta Platform Data

When you connect Facebook Pages to ZIEN CRM, we receive Page access tokens and lead submissions through Meta's Lead Ads API. This data is stored securely in our database and is only used to populate your CRM with leads. We comply with Meta's Platform Terms and do not use Meta data for advertising or retargeting purposes.

When you connect an Instagram professional account, we receive an access token, your account's username and profile picture, and the comments and direct messages sent to that account, including the sender's Instagram username and whether they follow you. We use this only to show those comments and messages in ZIEN CRM, to send the replies you write, and to run the comment and message automations you set up. We never message anyone who has not commented on your posts or messaged your account first. The access token is encrypted at rest. Disconnecting Instagram in ZIEN CRM, or removing ZIEN CRM in Instagram's settings, stops all access and deletes the token.

5. Data Retention

We retain your account and CRM data for as long as your account is active. If you delete your account, all associated data is permanently removed within 30 days. Lead data captured from Meta forms is retained as part of your workspace records.

6. Data Security

All data is encrypted in transit (TLS) and at rest. We use Supabase (hosted on AWS) as our database provider. Access tokens are stored encrypted and are only used to communicate with Meta's API on your behalf.

7. Your Rights

• You may request a copy of your data at any time.
• You may request deletion of your account and all associated data.
• You may disconnect your Facebook Pages at any time from the Leads Capture settings. This removes all stored page tokens.

To exercise these rights, email us at mark@ziencrm.com.

8. Cookies

We use session cookies required for authentication. We do not use advertising or tracking cookies.

9. Changes to This Policy

We may update this policy from time to time. We will notify registered users by email for any material changes. Continued use of ZIEN CRM after changes constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions: mark@ziencrm.com