🔒 Legal

Privacy Policy

This policy explains what data CAPCUN CRM collects, how we use it, how we protect it, and what rights you have over your information.

Effective: 1 April 2026
Last Updated: 7 April 2026
Version 1.0
🏢
Section 01
Who We Are

CAPCUN CRM is a real estate sales management platform developed and operated by CAPCUN Technologies, accessible at capcun.com. We provide software tools to real estate agents, brokers, property companies, and their sales teams to manage leads, track client interactions, and coordinate sales operations.

📍 Business Details

CAPCUN Technologies · India & Gulf Region
Email: capcunindia@gmail.com
WhatsApp: +91 96375 11110

By using the CAPCUN CRM platform, website, or mobile application, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree with any part of this policy, please do not use our services.

This policy applies to all users of CAPCUN CRM — including business owners (Admins), team managers, relationship managers (RMs), and any visitors to our marketing website at capcun.com.

📦
Section 02
What Data We Collect

We collect only the data that is necessary to provide and improve our services. Below is a full breakdown of the categories of information we collect.

2.1 — Account & Team Data

When an organization signs up for CAPCUN CRM, we collect information needed to set up and manage your account:

👤
Admin / Owner Information
Full name, email address, WhatsApp / phone number, company name, and team size — provided when booking a demo or signing up.
🛡️
Manager Profiles
Name, phone number, role designation, and access permissions as configured by the admin.
📱
Relationship Manager (RM) Profiles
Name, phone number, login credentials (hashed), and assigned leads as added by the admin or manager.
🔑
Authentication Data
Login credentials (passwords are hashed and never stored in plain text), authentication tokens, and session data.

2.2 — Lead & Client Data (Your Business Data)

ℹ️ Important Distinction

Data about your leads and clients is your data, not ours. You retain full ownership. We process it only on your behalf as a data processor, not as a data controller for that information.

When your team uses CAPCUN CRM to manage their sales pipeline, the following information is stored on our servers on your behalf:

Lead contact details — name, phone number(s), email address
Lead source — portal, referral, walk-in, advertisement, etc.
Lead status and stage in the sales pipeline
Call logs and outcomes — date, duration note, outcome selected
Follow-up schedules and meeting/site visit dates
Notes and remarks added by your RM or manager
Project and property interest associated with each lead
Booking and conversion records
WhatsApp message logs sent via the bulk sharing feature

2.3 — Usage & Technical Data

When you access the CAPCUN CRM app or website, we automatically collect certain technical data to keep the platform secure and working correctly:

Data Type What We Collect Why
Device Information Device type, OS version, app version Compatibility & bug fixing
IP Address Your internet IP at login Security, fraud prevention
Session Tokens Encrypted session identifiers Keeping you securely logged in
App Activity Feature usage, screen visits, errors Product improvement
Crash Reports Stack traces when the app crashes Bug fixing and stability

2.4 — Communications Data

If you contact us via WhatsApp, email, or our website contact form, we retain those communications (your name, contact details, and message content) to respond to you and maintain a history of our interaction.

✅ What We Do NOT Collect

We do not collect financial or banking information, government ID numbers, biometric data, location tracking data, or the actual audio content of phone calls made through your device's native dialer.

⚙️
Section 03
How We Use Your Data

We use data collected through CAPCUN CRM strictly for legitimate business purposes. We do not sell data, and we do not use your lead data for any purpose other than delivering the CRM service to you.

🚀
To Provide the CRM Service
Store and retrieve your leads, enable your team to log calls, schedule follow-ups, track site visits, and generate reports — the core functions of CAPCUN CRM.
🔐
To Authenticate & Secure Access
Verify identity at login, enforce role-based access control, and protect your account from unauthorized access using token-based authentication.
🔔
To Send Reminders & Notifications
Deliver follow-up reminders, site visit alerts, and system notifications to your RMs and managers based on your configured schedules.
📊
To Generate Reports & Analytics
Create daily call summaries, team performance dashboards, monthly booking statistics, and lead conversion reports — all within your organization's private environment.
🛠️
To Improve the Platform
Analyze aggregated, anonymized usage patterns (not your lead data) to identify bugs, improve performance, and build better features for all users.
💬
To Respond to Your Support Requests
Use your contact details to respond to queries, provide onboarding assistance, and deliver customer support via WhatsApp or email.
⚖️
To Comply with Legal Obligations
Retain records as required by applicable Indian and international laws, respond to lawful requests from authorities, and resolve disputes.
🛡️
Section 04
How We Store & Protect Your Data

We take data security seriously. CAPCUN CRM is designed with security as a foundational layer, not an afterthought. Below is a detailed explanation of how we protect your data.

🏦 Private Isolated Database — Per Organization

Every organization on CAPCUN CRM operates in a completely isolated database environment. Your data is never co-mingled with another client's data. No other user — inside or outside CAPCUN — can access your leads or reports. This is enforced at the database architecture level, not just at the application layer.

Security Measures We Employ

HTTPS / TLS Encryption in Transit — All data transmitted between your device and our servers is encrypted using industry-standard TLS (Transport Layer Security). Plain text transmission is not possible.
Encrypted Data at Rest — Data stored on our database servers is encrypted at rest, protecting it even in the unlikely event of a physical breach.
Password Hashing — User passwords are hashed using strong one-way hashing algorithms before storage. We never store plain text passwords and cannot recover them.
Token-Based Authentication — Session tokens are used to authenticate users instead of transmitting credentials repeatedly. Tokens expire automatically and are invalidated on logout.
Role-Based Access Control (RBAC) — Each user can only access the data and features explicitly assigned to their role by the admin. This is enforced at both the application and server levels.
Secure Cloud Infrastructure — Our servers are hosted on reputable cloud infrastructure with physical security, redundancy, and uptime guarantees.
Internal Access Controls — CAPCUN staff do not have routine access to browse customer lead data. Any access required for support purposes is logged and strictly controlled.
⚠️ Your Responsibility

While we protect your data at the infrastructure level, you are responsible for keeping your login credentials confidential, not sharing account access with unauthorized individuals, and promptly reporting any suspected unauthorized access to us.

🤝
Section 05
Data Sharing & Third Parties
🚫 We Never Sell Your Data

CAPCUN CRM does not sell, rent, trade, or transfer your personal data or your lead data to any third party for marketing, advertising, or commercial purposes. This is an absolute policy with no exceptions.

Limited Sharing for Service Delivery Only

We may share data with carefully vetted third-party service providers who help us operate the platform. These providers are contractually bound to use the data only for the specified purpose and are prohibited from using it for any other purpose:

Service Provider Type Purpose Data Shared
Cloud Infrastructure Hosting servers and databases All stored data (encrypted)
Email Delivery Sending transactional emails Email address, message content
Push Notification Service Sending in-app reminders Device token, notification content
Crash Reporting App stability monitoring Anonymized crash logs, device type
Payment Processor Processing subscription payments Billing name, email, amount (no card data stored by us)

Legal Disclosures

We may disclose your information to law enforcement, regulators, or courts if required to do so by applicable law, regulation, legal process, or lawful governmental request. We will, where permitted, notify you of such a request before complying.

Business Transfers

In the event of a merger, acquisition, or sale of CAPCUN Technologies, your data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such change, and the new entity will be bound by this Privacy Policy.

🗂️
Section 06
Data Retention

We retain your data for as long as your organization's account is active with CAPCUN CRM, and for a reasonable period afterward as described below.

Data Category Retention Period Reason
Lead & Client Data Duration of active subscription + 30 days after cancellation Allow data export before deletion
Account Profiles Duration of active subscription + 30 days Account recovery window
Activity Logs & Call Records 12 months from date of activity Audit trail, dispute resolution
Support Communications 24 months from last contact Service continuity
Technical Logs (IP, sessions) 90 days Security monitoring
Demo Request Information 12 months from submission Sales follow-up and records

When data reaches the end of its retention period, it is permanently and securely deleted from our systems and all backups within 30 days. You may request earlier deletion — see Section 7 for your rights.

⚖️
Section 07
Your Rights

As a user of CAPCUN CRM, you have the following rights over your personal data. We are committed to honoring these rights within 30 days of any request.

👁️
Right to Access
Request a full copy of the personal data we hold about you, delivered in a readable format.
✏️
Right to Rectification
Ask us to correct any inaccurate or incomplete personal data we hold about you.
🗑️
Right to Erasure
Request deletion of your personal data. We will comply unless we are legally required to retain it.
📦
Right to Portability
Receive your data in a structured, machine-readable format (e.g. CSV) to transfer to another service.
⏸️
Right to Restrict Processing
Ask us to stop processing your data in certain ways while a dispute or concern is being resolved.
🚫
Right to Object
Object to our processing of your personal data where we rely on legitimate interests as our legal basis.
📩 How to Exercise Your Rights

To make a request, email us at capcunindia@gmail.com with the subject line "Privacy Request" and describe your request. We may ask you to verify your identity before processing the request. We will respond within 30 days.

Lead Data Requests (Your Client Data)

Requests regarding lead data stored in CAPCUN CRM must come from the account admin of that organization. Individual RMs or managers cannot request deletion or export of organizational lead data — only the account admin has that authority.

🍪
Section 08
Cookies & Tracking

Website (capcun.com)

Our marketing website uses minimal cookies necessary for the site to function correctly. We do not use advertising cookies, third-party tracking pixels, or behavioral analytics that profile you across other websites.

Cookie Type Purpose Duration
Session Cookie Keeps you logged into the web dashboard Expires when browser closes
Preference Cookie Remembers language and UI preferences 12 months
Security Cookie CSRF protection, prevents request forgery Session

Mobile App

The CAPCUN CRM Android and iOS app does not use browser cookies. Instead, it uses secure local storage and server-side tokens for session management. The app does not embed any advertising SDKs or third-party marketing trackers.

✅ No Third-Party Ad Tracking

We do not use Facebook Pixel, Google Analytics, or any other third-party behavioral advertising tools on our platform. Your usage of CAPCUN CRM is not used to serve you ads anywhere on the internet.

🧒
Section 09
Children's Privacy

CAPCUN CRM is a professional business tool intended for use by adults in a commercial real estate context. Our platform is not directed at, and is not intended for use by, individuals under the age of 18.

We do not knowingly collect personal data from anyone under 18 years of age. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at capcunindia@gmail.com and we will delete that information promptly.

🌍
Section 10
International Data Transfers

CAPCUN CRM primarily serves users in India and Gulf countries (UAE, Saudi Arabia, Qatar, Bahrain, Kuwait, Oman). Our servers are located in secure data centres designed to meet the requirements of our primary operating regions.

If your data is transferred to or processed in a country different from your own, we ensure that appropriate safeguards are in place — including data processing agreements with our cloud providers — to protect your data in accordance with this policy and applicable data protection laws.

For Gulf-based users: we comply with applicable data localization requirements where mandated, and our data processing agreements reflect the obligations required under Gulf Cooperation Council (GCC) data protection frameworks.

🇮🇳 India Data Protection

For users in India, CAPCUN CRM processes data in compliance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and we monitor developments under the Digital Personal Data Protection Act, 2023 (DPDPA) as it comes into effect.

📝
Section 11
Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal obligations, or business practices. When we make changes, we will update the "Last Updated" date at the top of this page.

For material changes — those that significantly affect your rights or how we use your data — we will notify account admins via email or an in-app notification at least 14 days before the changes take effect.

Your continued use of CAPCUN CRM after a policy update constitutes your acceptance of the revised policy. We encourage you to review this policy periodically.

📋 Version History

Version 1.0 — 1 April 2026 — Initial policy publication.
Version 1.0.1 — 7 April 2026 — Minor clarifications to Section 2 and Section 5.

📬
Section 12
Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your data, we want to hear from you. Our team responds to all privacy-related inquiries within 48 hours.

💬
WhatsApp (Fastest Response)
+91 96375 11110 — Typical response under 2 hours during business hours.
✉️
Email
capcunindia@gmail.com — Please use subject line "Privacy Request" for data-related queries.
🌐
Website
capcun.com — Use the demo booking form and mention your privacy query in the company name field.
🤝 Our Commitment

We take every privacy concern seriously. Whether you want to understand how your data is used, request deletion, or report a concern, we will handle it with transparency and care. Your trust in CAPCUN CRM is what makes our business possible.