1. Scope of This Policy
This policy applies to information you submit or generate through the SoarSCRM website, desktop client, and related services. Information collected directly by third-party platforms you connect through SoarSCRM (such as WhatsApp, Telegram, and LINE) is governed by those platforms’ own privacy policies.
2. Information We Collect
1. Account information: basic information collected at registration, such as username, password, email address, and contact details.
2. Communication and backup data: after you authorize message backup, we store chat history, files, images, and customer records from your device for backup and cross-device restore. We do not upload this content without your authorization.
3. Order and billing information: order records, plan type, and payment status generated when you purchase or renew a plan. Payments are processed by third-party payment providers, and we do not store your full card details.
4. Device and log information: device model, operating system version, IP address, client version, and activity and error logs generated during use, for security and troubleshooting purposes.
3. How We Use Information
1. To provide, maintain, and improve the service: account login, multi-platform message aggregation, translation, backup and restore, and other core features.
2. Customer support: helping you troubleshoot login, sync, and billing issues.
3. Product improvement: analyzing feature usage and feedback to improve the product experience.
4. Security: detecting account anomalies and preventing fraud and abuse.
5. Marketing communications: with your consent, sending product updates and promotional information, which you can unsubscribe from at any time.
6. Legal compliance: fulfilling necessary obligations where required by laws, regulations, or regulators.
When Google Ads Enhanced Conversions is enabled and the required authorization has been obtained, we may normalize the email address and/or valid international-format phone number provided for the SoarSCRM platform account associated with a registration, effective-use event (such as a successful translation), or payment. We apply SHA-256 hashing and upload the hashes to Google with advertising click identifiers, event times, transaction identifiers, and conversion counts for conversion matching, attribution, and measurement of advertising effectiveness. Plain-text email addresses or phone numbers are not placed in campaign links.
These contact details come from the platform account information you provide to SoarSCRM, and exclude customer contacts, conversations, and message content that you manage in the CRM. Hashing is a protective measure and does not make the data anonymous; Google may match the hashes with information it holds.
4. Data Storage and Protection
1. Retention period: we retain information only as long as needed to fulfill the purposes described in this policy. After you delete data or close your account, backup data will be deleted or anonymized within a reasonable period.
2. Encryption: sensitive data such as chat backups is stored using industry-standard encryption (such as AES-128), and data in transit is protected with TLS encryption.
3. Access control: we enforce strict internal permission management, so only authorized personnel can access user data within the necessary scope, with audit records kept of such access.
4. Security reviews: we regularly assess and upgrade our security systems. In the unfortunate event of a data security incident, we will notify you promptly as required by law and take remedial measures.
5. Information Sharing and Disclosure
We do not sell your personal information. We share only the necessary information in the following cases:
1. With your explicit consent;
2. With vendors and partners necessary to deliver the service (such as cloud hosting and payment providers), who are required to meet protection standards no lower than this policy;
3. As required by laws, regulations, regulators, or judicial proceedings;
4. In the event of a corporate restructuring, merger, or asset transfer, we will require the recipient to remain bound by this policy and will notify you of significant changes.
Google processes this information as an advertising measurement provider under the applicable Google data processing terms and privacy policies. Processing may take place outside your country or region and remains subject to applicable data protection requirements. For how Google uses partner information and the relevant data rules, see https://policies.google.com/technologies/partner-sites and https://support.google.com/adspolicy/answer/7475709 .
6. Your Rights
To the extent permitted by applicable law, you may: access, correct, or delete your personal information; view, copy, and export your chat backups and customer records within the product; manage the backup scope or turn backup off; unsubscribe from marketing communications; and close your account, after which we will delete or anonymize your information as described in Section 4.
To exercise these rights, use the in-product options or contact us at [email protected], and we will respond within a reasonable period.
You may refuse or withdraw the consent required for this advertising measurement without affecting core services such as account login and message processing, by contacting [email protected]. Withdrawal does not affect lawful processing based on valid consent before withdrawal. Publication or reading of this policy, or continued use of the services, does not itself constitute consent to Enhanced Conversions data sharing.
7. Cookies and Similar Technologies
Our website uses cookies and local storage to remember language, appearance, and login preferences. First-party visitor/session identifiers and campaign parameters associate landing, registration, effective-use, and payment conversions on our site. These are linkable pseudonymous identifiers, rather than anonymous data. Campaign links do not contain plain-text email addresses, phone numbers, passwords, or payment details.
The website stores the first-party visitor identifier in the soar_visitor_id cookie for up to one year. soar_tracking_session_id is stored in sessionStorage and cleared when the browser tab session ends. soar_tracking_context remains in localStorage until deleted, cleared by the browser, or overwritten by later records. Essential cookies are retained only for a reasonable period needed for their purpose. Google advertising cookie types and durations depend on the configuration; see https://policies.google.com/technologies/cookies . This policy does not promise a single retention period for them.
The SoarSCRM website (www.soarscrm.com) and customer portal (dash.soarscrm.com) integrate Google tag and use first-party visitor/session identifiers and advertising click and source parameters to associate landing, registration, effective-use, and payment conversions. When enabled, Google tag may read or set advertising cookies and send Google page URLs, IP addresses, device/browser information, and page-view and advertising interaction signals. This differs from the technology used on public Navigation pages.
You can inspect, block, or delete cookies and local storage in your browser. Blocking essential cookies may affect login, and clearing first-party identifiers may reset preferences or attribution records. Advertising technologies and Enhanced Conversions should be used with the authorization required by applicable law and Google policies; this policy does not indicate that you have authorized them. You may refuse or withdraw advertising measurement consent without affecting core services by contacting [email protected]. Blocking or deleting browser cookies alone does not withdraw authorization already stored on a server. Enhanced Conversions may also be sent from a server; see the Privacy Policy.
8. Cross-Border Data Transfers
SoarSCRM serves customers globally, so your information may be stored and processed in compliant data centers outside your jurisdiction. Wherever the data is stored, we provide the same level of protection described in this policy.
9. Children’s Privacy
The service is intended for business users and is not directed at minors under the age of 18. If we discover that we have inadvertently collected personal information from a minor, we will delete the relevant data immediately.
10. Updates to This Policy
We may update this policy from time to time. Material changes will be communicated through website notices, in-app notifications, or email, and we will separately seek consent where required by law. Continued use of the services alone does not indicate consent to advertising measurement or Enhanced Conversions data sharing.
11. Contact Us
If you have any questions, comments, or complaints about this policy, please contact us through official support channels or by email at [email protected], and we will respond as soon as possible.