Privacy Policy
1. ABOUT
Powersolution CRM ApS (“Powersolution CRM”, “we”, “us”, or “our”) is a Danish software company providing customer relationship management and related business software.
This Privacy Policy explains how we collect, use, disclose, and protect personal data and the privacy choices available to you when you use our Services.
Powersolution CRM ApS is registered in Denmark under CVR no. 44977109.
Capitalized terms not defined in this Privacy Policy have the meanings given to them in our Terms of Service.
2. SCOPE
This Privacy Policy applies to personal data processed by us through our website, the Powersolution CRM application, our APIs, integrations, and related online services (collectively, the “Services”).
This Privacy Policy does not govern the privacy practices of third-party websites, services, or applications that we do not control, even when they are accessible through or connected to our Services. Where you enable a third-party integration, we may process information received from that service as described in this Privacy Policy, while the third party’s own privacy policy governs its processing.
When you use Powersolution CRM on behalf of an organization, that organization may determine how personal data entered into the Services is processed. In those circumstances, we generally act as a data processor on the organization’s behalf. This is described further in Section 6.
3. PERSONAL INFORMATION WE COLLECT
The personal information we collect depends on how you interact with our Services.
Information You Provide to Us
Account and profile information. When you create an account or use our Services, we may collect information such as your first and last name, email address, telephone number, company or organization, job title or role, account information, workspace information, login and authentication information, and other information you choose to provide.
Workspace and invitation information. If you create or administer a workspace, we collect information necessary to manage the workspace and its users. When you invite another person to a workspace, we collect the email address you provide so that we can send the invitation and facilitate access to the workspace.
Communications and support information. If you contact us, request support, submit a form, or otherwise communicate with us, we may collect the information you provide and information about the communication.
Payment information. If you purchase a paid subscription, payment information is processed by our payment provider, Stripe. We may receive information about your subscription, transaction, and billing status, but payment card information is processed by Stripe in accordance with its own privacy practices.
Files and documents. Our Services may allow you to upload files and documents. These files may contain personal data or confidential business information.
Customer Data
Powersolution CRM allows customers to store and manage information about their own customers, prospects, contacts, leads, suppliers, employees, and other business relationships.
Customer Data may include names, email addresses, telephone numbers, company information, job titles, addresses, notes, lead and customer information, communication history, emails and email metadata, calendar information, files and documents, and other information entered or imported by the customer.
The organization using Powersolution CRM generally determines what Customer Data is collected and why it is processed. Our role in relation to this information is described in Section 6.
Information from Other Sources
We may receive personal information from third-party services when you or your organization chooses to connect them to Powersolution CRM.
These services may include Microsoft services, HubSpot, Dinero, and other applications or data sources supported by our Services. We may also process information imported through APIs, API connectors, SQL imports, or other supported import methods.
If you choose to sign up or authenticate using a Microsoft account, we may receive information from Microsoft that is necessary to create and maintain your Powersolution CRM account.
If you enable Microsoft email or calendar integrations, we may process information from those services in accordance with the permissions granted by you or your organization. Where email synchronization is enabled, this may include email content, sender and recipient information, timestamps, attachments, and other information contained in or associated with synchronized emails.
The information received from third-party services depends on the service, permissions, and configuration selected by you or your organization.
Information Collected Automatically
When you access our website or Services, we may automatically collect technical and usage information, such as your IP address, browser type and version, device type, operating system, language and regional settings, pages and features accessed, date and time of access, referring website, general usage information, and technical logs.
We use this information to operate, secure, maintain, troubleshoot, and improve our Services.
Cookies and Similar Technologies
We use cookies and similar technologies on our website and Services. Some are necessary for the Services to function, while others are used for analytics or other purposes.
We use CookieYes to manage cookie consent and preferences. We also use Google Analytics for website analytics and Google Tag Manager to manage website tags.
Non-essential cookies and technologies are used in accordance with your consent choices where required by applicable law. You can change your preferences through our cookie consent interface.
4. HOW WE USE YOUR INFORMATION AND OUR LEGAL BASIS FOR PROCESSING
In this section, we describe the main ways we use personal information and the legal bases we rely on where the GDPR applies.
4.1. Providing and managing the Services
We use personal information to create and manage accounts and workspaces, authenticate users, provide access to features, send account verification and workspace invitation emails, provide CRM functionality, process imports and integrations, synchronize information with connected services, provide support, and administer subscriptions.
This may include: account information, workspace information, Customer Data, communication information, technical information, and information received from connected services.
Legal basis: Performance of the contract with you or your organization. Where we process information to respond to requests or perform activities outside a contractual relationship, we may rely on our legitimate interests. We may also process information where necessary to comply with a legal obligation.
4.2. Communicating with you
We use personal information to send account verification emails, workspace invitations, password and security notifications, service and billing communications, important notices about the Services, and responses to support requests.
This may include: name, email address, account information, workspace information, and communication information.
Legal basis: Performance of the contract, compliance with legal obligations, or our legitimate interests in communicating with you and operating our Services.
4.3. Administering and protecting our business and Services
We use personal information for troubleshooting, system maintenance, security, monitoring, fraud and abuse prevention, access control, backups, technical support, quality control, and enforcement of our agreements.
This may include: account information, technical information, usage information, Customer Data where necessary to provide support or maintain the Services, and customer service information.
Legal basis: Performance of the contract, our legitimate interests in operating and securing our business and Services, and compliance with legal obligations.
4.4. Improving our Services
We use technical and usage information to understand how our website and Services are used, identify problems, evaluate performance, and improve our products and user experience.
We may create aggregated or de-identified information from personal information for analytics, reporting, product development, and other lawful business purposes. We do not use Customer Data for unrelated purposes unless authorized by the customer or otherwise permitted by applicable law.
This may include: technical information, usage information, analytics information, and customer service information.
Legal basis: Our legitimate interests in developing, maintaining, and improving our Services. Where consent is required for analytics or similar technologies, we rely on consent.
4.5. Processing payments and managing subscriptions
We use personal information to manage paid subscriptions, billing, transactions, and payment-related communications. Payments are processed through Stripe.
This may include: account information, subscription information, billing information, and transaction information.
Legal basis: Performance of the contract and compliance with legal obligations.
4.6. Marketing communications
We may contact customers or prospective customers about our products, services, developments, or events where permitted by applicable law.
This may include: name, email address, account information, and communication information.
Legal basis: Consent where required by applicable law, or our legitimate interests where applicable law permits marketing without prior consent. You can opt out of marketing communications at any time.
4.7. Complying with legal obligations and enforcing agreements
We may process personal information to comply with applicable laws and legal processes, respond to lawful requests from authorities, enforce our agreements and policies, establish or defend legal claims, prevent fraud or abuse, and protect our rights, property, safety, or the safety of others.
This may include: any category of personal information that is relevant to the specific matter.
Legal basis: Compliance with a legal obligation and our legitimate interests in enforcing our agreements, protecting our business, and establishing, exercising, or defending legal claims.
5. DISCLOSING YOUR INFORMATION TO THIRD PARTIES
We do not sell your personal information. We may disclose personal information to the following categories of third parties where necessary to provide the Services, support our business, or comply with applicable law.
Service Providers
We use third-party service providers to provide infrastructure, hosting, security, communications, technical, and other services necessary to operate Powersolution CRM. These providers may process personal information on our behalf and are required to process it in accordance with our instructions and applicable data protection requirements.
Email Service Providers
We use SMTP2GO to send transactional and service-related emails, including account verification emails, workspace invitations, notifications, and other communications. SMTP2GO may process information necessary to deliver those messages, such as email addresses and email content.
Payment Providers
We use Stripe to process payments and subscriptions. Stripe may process information necessary to complete transactions, including billing and payment information, in accordance with its own privacy practices.
Analytics and Tag Management Providers
We use Google Analytics for website analytics and Google Tag Manager to manage website tags. Information collected through these technologies is subject to your applicable cookie and consent choices.
Third-Party Services and Integrations
If you or your organization enables an integration, we may exchange information with the relevant third-party service according to the permissions and configuration of that integration. Examples include Microsoft services, HubSpot, Dinero, and other applications or data sources supported by Powersolution CRM.
The privacy practices of those third-party services are governed by their own privacy policies.
Other Users and Workspace Administrators
Powersolution CRM is a collaborative business application. Depending on the workspace, user roles, permissions, and settings selected by the customer organization, other authorized users or workspace administrators may be able to view or manage account information, workspace information, and Customer Data within the workspace.
The organization using Powersolution CRM is responsible for configuring appropriate access permissions for its users.
Disclosures to Protect Us or Others
We may access, preserve, or disclose personal information to competent law enforcement bodies, regulators, courts, public authorities, or other third parties where we reasonably believe this is necessary to comply with applicable law or legal process, protect rights or safety, prevent fraud or abuse, investigate unlawful activity, or enforce our agreements.
Disclosure in the Event of a Business Transfer
If Powersolution CRM is involved in a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar business transaction, personal information may be disclosed or transferred as part of that transaction, subject to applicable law.
6. CUSTOMER DATA AND OUR ROLE AS A DATA PROCESSOR
Powersolution CRM is designed for businesses to manage their own customer and business relationship data.
When an organization enters personal information into Powersolution CRM about its own customers, prospects, employees, contacts, or other individuals, that organization will generally be the data controller, while Powersolution CRM will generally act as the data processor.
For example, if your company stores the name and email address of one of its customers in Powersolution CRM, your company determines why that information is collected and how it is used. Powersolution CRM processes that information to provide the Services to your company.
Our processing of Customer Data is governed by our Data Processing Agreement (“DPA”), where applicable.
Customers are responsible for determining the appropriate legal basis for processing personal data, providing required privacy notices, ensuring that information entered into the Services is collected and processed lawfully, configuring integrations and permissions appropriately, and responding to requests from individuals whose data they control.
If you are an individual whose personal data has been entered into Powersolution CRM by one of our customers, you should generally direct requests regarding that data to the relevant customer organization. We will assist our customer as required under applicable data protection law and our DPA.
7. INTERNATIONAL DATA TRANSFERS
Some of our service providers may process personal information outside Denmark or the European Economic Area (“EEA”).
Where personal information is transferred outside the EEA, we take appropriate measures to ensure that the transfer is lawful under applicable data protection law. Depending on the circumstances, these safeguards may include an adequacy decision, Standard Contractual Clauses approved by the European Commission, or another legally recognized transfer mechanism.
8. YOUR PRIVACY RIGHTS AND CHOICES
Depending on your circumstances and applicable law, you may have the right to:
- Request access to your personal information
- Request correction of inaccurate or incomplete information
- Request deletion of your personal information
- Request restriction of processing
- Object to certain processing
- Request data portability
- Withdraw consent where processing is based on consent
- Opt out of marketing communications
- Change your cookie preferences
- Lodge a complaint with a data protection supervisory authority
Some rights are subject to conditions and exceptions under applicable law.
If Powersolution CRM processes your personal information on behalf of one of our customers, you should generally contact that customer to exercise your rights. We will assist our customer as required under applicable data protection law and our DPA.
If Powersolution CRM is the controller of your personal information, you can contact us directly using the information in Section 13.
9. DATA RETENTION
We retain personal information for as long as necessary for the purposes described in this Privacy Policy, including to provide the Services, comply with legal obligations, resolve disputes, establish or defend legal claims, enforce our agreements, and protect our legitimate business interests.
Different categories of information may be retained for different periods. Account information and Customer Data are generally retained while an account or workspace remains active.
Following account termination, we may retain certain information for a limited period where necessary for account recovery, resolving outstanding matters, complying with legal obligations, preventing fraud and abuse, or maintaining appropriate business and security records.
Customer Data processed on behalf of a customer is handled in accordance with the applicable DPA and the customer’s instructions.
Certain financial, accounting, and transaction records may be retained for longer periods where required by applicable law.
When we no longer have an ongoing legitimate business need or legal reason to process personal information, we will delete or anonymize it where reasonably possible. Information contained in backups may remain securely stored and isolated from further processing until it is overwritten or deleted through our normal backup processes.
10. SECURITY
We take reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.
These measures may include access controls, authentication mechanisms, encryption, monitoring, backups, and other security measures appropriate to the nature of the information and the risks associated with processing it.
However, no method of transmission over the Internet or method of electronic storage can be guaranteed to be completely secure.
11. CHILDREN’S PRIVACY
Our Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from children where prohibited by applicable law.
If you believe that a child has provided personal information to us in violation of applicable law, please contact us so that we can take appropriate action.
12. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes to our Services, business practices, technology, or legal requirements.
When we make material changes, we may notify users through the Services, by email, or by another appropriate means where required by applicable law.
The effective date at the beginning of this Privacy Policy indicates when it was last updated.
13. CONTACT US
If you have questions about this Privacy Policy, our privacy practices, or your personal information, please contact us:
Powersolution CRM ApS
CVR no. 44977109
Borupvang 2 C
2750 Ballerup
Denmark
Email: support@powersolutioncrm.com
If you have a privacy request, please include enough information for us to understand your request and verify your identity where necessary.
If you are located in Denmark, you also have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet). You may also contact the relevant data protection supervisory authority in the country where you live, work, or where you believe an infringement has occurred.