Privacy Policy

Fliphats Technologies Pvt. Ltd. ("Fliphats", "we", "us", or "our") operates Fliphats CRM ("Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding your information. By using our Service, you agree to the practices described in this policy. If you do not agree, please discontinue use of the Service.

We collect the following categories of information: Account & Registration Data • Full name, email address, and password (hashed) when you create an account. • Workspace / company name and subscription plan details. Usage Data • Log data including IP address, browser type, pages visited, and timestamps. • Feature usage patterns to improve the product experience. Customer Data (User-Uploaded) • Leads, contacts, deals, invoices, proposals, and other data you create within the Service. • Email correspondence sent through the platform's email features. Payment Data • Billing address and transaction records. • We do not store full card details — payments are processed securely by Razorpay, which has its own privacy policy. Communications • Support messages, feedback, and feature requests you send us. • Email notifications and product updates (you may opt out at any time).

We use the information we collect to: • Provide, maintain, and improve the Service. • Process payments and manage subscriptions. • Send transactional emails (e.g. invoices, password resets, team invitations). • Respond to support requests and communicate with you. • Monitor and analyse usage trends to enhance performance and security. • Comply with legal obligations. • Send marketing communications (only with your consent; opt-out available at any time). We do not sell your personal data to third parties. We do not use Customer Data (your CRM records) for any purpose other than providing the Service.

We share your data only in these limited circumstances: Service Providers We engage trusted third-party service providers to operate our platform, including: • Supabase — database hosting and storage • Razorpay — payment processing • Hostinger — transactional email delivery These providers process data on our behalf under strict confidentiality agreements and may not use your data for their own purposes. Legal Requirements We may disclose your information if required by law, court order, or governmental authority, or to protect the rights and safety of our users. Business Transfers In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, subject to equivalent privacy protections. No Sale of Data We do not sell, rent, or trade your personal data to any third party for marketing purposes.

Your data is stored on servers located in secure, SOC 2-compliant data centres. We implement industry-standard security measures including: • TLS/SSL encryption for all data in transit. • AES-256 encryption for sensitive stored data (e.g. SMTP passwords). • Access controls limiting who can access production data. • Regular security reviews and vulnerability assessments. While we take reasonable precautions, no system is 100% secure. We encourage you to use strong passwords and enable any additional security features available. Data Retention We retain your account data for as long as your account is active. If you delete your account, we retain data for 30 days before permanent deletion, except where retention is required by law.

We use the following types of cookies and similar technologies: Essential Cookies Required for the Service to function, including session authentication tokens. These cannot be disabled. Analytics Cookies Used to understand how users interact with the Service and to improve features. You may opt out via your browser settings. We do not use third-party advertising cookies or tracking pixels for ad targeting.

Depending on your location, you may have the following rights regarding your personal data: • Access: Request a copy of the personal data we hold about you. • Correction: Request that inaccurate data be corrected. • Deletion: Request deletion of your personal data ("right to be forgotten"), subject to legal retention requirements. • Portability: Request your data in a machine-readable format. • Objection: Object to certain processing activities, including direct marketing. • Withdrawal of Consent: Withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us at privacy@mail.fliphats.com. We will respond within 30 days.

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has provided personal information, we will promptly delete it. If you believe a child has provided us with data, contact us at privacy@mail.fliphats.com.

Fliphats operates as a global platform. Your data may be transferred, stored, and processed securely in our global data centres. By using the Service, you consent to this processing and transfer. For users in the European Economic Area (EEA) or United Kingdom, transfers are subject to appropriate safeguards under applicable data protection law, including Standard Contractual Clauses where required.

Data created within your Workspace (leads, contacts, invoices, proposals, etc.) is owned by you. Fliphats processes this data solely as a data processor on your behalf. If you use Fliphats to send emails to your customers, you are responsible for: • Obtaining necessary consents from your customers. • Complying with anti-spam laws applicable in your jurisdiction (e.g. CAN-SPAM, GDPR email provisions). • Providing your customers with a way to unsubscribe or opt out.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice within the Service at least 14 days before the changes take effect. We encourage you to review this policy periodically. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

If you have questions, concerns, or requests related to this Privacy Policy, please contact our Privacy team: Fliphats Technologies Pvt. Ltd. Privacy Team Email: privacy@mail.fliphats.com Phone: +91 9602003790 Website: https://fliphats.com For general support: support@mail.fliphats.com