Privacy Policy

ZigCRM is a customer relationship management (CRM) platform operated by Intertoons Internet Services, headquartered in Kochi, Kerala, India.

If you have any questions about this policy, you can reach us at:

📧 support@intertoons.com
🌐 zigcrm.com

We collect the following categories of information when you use ZigCRM:

• Account information: your name, email address, phone number, and password. Authentication and password storage are handled by Supabase Auth, which never stores passwords in plain text.
• Organisation data: organisation (tenant) details, contacts (name, email, phone, company, address, gender, GST number where applicable), deals, tasks, notes, call logs, and file attachments you create within the platform.
• Usage data: activity logs (who created, updated, or completed a contact, deal, or task) used to power the activity feed inside your workspace.
• Push notification token: a device token, managed via OneSignal, used solely to deliver push notifications to the ZigCRM mobile app.
• Support submissions: any support tickets, bug reports, or suggestions you submit through the app.

We do not collect payment card numbers, government IDs, or any sensitive personal data beyond what is listed above.

We use the information we collect to:

• Provide, operate, and maintain the ZigCRM service.
• Authenticate you and keep your account secure.
• Send you notifications about task, deal, and contact assignments and updates within your workspace.
• Generate activity logs visible to your workspace members.
• Respond to your support requests and feedback.
• Monitor platform health and prevent abuse.

We do not use your data for advertising, profiling, or sell it to any third party.

Your data is stored using Supabase's managed database infrastructure, with file attachments stored on Amazon Web Services S3. All data is encrypted in transit using TLS. Each Tenant's data is logically isolated from other Tenants.

Passwords are never stored in plain text — authentication is handled by Supabase Auth, which manages password hashing on our behalf.

We implement reasonable technical and organisational measures to protect your data from unauthorised access, alteration, or destruction.

ZigCRM uses the following third-party services to operate:

• Supabase — database and authentication infrastructure. Supabase Privacy Policy →
• Amazon Web Services (S3) — storage of files and attachments you upload. AWS Privacy Policy →
• OneSignal — push notification delivery to the ZigCRM mobile app. OneSignal Privacy Policy →
• Brevo / Resend — transactional email delivery (account activation, password reset, notifications). Brevo Privacy Policy → / Resend Privacy Policy →

Each of these services processes only the minimum data required to perform their function. We do not share your personal information with any other third parties.

We retain your account and organisation (tenant) data for as long as your account is active or as needed to provide the service.

If you request account deletion, we will delete your personal data within 30 days. Aggregated, anonymised usage statistics may be retained indefinitely as they cannot identify you.

Activity logs within your workspace are retained for the lifetime of the organisation account.

ZigCRM does not use advertising or tracking cookies. The web application uses browser localStorage to store your authentication token so you remain signed in between sessions, along with basic profile/subscription info and preferences such as theme and currency. No third-party cookies are placed on your device.

The mobile app uses local, on-device storage for the same purpose.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data.
• Deletion: request deletion of your account and associated personal data.
• Portability: request your data in a machine-readable format — contact data can also be exported to CSV directly from the app.
• Objection: object to certain types of processing.

To exercise any of these rights, email us at support@intertoons.com. We will respond within 30 days.

ZigCRM is designed for use by organisations and professionals. We do not knowingly collect personal data from anyone under the age of 16. If you believe a minor has created an account, please contact us immediately and we will delete the account.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, if the changes are significant, notify you by email or in-app notice.

Continued use of ZigCRM after any changes constitutes your acceptance of the updated policy.