Privacy Policy

1. Who This Policy Covers

This Privacy Policy applies to personal information processed by Northline CRM("Northline", "we", "our", or "us") through our marketing website, product, support interactions, events, and related services.

For customer account data processed in the product on behalf of a business customer, we generally act as a processor/service provider and process such data under our customer agreements and documented instructions.

2. Categories of Information We Collect

• Identifiers and business contact data: name, work email, company, role, billing details, and support correspondence.
• Product and website usage data: pages viewed, session events, feature usage, referral source, browser and device data.
• Technical and log data: IP address, user agent, request timestamps, and error logs used for reliability and security.
• Customer account content: records, notes, tasks, communications, and pipeline data submitted by authorized users.
• Third-party sources: data from integrations, lead forms, payment processors, and public business sources where lawful.

3. Why We Use Information

• Provide, secure, maintain, and improve our services.
• Provision accounts, authenticate users, and process transactions.
• Deliver customer support, onboarding, and service communications.
• Detect, prevent, and investigate fraud, abuse, and security incidents.
• Analyze performance, troubleshoot issues, and develop new features.
• Comply with legal obligations and enforce agreements.
• Send marketing communications where permitted by law (with opt-out controls).

4. Legal Bases (EEA/UK/Switzerland)

Where required, we rely on one or more legal bases: contract performance, legitimate interests, consent, and legal obligation. If we process based on consent, you may withdraw consent at any time without affecting prior lawful processing.

5. Cookies, Analytics, and Similar Technologies

We use cookies and similar technologies for essential functionality, security, and analytics. You can manage cookies through browser settings. Some features may not work properly if essential cookies are blocked.

We do not respond to "Do Not Track" signals in a standardized way because no uniform industry standard currently exists.

6. How We Share Information

We do not sell personal information. We may share information with:

• Vendors and subprocessors providing hosting, analytics, support, billing, and security.
• Integration partners enabled by customers or users.
• Professional advisers, regulators, courts, and law enforcement where legally required.
• Parties involved in mergers, acquisitions, financing, or asset transfers.

7. International Transfers

Personal information may be processed in countries other than your own. Where required, we use appropriate safeguards for international transfers, such as contractual measures.

8. Data Retention

We retain information for as long as necessary for the purposes described in this policy, to provide services, and to meet legal, accounting, tax, and compliance obligations. We may retain de-identified or aggregated data indefinitely.

9. Security and Incident Response

We use administrative, technical, and organizational safeguards designed to protect data from unauthorized access, use, loss, and disclosure. No security program is infallible, and we cannot guarantee absolute security.

In the event of a confirmed breach affecting personal information, we will provide notifications as required by applicable law and contractual commitments.

10. Your Privacy Rights

Depending on jurisdiction, you may have rights to access, correct, delete, port, or limit processing of personal information, and to object to certain processing. You may also have rights related to automated decision-making where applicable.

For US state privacy laws, where applicable, you may have rights to know, access, correct, and delete personal information, and to opt out of certain sharing/targeted advertising activities. We do not knowingly sell personal information.

To exercise rights, contact us at hello@example.com.

11. Communications Preferences

You may opt out of marketing emails by using the unsubscribe link in the message or by contacting us. Service and transactional communications may still be sent as needed to operate your account.

12. Children's Privacy

Our services are not directed to children under 16, and we do not knowingly collect personal information from children under 16.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will post the revised policy on this page and update the effective date.

14. Contact Us

Questions about this Privacy Policy may be sent to hello@example.com.