Privacy Notice

1. Who we are

IndieCRM is operated by DANIEL SINEWE, based in Germany. For personal data processed through IndieCRM accounts, we act as the data controller. Where you upload data about your own customers and business contacts into your workspace, you are the controller of that data and we act as your processor, handling it only on your instructions to provide the Service. Contact: hello@danielsinewe.com.

2. What we collect and why

• Account data (name, email address, login credentials, workspace and product names, profile image) — to create and operate your account. Legal basis: performance of our contract with you.
• CRM content (contacts, companies, deals, notes, activities you record, calendar events you connect) — to provide the Service you asked for. Legal basis: performance of contract; for data about third parties, your legitimate interest as controller.
• Support communications (messages, attachments) — to answer your questions. Legal basis: performance of contract and our legitimate interest in supporting users.
• Usage and technical data (log data, device identifiers, IP address, feature usage, error reports) — for security, fraud prevention, debugging and improving the product. Legal basis: legitimate interests.
• Product updates (if you opt in) — to send service news. Legal basis: consent, which you may withdraw at any time.
• Legal and accounting records — where we must keep them. Legal basis: legal obligation.

3. Who we share data with

• Service providers and subprocessors — hosting and database infrastructure, email delivery, error monitoring, and AI model providers that process the text you submit to AI features. They act on our instructions under contract.
• Merchant of Record — Paddle.com handles the sale of subscriptions, payments, subscription management, invoicing and tax compliance. Paddle processes your billing data as its own controller under its privacy policy.
• Integrations you enable — for example Google Calendar, which receives only what is needed for the connection you authorised.
• Professional advisers — legal, accounting and tax advisers where necessary.
• Authorities — where required by law or to establish, exercise or defend legal claims.

We do not sell personal data.

4. International transfers

Some providers are located outside the EEA/UK. Where data is transferred, we rely on adequacy decisions or EU Standard Contractual Clauses together with appropriate additional safeguards.

5. Retention

We keep account and CRM data for as long as your account is active. After you delete your account or cancel and do not return, we delete or anonymise your data within 90 days, except where we must keep records longer for legal, tax or accounting reasons (typically up to 10 years for invoicing records) or to defend legal claims.

6. Your rights

Depending on where you live, you have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent at any time. Email hello@danielsinewe.com and we will respond within one month. If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection supervisory authority.

7. Security

We apply appropriate technical and organisational measures, including encryption in transit, encryption at rest at our hosting provider, row-level access controls so each workspace can only reach its own data, and least-privilege access for administrators. No system is perfectly secure, but we work to protect your data and will notify you of a breach where the law requires it.

8. Cookies

IndieCRM uses essential cookies and local storage only — to keep you signed in, remember your workspace, product filters and theme preference. We do not use advertising cookies. You can clear or block cookies in your browser settings, but the Service will not work correctly without the essential ones. If we later introduce analytics or marketing cookies, we will ask for your consent first and update this notice.

9. Changes

We may update this notice. Material changes will be announced by email or in the app before they take effect.