Privacy policy

Sriven CRM · Last updated 12 October 2026

Who we are

Sriven CRM is the app and website SRIVEN GROUPS (“we”, “us”) uses to run its property sales. We decide what the app collects and why. Our contact details are at the end of this page.

Who uses the app

The app is for our staff. Accounts are created by our admin — there is no public sign-up — and it is not meant for children.

What we collect

• About staff: name, mobile number, email (if given), role and branch; a one-time login code, stored only as a hash and valid for 5 minutes; the app version and a notification token for the phone. Fingerprint or face unlock is handled by the phone itself — the app never receives it.
• About customers and enquiries — entered by staff, imported from our lead sheet, or sent by customers on WhatsApp: names, phone numbers, email addresses, property requirements and budgets, notes, site visits, quotations, bookings and payments, and the WhatsApp messages and files exchanged with them.
• Location, for field staff only: only after a staff member taps Start day, and until End day, sign-out or 14 hours — the phone’s precise location every few minutes, with its battery level. A notification is shown the whole time, and nothing is collected while the day is off. If location is switched off during a field day, our admins are told. Completing a site visit in the app also records where the staff member checked in. Only our admins can see staff locations.

How we use it

• To run our sales: leads, follow-ups, site visits, quotations, bookings and payments.
• To show our admins where field staff are during a field day, and each day’s route.
• To send notifications to staff.
• To message customers on WhatsApp. A message is sent when a staff member presses Send. If we switch them on, WhatsApp also carries a reminder the day before a site visit, and automated replies to customers who message us first.

We do not sell personal data, and we do not use it for advertising.

Service providers

These process data for us, only to provide their service:

• Meta (WhatsApp Business Platform) — messages to and from customers, and login codes. An SMS provider may deliver login codes instead.
• OpenAI — only if our WhatsApp assistant or AI summaries are switched on: the text of WhatsApp conversations, to draft replies and summaries.
• Cloudflare R2 — stored files such as brochures, chat attachments and quotation PDFs.
• Google Firebase Cloud Messaging — notifications to staff phones.
• Cashfree — payments when we buy messaging credits.
• Google Sheets — if we connect a lead sheet.
• OpenStreetMap — map tiles on the team map; the phone’s address on the internet reaches their servers.
• Our hosting and database providers.

How long we keep it

• Location: 90 days, then deleted.
• Login codes: until used, or 5 minutes.
• Everything else: while we use the CRM, or until we delete it.

Security

All connections use HTTPS. Access is limited by role — a sales executive sees only their own leads. Login codes are stored as hashes. The app’s data on the phone is not included in cloud backups.

Your choices and rights

Staff can stop sharing location at any time by tapping End day. Sales staff must allow the app’s location permission to use the app on their phone; allowing it shares nothing until they start a day. Anyone whose data is in the CRM — staff or customer — can ask to see, correct or delete it by contacting us. We handle requests under the law that applies, including India’s Digital Personal Data Protection Act, 2023.

Changes

When our practices change, we update this page and the date at the top.

Contact