Privacy policy

This policy explains how INFI-TECH INC ("we") handles personal data in InfiCRM and on this website.

Two roles

For the business records your organization keeps in InfiCRM (leads, contacts, deals, documents, payments), your organization is the controller and INFI-TECH processes that data on its behalf. For your account details and for enquiries sent through this website, INFI-TECH is the controller.

What we collect

• Account data: name, email address, hashed password, sign-in history (time, IP address, browser) for security.
• Organization data entered by your team.
• Website enquiries: the name, email, phone, company and message you send us.
• Website analytics, only if you accept cookies: a random first-party visitor identifier, the page you landed on and campaign parameters. No IP address or device fingerprint is stored with it.

How data is protected

• Each organization's records are isolated by row-level security in the database.
• Passwords are hashed (scrypt); session tokens are stored only as hashes.
• INFI-TECH staff cannot browse your records. Support access requires a written reason, is read-only and time-limited, notifies your administrators and is recorded in your audit log.

Retention and your rights

You can ask us to access, correct or delete your personal data by contacting us through the contact page. Organization administrators can export and delete their organization's records in the product.