Privacy Policy

1. Who we are

Original CRM is operated by Original Ventures Ltd, registered in England and Wales. This policy explains what personal data we collect, why, and how it's protected.

2. Who can use the Service

Original CRM is intended for business use by adults (18+) operating their own WhatsApp-based sales or client communication. It is not directed at, and must not be used by, minors.

3. Data we collect

• Account data: name, email address, hashed password, license key.
• WhatsApp data: messages, contact names/numbers and conversation history from the WhatsApp number(s) you connect, processed so the Service can reply, build your sales pipeline and CRM.
• Payment data: processed directly by Mercado Pago. We store the resulting payment status and amount, never full card numbers.
• Technical data: basic session/auth cookies required to keep you signed in.

4. How we use it

To operate the Service: authenticate you, run the AI over your conversations to generate replies (via OpenAI's API), organize your contacts into a sales pipeline, process payments (via Mercado Pago), and provide support.

5. Who we share it with

We share the minimum necessary data with: OpenAI (message content, to generate AI replies), Mercado Pago (payment details, to process your subscription), and Meta/WhatsApp (as the underlying messaging network). We do not sell personal data to third parties.

6. Where data is stored

Data is stored on Supabase (PostgreSQL), encrypted in transit and at rest. Servers may be located outside your own country (including the EU/UK and elsewhere); by using the Service you consent to this international transfer, which is necessary to provide it.

7. Your rights

If you are in the UK or EU, you have rights under GDPR to access, correct, export or delete your personal data, and to object to certain processing. To exercise these rights, contact us via the details on our Contact page.

8. Data retention

We retain account and conversation data for as long as your account is active, and for a reasonable period afterwards to comply with legal and accounting obligations, after which it is deleted or anonymized.

9. Cookies

We use a single essential session cookie to keep you signed in. We do not currently use advertising or third-party analytics cookies.

10. Changes to this policy

We may update this policy from time to time; the "last updated" date above will reflect the most recent revision.

11. Contact

Questions about this policy or your data can be sent via the details on our Contact page.