Privacy Policy
Last updated: July 2026
This Privacy Policy explains how magenCRM (“we,” “our,” or “us”) collects, uses, and protects personal information from users (“you,” “your”) of our software-as-a-service (SaaS) platform.
By using magenCRM, you agree to the practices described below.
1. Information We Collect
1.1 Information You Provide
- Organization name, address, email, phone number
- User names, emails, and roles
- Contact data uploaded by your organization (e.g., names, birthdates, emails, phone numbers)
- Reminder dates (e.g., Yahrzeits, birthdays, anniversaries)
- Billing and payment data (processed via Stripe)
1.2 Automatically Collected Data
- Browser, device type, IP address, location, time zone
- Platform usage logs, including actions taken within the application
2. How We Use Your Information
We use your data to:
- Deliver our core services (notifications, reminders, user dashboards, etc.)
- Manage user accounts and access
- Send automated messages via email and/or WhatsApp
- Provide customer support and communicate service-related updates
- Process payments and manage subscriptions
- Monitor platform performance and improve security
3. Data Ownership, Access, and Your Contacts
You retain full ownership of all data you enter into magenCRM.
We access your data only when necessary to:
- Provide technical support
- Ensure service performance and security
- Comply with legal requirements
We do not share or sell your data to third parties.
With respect to the contact data your organization uploads to magenCRM (such as your members’ names, dates, emails, and phone numbers), magenCRM acts as a data processor on your behalf. Your organization is the data controller and is responsible for obtaining any consent required from its own contacts before uploading their information or sending them communications through the platform.
4. Data Storage and Security
- All customer data is stored securely in Supabase, our database and authentication provider, with industry-standard encryption at rest and in transit.
- The application is hosted on Vercel, and all traffic is protected by HTTPS (TLS/SSL encryption).
- Authentication uses passwordless magic links by default: we email you a secure, single-use sign-in link, so no password is stored for your account unless you choose to set one. Any credentials that are stored are hashed and never kept in plain text.
- Our source code and encrypted backups are stored in private GitHub repositories.
- Email delivery via SendGrid and WhatsApp messaging via Twilio are secured by their respective platforms.
5. Use of Third-Party Services
We rely on the following third-party services:
- Stripe — payment processing (stripe.com/privacy)
- SendGrid (Twilio) — email delivery (twilio.com/legal/privacy)
- Twilio — WhatsApp messaging (twilio.com/legal/privacy)
- Supabase — database and authentication (supabase.com/privacy)
- Vercel — application hosting (vercel.com/legal/privacy-policy)
- Hebcal — Jewish calendar date conversion (public APIs used only for date calculations; no personal data is shared)
- GitHub — source code hosting and encrypted backups
If you connect your own accounts with any of these providers, you are responsible for complying with their terms.
6. Cookies and Tracking
We may use cookies or analytics tools to:
- Monitor site usage and improve performance
- Maintain user sessions securely
You can manage cookie preferences via your browser.
7. Communications and Opt-Out
Recipients of communications sent through magenCRM can opt out at any time:
- Emails sent through the platform include an unsubscribe link.
- WhatsApp recipients can reply STOP to stop receiving messages.
Opt-out requests are honored automatically, and organizations are expected to respect them for all future communications.
8. Data Retention and Deletion
We retain your data as long as your account remains active. After cancellation or inactivity:
- We retain data for up to 60 days for reactivation
- After that, your data may be deleted permanently
- You may request deletion of your data at any time by contacting info@magencrm.com, and we will delete it within a reasonable period, subject to any legal retention obligations
9. Your Rights
You may:
- Access, edit, or delete your data
- Export your contact and reminder records
- Request account deletion
For all requests, please contact: info@magencrm.com
10. Children's Privacy
magenCRM is intended for organizations, not individuals under 18. We do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this Privacy Policy at any time. Changes will be posted on our website with the effective date. Continued use of magenCRM indicates your acceptance of the updated policy.
12. Contact
For any questions or concerns regarding this Privacy Policy, please contact us at:
- Email: info@magencrm.com
- Website: www.magencrm.com