1. Scope
This Privacy Policy explains how Soor LLC collects, uses, discloses, retains, and protects personal data in connection with HelloGrowthCRM, our websites, and related communications. We wrote this Policy to be useful for customers, prospects, legal reviewers, and security teams evaluating how personal data and customer data are handled in practice.
2. Our Role
Depending on the context, we may act as a controller, business, processor, or service provider. For example, we generally act as the controller for website, marketing, account signup, and billing information that we collect directly. When customers use HelloGrowthCRM to process their own leads, contacts, communications, and CRM records, we may process that data on their behalf as part of providing the Service.
3. Categories of Information We Collect
- Account information: name, business email, phone number, company name, role, and authentication details
- Commercial information: subscription details, billing records, transaction history, and payment-related information handled by our payment provider
- Usage and device information: browser type, operating system, IP address, session and product usage data, and diagnostic telemetry
- Communications: form submissions, meeting details, support tickets, messages, and customer service communications
- Customer data: records customers choose to store or process in HelloGrowthCRM, such as leads, contacts, deals, notes, and workflow data
- Cookie and analytics data: information collected through cookies and similar technologies on our website
4. How We Use Information
- To provide, secure, maintain, and improve HelloGrowthCRM
- To create and manage accounts, workspaces, subscriptions, and customer support operations
- To process payments, manage billing, and send service-related notices
- To respond to requests, schedule meetings, and communicate with prospects and customers
- To monitor usage, prevent fraud, investigate misuse, and protect the Service
- To comply with law, enforce agreements, and protect rights, safety, and operations
5. Legal Bases and Consent
Where applicable, we rely on legal bases such as performance of a contract, legitimate interests, legal obligations, and consent. For cookies and similar technologies that require consent, we use our website’s consent controls to capture and respect user choices.
6. Security Measures
We maintain technical, administrative, and organizational safeguards designed to protect personal data and customer data. Claims currently reflected in our codebase and trust materials include:
- SOC 2 Type II certification
- AES-256 encryption at rest
- TLS 1.3 encryption in transit
- Role-based access controls and multi-factor authentication
- AWS-hosted infrastructure in U.S. regions including Virginia and Ohio
7. Data Retention
We retain information for as long as reasonably necessary to provide the Service, fulfill the purposes described in this Policy, meet legal requirements, resolve disputes, and enforce agreements. Retention periods vary depending on the nature of the data, the relationship involved, and operational or legal obligations.
8. International Transfers
HelloGrowthCRM environments described in our codebase are hosted in the United States. If you access the Service from another region, information may be transferred to and processed in the United States. Where applicable, we use contractual or legal mechanisms intended to support lawful cross-border transfers.
9. Privacy Rights
Depending on your location and applicable law, you may have rights that include:
- The right to know what personal data we collect and how we use it
- The right to request access to, correction of, or deletion of personal data
- The right to request export or portability where applicable
- The right to object to or restrict certain processing where applicable
- The right to withdraw consent where processing is based on consent
- The right to non-discrimination for exercising privacy rights where required by law
10. California Privacy Rights
California residents may have additional rights under California privacy laws, including rights to know, access, delete, and correct personal information, and the right to non-discrimination for exercising those rights.
11. Incident Response and Notifications
We maintain incident response processes intended to identify, contain, investigate, and remediate security incidents. Where required by law or contract, we provide notice regarding incidents involving personal data or customer data.
12. Service Providers and Subprocessors
Based on current codebase references, categories of providers may include:
- Cloud infrastructure: AWS
- Payment processing: Stripe
- Email delivery: Resend
- Analytics: Google Analytics and Microsoft Clarity
- Communications: Twilio for SMS, voice, and WhatsApp-related workflows
- AI support: providers referenced in product configuration, including OpenAI and Google AI
We require service providers to process data on our instructions and to maintain security measures appropriate to the services they provide.
13. Cookies and Similar Technologies
We use cookies and similar technologies on our website for core functionality, analytics, preferences, and related operations. See our Cookie Policy for more detail on categories, controls, and choices.
14. Sharing of Information
We may share information with:
- Service providers and subprocessors that help us operate the Service
- Professional advisors such as legal, accounting, security, and compliance advisors
- Authorities, counterparties, or others where required by law or to protect rights and safety
- Transaction counterparties in connection with a merger, financing, reorganization, or sale of assets
15. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date and may provide additional notice where appropriate.
16. Contact Us
For a short guide to GDPR, UK, and California (CCPA/CPRA) rights and how to submit requests, see our Privacy rights (GDPR & CCPA) page.
If you have questions about this Privacy Policy or want to exercise privacy rights, contact us:
- Soor LLC
- 16192 Coastal Hwy, Lewes, DE 19958, USA
- Email: sales@hellogrowthcrm.com
- Phone: +1 (607) 318-2126