iHavenStore CRM Privacy Policy

Last updated: August 27, 2026.

This Privacy Policy describes how the service operator (“we”, the “Provider”) collects, uses, stores and protects personal data of users of the iHavenStore CRM online service (the “Service”).

1. Data controller

The data controller is the iHavenStore CRM operator. For data protection enquiries, contact:

• Email: [email protected]
• Telegram: @ihavenstorecrm_support

2. Data we process

Depending on how you use the Service, we may process the following categories of data:

• Registration and account: name, email, phone, login, password (hashed), registration IP address, session data.
• Organisation: name, legal details, phone, email, address, business settings, subscription and plan data.
• CRM data: customer information, sales, inventory, cash records, documents and other data entered by users to run their business.
• Subscription payments: payment identifiers, amount, status, subscription period. Payment cards are processed by WayForPay; we do not store full card details.
• Support: content of requests, email, Telegram identifiers when you contact support or use Telegram bots.
• Technical data: IP address, browser type, cookies, access logs, push subscriptions (if enabled), cash agent station/printer data.
• Landing forms: trial and support form data; reCAPTCHA v3 verification (Google).

3. Purposes of processing

We process data, in particular, to:

• provide access to the Service and its features;
• register, authenticate and secure user accounts;
• manage subscriptions, payments and refunds;
• provide technical support;
• send service emails (activation, invitations, password reset);
• improve the website and analytics (Google Tag Manager on public pages);
• comply with legal requirements and protect our rights.

4. Legal bases

Processing is based on performance of a contract (access to the Service), legitimate interests (security, support, product development), user consent (where required, e.g. push notifications or certain forms) and/or compliance with legal obligations.

5. Sharing with third parties

We may share limited data with the following categories of recipients:

• WayForPay — subscription payment processing;
• Google — reCAPTCHA v3 on landing forms; analytics via GTM on public pages;
• Cloudflare — website delivery and protection;
• Telegram — support and notification bots, if used;
• SMTP provider — sending email messages;
• Hosting / infrastructure — storage and processing within the scope of providing the Service.

We do not sell personal data to third parties for their marketing purposes.

6. Retention

Data is retained for the period of use of the Service, the subscription term, dispute resolution and periods required by law or contract. After account or organisation deletion, data may be deleted or anonymised unless retention is required for accounting, security or legal compliance.

7. Security

We apply organisational and technical measures to protect data: HTTPS, access controls, password hashing, tenant isolation between organisations, database backups. No system can guarantee absolute security; users must also keep their credentials confidential.

8. Your rights

Depending on applicable law, you may have the right to:

• obtain information about processing of your data;
• request correction of inaccurate data;
• request deletion or restriction of processing where provided by law;
• object to processing based on legitimate interests;
• receive a copy of your data in a structured format, where applicable;
• withdraw consent where processing is based on consent.

To exercise your rights, contact [email protected]. We will respond within a reasonable time.

9. Cookies and analytics

The Service uses cookies for login sessions and website operation. The public landing and legal pages may use Google Tag Manager for analytics. Landing forms may use Google reCAPTCHA v3. See those providers' privacy policies for details of their processing.

10. Your customers' data

CRM users enter their customers' data (names, phones, purchase history, etc.) to run their business. We process such data as infrastructure provider on behalf of the user organisation. The organisation is responsible for having a lawful basis to collect and process its customers' data.

11. Changes to this Policy

We may update this Policy. The current version is always available on this page with the latest revision date. Continued use of the Service after publication of changes may constitute acceptance of the updated version, unless otherwise required by law.

12. Contact information

Website: https://ihavenstorecrm.com
Email: [email protected]
Telegram: @ihavenstore_support