1. Introduction
Awarious Technology Solutions Pvt Ltd (“Awarious“, “we“, “us“, or “our“), a company incorporated in India, operates Awarious CRM — a cloud-based customer relationship management platform available at awarious.com.
This Privacy Policy describes how we collect, use, store, share, and protect personal data when you use Awarious CRM and its related services, integrations, and features. By using Awarious CRM, you consent to the practices described in this policy.
This policy applies to all users of Awarious CRM, including administrators, team members, and any individual whose data is processed through the platform.
2. Data We Collect
We collect and process the following categories of data:
2.1 Account & Profile Data
When you register or sign in (including via Microsoft 365 Single Sign-On), we collect:
- Full name and display name
- Email address
- Profile photo (if available)
- Phone number
- Company/organisation name
- Role and job title
- Authentication identifiers (e.g., Microsoft tenant and user IDs)
2.2 CRM Business Data
Data you create, upload, or manage within Awarious CRM, including:
- Leads, contacts, and customer records
- Deals, opportunities, and pipeline data
- Tasks, activities, and notes
- Communication history (emails, calls, messages)
- File uploads including documents, images, and attachments
- Custom fields and tags you define
2.3 Lead Capture Data
When you use Awarious CRM’s lead capture forms embedded on your website or landing pages, we collect data submitted by your visitors, such as name, email address, phone number, company name, and any other fields configured in the form. You are responsible for ensuring appropriate consent is obtained from individuals submitting data through these forms.
2.4 Call Tracking & Phone Recordings
If you use call tracking features, we may collect:
- Phone numbers (caller and recipient)
- Call date, time, and duration
- Call recordings (where enabled and legally permitted)
- Call disposition and notes
Important: Call recording is subject to applicable laws in your jurisdiction. You are responsible for obtaining necessary consent from call participants before enabling call recording features. Awarious CRM provides tools to help manage consent, but compliance remains your responsibility.
2.5 File Uploads
You may upload files to Awarious CRM including documents, images, proposals, contracts, and other attachments. These files are stored securely and are accessible only to authorised users within your organisation’s account.
2.6 Usage & Technical Data
We automatically collect standard technical information when you use the Service:
- IP address and approximate location
- Browser type, version, and language
- Device type, operating system, and screen resolution
- Pages visited, features used, and actions taken within the platform
- Access timestamps and session duration
- Referring URLs and landing pages
3. Third-Party Integrations & Data Access
Awarious CRM integrates with several third-party services to enhance functionality. When you enable an integration, you authorise us to access and process relevant data from that service.
3.1 Microsoft 365 Integration
With your authorisation, Awarious CRM connects to Microsoft 365 via the Microsoft Graph API using OAuth 2.0:
| Feature | Data Accessed | Purpose |
|---|---|---|
| Email (Outlook) | Inbox messages, sent items, email metadata | View emails within CRM, send emails on your behalf via your Microsoft 365 account |
| Calendar | Calendar events, meeting details, attendees | View upcoming meetings, create and manage calendar events from CRM |
| Contacts | Contact names, email addresses, phone numbers | Sync contacts for CRM lead and contact management |
| Authentication | User profile, email, tenant ID | Single Sign-On (SSO) for secure login |
We only request the minimum permissions necessary. Microsoft 365 data is accessed in real-time when you use integrated features and is not bulk-harvested or collected in the background.
3.2 OfficePortal CRM Integration
Awarious uses its OfficePortal CRM to manage leads and contacts.
3.3 Google Services
Awarious CRM may use Google services including:
- Google Maps: For displaying location data associated with leads, contacts, or business addresses.
- Google Analytics: For understanding platform usage patterns and improving the user experience.
Google services are subject to Google’s Privacy Policy.
3.4 SMS & WhatsApp Messaging
If you enable SMS or WhatsApp messaging features, Awarious CRM transmits and receives messages through third-party messaging providers. Data processed includes phone numbers, message content, delivery status, and timestamps. You are responsible for obtaining appropriate consent from recipients before sending marketing or transactional messages.
3.5 Email Marketing
Awarious CRM may integrate with email marketing platforms (such as Mailchimp or similar services) to enable bulk email campaigns, newsletters, and automated email sequences. Data shared may include contact email addresses, names, and segmentation tags. All email marketing must comply with applicable anti-spam laws.
4. Tracking, Analytics & Advertising
We use the following tracking and analytics technologies on the Awarious CRM platform and website:
4.1 Facebook Pixel / Meta Tracking
We use Meta (Facebook) Pixel to measure the effectiveness of our advertising campaigns, understand user behaviour on our website, and deliver targeted advertisements. The pixel may collect data such as pages visited, actions taken, device information, and IP address. This data is processed by Meta in accordance with Meta’s Privacy Policy.
You can opt out of interest-based advertising from Meta through your Facebook Ad Settings or through the Digital Advertising Alliance opt-out page.
4.2 OfficePortal Live Chat
We use OfficePortal live chat to provide real-time customer support and in-app messaging. When you interact with our chat widget, data collected may include your name, email address, messages sent, pages visited, and device information.
4.3 Google Analytics
We use Google Analytics to analyse how users interact with Awarious CRM. Google Analytics collects data such as pages visited, session duration, device information, and approximate geographic location. Data is processed in aggregated form and does not identify individual users. You can opt out using the Google Analytics Opt-out Browser Add-on.
4.4 Cookies
We use essential cookies for authentication, session management, and security. These are necessary for the Service to function. We also use analytics and advertising cookies to understand usage and measure campaign effectiveness. You can manage cookie preferences through your browser settings.
5. How We Use Your Data
We use your data for the following purposes:
- Service Delivery: To provide, operate, and maintain all Awarious CRM features including CRM, email, calendar, messaging, call tracking, and lead management.
- Authentication & Access Control: To verify your identity, manage account access, and enforce role-based permissions within your organisation.
- Communication: To send and receive emails, SMS, and WhatsApp messages on your behalf through connected accounts and providers.
- Lead Management: To capture, process, and manage leads from web forms, integrations, and manual entries.
- Analytics & Improvement: To analyse usage patterns, measure feature adoption, and improve platform performance and user experience.
- Advertising & Marketing: To measure the effectiveness of our advertising campaigns and deliver relevant ads through platforms like Meta.
- Customer Support: To provide real-time support via live chat, resolve issues, and respond to your enquiries.
- Security: To detect, prevent, and respond to security incidents, fraud, abuse, or technical issues.
- Compliance: To comply with legal obligations, enforce our terms of service, and protect our rights.
6. Data Sharing & Disclosure
We do not sell your personal data to third parties. We may share data in the following circumstances:
| Recipient | Purpose |
|---|---|
| Cloud & Infrastructure Providers | Hosting, storage, and processing of platform data (e.g., Microsoft Azure, AWS, or similar providers). |
| Integration Partners | Microsoft 365, Google, SMS/WhatsApp providers, and email marketing platforms — only the data necessary for the integration to function. |
| Analytics & Advertising | Meta (Facebook Pixel), Google Analytics, and similar services for usage analytics and advertising measurement. |
| Customer Support Tools | OfficePortal Live Chat |
| Legal Authorities | When required by law, regulation, legal process, or governmental request. |
| Business Transfers | In connection with a merger, acquisition, or sale of assets, with appropriate notice to affected users. |
| Your Organisation | If your account is managed by an organisation, administrators may have access to your CRM data and usage information. |
All third-party service providers are bound by contractual obligations to protect your data and use it only for the purposes specified.
7. Data Storage & Security
We take the protection of your data seriously and implement appropriate technical and organisational measures:
- All data is transmitted over encrypted connections (TLS/SSL).
- Sensitive data, including access tokens and credentials, are encrypted at rest.
- Call recordings and file uploads are stored in encrypted cloud storage.
- Access to production systems is restricted to authorised personnel with multi-factor authentication.
- We conduct regular security reviews and apply timely patches to our infrastructure.
- Role-based access controls ensure users only see data they are authorised to access.
- Regular automated backups are maintained for data recovery purposes.
8. International Data Transfers
Awarious CRM is operated from India. Your data may be processed and stored in India or other countries where our cloud infrastructure providers operate. By using the Service, you consent to the transfer of your data to these locations. We ensure that appropriate safeguards are in place for cross-border data transfers in compliance with applicable data protection laws.
9. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service:
- Account & CRM data: Retained for the duration of your active subscription and for 90 days after account closure or cancellation.
- Microsoft 365 data: Accessed in real-time and not permanently stored beyond operational caching.
- Call recordings: Retained according to your organisation’s configured retention settings, or for a maximum of 12 months unless otherwise agreed.
- File uploads: Retained for the duration of your subscription and deleted within 90 days of account closure.
- Analytics & usage data: Retained in aggregated form for up to 24 months for service improvement.
- Logs & security data: Retained for up to 12 months for security and compliance purposes.
When you delete your account or request data deletion, we will delete or anonymise your personal data within 90 days, except where retention is required by law.
10. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data.
- Portability: Request your data in a structured, machine-readable format.
- Withdraw Consent: Withdraw consent for specific processing activities at any time.
- Objection: Object to processing based on legitimate interests or for direct marketing.
- Restrict Processing: Request restriction of processing in certain circumstances.
To exercise any of these rights, please contact us at support@awarious.com. We will respond to your request within 30 days.
10.1 Revoking Third-Party Access
You can revoke Awarious CRM’s access to connected services at any time:
- Microsoft 365: Visit myapps.microsoft.com or your Microsoft account security settings.
- Google: Manage app permissions at myaccount.google.com/permissions.
Revoking access may limit certain features of Awarious CRM.
11. Your Responsibilities as a Data Controller
When you use Awarious CRM to process personal data of your customers, leads, or contacts, you act as the data controller and Awarious acts as a data processor. As a data controller, you are responsible for:
- Ensuring you have a lawful basis to collect and process personal data through the platform.
- Obtaining appropriate consent from individuals whose data is captured through lead forms, call recordings, or messaging features.
- Complying with applicable data protection regulations (including GDPR, India’s DPDP Act, and other relevant laws).
- Informing your contacts about how their data is processed and shared.
- Configuring appropriate data retention and access controls within the platform.
12. Children’s Privacy
Awarious CRM is a business application and is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify users of material changes by posting the updated policy on our website with a revised “Last Updated” date and, where appropriate, through in-app notifications or email.
Continued use of Awarious CRM after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:
Awarious Technology Solutions Pvt Ltd
F3, Plot 218, Atrium Spring Meadows, Ram Nagar 3rd St, Velachery, Chennai, Tamil Nadu 600042, India
Email: support@awarious.com
Website: https://www.awarious.com
For Indian Users: This policy is compliant with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP Act). If you believe your data rights have been violated, you may contact the Data Protection Board of India.