SHPMY CRM Privacy Policy

Scope

This Privacy Policy applies to information handled by SHPMY in connection with shpmy.com, sales enquiries, demonstrations, purchases, onboarding, support and SHPMY-managed hosting/backend services.

When a business customer uses SHPMY CRM to manage its own leads, employees, contacts or other records, that customer generally determines what information is entered into the CRM and why. In that context, SHPMY may act as a service provider/processor for data stored in SHPMY-managed infrastructure, while the customer remains responsible for its own legal notices, permissions and lawful use of that data.

Information we collect

Depending on how you interact with SHPMY, we may collect:

• Contact and enquiry information: name, company, email address, phone/WhatsApp number, team size and messages submitted through the website or provided directly.
• Purchase and billing information: purchaser name, business name, country, billing address, invoice/order references, payment status and transaction references.
• Policy acceptance records: accepted policy version, timestamp, buyer identity/contact details, invoice/order identifier and related purchase records.
• Support and onboarding information: configuration requirements, integration details, support messages and implementation information supplied by the customer.
• Technical information: normal server/security logs such as IP address, browser/user-agent, timestamps and request data where generated by hosting, security or analytics systems.
• CRM customer data: data that an authorized customer chooses to store in its SHPMY CRM deployment, which may include lead, contact, employee, project, follow-up and sales-operation information.

How information is used

SHPMY may use information to:

• respond to enquiries and provide guided demonstrations;
• prepare quotations, invoices, payment requests and purchase records;
• deliver, configure and support SHPMY CRM;
• provide managed backend/database hosting when purchased;
• authenticate users, protect accounts and investigate suspected abuse or security issues;
• maintain business, accounting, contractual and compliance records;
• improve reliability, usability and customer support;
• communicate important service, billing, policy or security information.

CRM customer data

SHPMY CRM is designed to let business customers manage operational data such as leads, assignments, follow-ups, projects, users and reporting information. The customer controls what data it enters and who within its organization receives access.

Customers must ensure that the personal information they collect and upload to SHPMY CRM is obtained, used and retained lawfully. SHPMY does not authorize customers to use the CRM for unlawful surveillance, spam, unauthorized data collection or other prohibited activity.

Managed backend storage & database hosting

For customers who purchase the managed backend service, SHPMY may host CRM data, databases, backups and related application data on cloud infrastructure selected by SHPMY. The current base fee is USD $8 per month.

The service is designed to scale with normal business usage so routine database growth can be handled without the customer personally managing server capacity. It is not an unconditional promise of infinite storage at a fixed price. If a customer's storage, bandwidth, compute, backup, file or database requirements become unusually high or require dedicated infrastructure, SHPMY may propose a higher-capacity plan before continuing that expanded usage.

SHPMY may use Oracle Cloud Infrastructure or another reputable cloud/infrastructure provider and may move workloads between suitable providers when reasonably necessary for reliability, security, compatibility, cost or availability.

The $8 monthly managed-storage fee is separate from the one-time SHPMY CRM software license. Non-payment of recurring managed hosting may result in suspension of SHPMY-managed backend services after reasonable notice, subject to the applicable Purchase & License Policy.

Cloud providers & subprocessors

SHPMY may use third-party service providers to operate the website and CRM services, including cloud hosting/database providers, email services, security tools, payment providers and other infrastructure vendors.

These providers may process information only as necessary to provide their services, subject to their own contractual and legal obligations. Examples may include Oracle Cloud Infrastructure for cloud/database infrastructure and Payoneer for payment processing. SHPMY may replace or add providers where reasonably necessary.

Payments

SHPMY may use Payoneer or another approved payment provider to collect customer payments. Payment providers process payment credentials on their own systems and under their own privacy/security practices.

SHPMY may receive and retain transaction information such as customer name, business name, amount, currency, payment status, transaction/reference number and invoice/order information. SHPMY does not need to store full payment-card numbers or security codes when payment is completed on the payment provider's secure service.

Security

SHPMY uses reasonable technical and organizational safeguards appropriate to the services provided, which may include access controls, authentication, HTTPS encryption in transit, provider security controls, backups and restricted administrative access.

No website, cloud service, database or transmission method can be guaranteed to be completely secure or continuously available. Customers are responsible for protecting their own user credentials, limiting account access and promptly reporting suspected compromise.

Retention & deletion

SHPMY retains information for as long as reasonably necessary for the purpose for which it was collected, to provide purchased services, maintain legitimate business and accounting records, resolve disputes, enforce agreements and meet applicable legal obligations.

CRM data hosted under the managed backend service may be retained while the customer's managed service remains active. Following termination or migration, SHPMY may retain backups for a limited operational period before routine deletion, unless a longer period is required by law, dispute preservation, security investigation or a written customer agreement.

Customers should request data export or migration before terminating managed hosting where they need to preserve their CRM data.

International processing

SHPMY serves customers internationally. Depending on the selected cloud, payment, email or infrastructure provider, information may be stored or processed in countries other than the customer's own country. Where appropriate, SHPMY will use reasonable contractual and technical measures suitable to the service and provider.

Access, correction & privacy requests

Individuals may contact SHPMY to request access to, correction of, or deletion of personal information that SHPMY controls directly, subject to identity verification, contractual obligations, legal requirements and legitimate record-retention needs.

If your information is contained in a SHPMY CRM deployment operated for a business customer, you should normally contact that business first because it controls the CRM relationship and determines the purpose of the data. SHPMY may assist the customer where technically appropriate.

Cookies & technical data

SHPMY may use essential browser storage, cookies or similar technologies where necessary for site operation, security, preferences or CRM functionality. If SHPMY introduces non-essential analytics, advertising or tracking technologies that legally require additional notice or consent, the website may provide an appropriate notice or consent mechanism.

Children

SHPMY CRM is a business software product intended for organizations and professional users. SHPMY does not intentionally market the service to children or knowingly seek personal information from children for consumer use.

Customer privacy responsibilities

Business customers using SHPMY CRM are responsible for:

• providing required privacy notices to their own leads, customers, employees and contacts;
• obtaining any consent or legal basis required for their marketing, follow-up and data-processing activities;
• controlling user access and removing access when personnel leave or roles change;
• using CRM information only for lawful business purposes;
• responding to privacy requests relating to data for which they are the responsible business/controller.

Changes to this Privacy Policy

SHPMY may update this Privacy Policy as services, providers, legal requirements or operational practices change. Material updates may be reflected by a new policy version/effective date and, where appropriate, communicated to affected customers.

Changes to this Privacy Policy do not silently alter a customer's separate Purchase & License Policy, order, quotation or signed agreement.