Privacy Policy

Effective November 10, 2026

1. Who is responsible

crmFerry is operated by an individual sole proprietor based in Taiwan. We are responsible for the personal data described in this policy. You can reach us at support@crmferry.app.

2. Data we collect

Account details: your name, email address, company name, and sign-in details.
Billing details: Paddle collects your payment information. We receive your name, email, country, and the details of each transaction. We never receive your full card number.
Data you add: the contacts, emails, notes, and files you put into crmFerry, including email sent and received through your connected mailbox.
Usage and device data: IP address, browser type, pages used, and error logs, collected to keep the service secure and working.
Support messages: what you send us when you contact us.

3. Data about your contacts

For the personal data of people in your customer list, you decide what is collected and why. We process it only on your instructions and only to provide crmFerry to you. You are responsible for telling those people how you use their data and for having a lawful basis to do so.

4. How we use data

To provide crmFerry, including sending and receiving email when you ask us to.
To manage your subscription and billing with Paddle.
To answer support requests and send important notices about your account.
To protect the service against abuse, fraud, and security threats.
To meet legal and tax obligations.

We do not sell personal data, and we do not use it for advertising.

5. Cookies

We use only the cookies needed to keep you signed in and to secure your session. We do not use advertising or cross-site tracking cookies. Our website loads fonts from Google Fonts, which receives your IP address when the font files are requested.

6. Who we share data with

Paddle.com, our reseller and Merchant of Record, to process payments, tax, and refunds.
Hosting and email delivery providers that store data and deliver email on our behalf, under contracts that limit their use of it.
Your mailbox provider, when you connect a mailbox and send or receive email through it.
Authorities, when the law requires it.

7. International transfers

Our providers may store or process data outside your country. Where the law requires it, we use contractual safeguards for these transfers.

8. How long we keep data

Your account details and data you add are kept while your account is active.
After your account closes, we delete your data within 30 days, except where we must keep it longer by law.
Billing and tax records are kept for as long as tax law requires.

9. Security

We use encrypted connections (HTTPS), access controls, and regular backups. No system is perfectly secure, so we cannot guarantee that data will never be accessed without permission. If a breach affects your data, we will tell you as the law requires.

10. Your rights

Depending on where you live, including under Taiwan's Personal Data Protection Act and the EU and UK GDPR, you can ask to see, correct, export, or delete your personal data, or object to or restrict how we use it. Email us to make a request. We will reply within 30 days. You can also complain to your local data protection authority.

11. Children

crmFerry is for business use by adults. We do not knowingly collect data from anyone under 18.

12. Changes

If we make material changes to this policy, we will email account holders before they take effect and update the date at the top of this page.