Privacy Policy

Last updated: 18 June 2026

This Privacy Policy explains how NS Technology (“NS Technology”, “we”, “us”, or “our”) collects, uses, stores, and protects personal information in connection with NS CRM (the “Service”), our cloud-based ERP and CRM platform available at nscrm.com. It also explains how data received through connected lead sources — including Meta (Facebook/Instagram) Lead Ads, IndiaMART, Justdial, and website lead forms — is handled.

Who controls your data. NS CRM is a business tool used by our customers (the businesses that subscribe to the Service) to manage their own leads, customers, staff, and operations. For data those businesses load into or capture through the Service, the subscribing business is the data controller and NS Technology acts as a data processor on their behalf. NS Technology is the controller for account and billing data we collect directly from our subscribers.

1. Information We Collect

1.1 Account & subscriber information

When a business registers for NS CRM, we collect the account owner’s name, company name, email address, phone number, and a securely hashed password. We also collect staff/user accounts, roles, and permissions created within the workspace.

1.2 Business data you enter into the Service

Our customers use NS CRM to store and manage operational records, which may include:

Leads, customers, and contacts (names, phone numbers, email addresses, addresses, and notes);
Quotations, orders, invoices, payments, and accounting records;
Inventory, purchases, suppliers, and manufacturing records;
Employee attendance, tasks, support tickets, and internal chat/communication logs.

1.3 Lead data from connected sources

When a customer connects an external lead source, we receive lead information submitted by prospective customers through those channels:

Source	Data typically received
Meta (Facebook/Instagram) Lead Ads	The lead’s submitted form fields, such as name, phone, email, and any custom questions, retrieved from Meta’s Graph API after a lead-generation event.
IndiaMART	Buyer enquiry details forwarded by IndiaMART (name, phone, email, product interest, message).
Justdial	Enquiry details forwarded by Justdial (name, phone, email, message).
Website lead forms	Information a visitor submits through a connected website form.

1.4 Technical & usage information

We automatically collect limited technical data needed to operate and secure the Service, such as IP address, browser type, session/login activity, and server logs.

2. How Meta (Facebook/Instagram) Lead Ads Data Is Handled

When a business connects its Facebook Page to NS CRM, Meta does not send lead details directly. Instead, Meta notifies the Service of a lead event (a leadgen_id and page_id only), and the Service then calls Meta’s Graph API using the business’s authorized Page Access Token to retrieve the submitted lead fields.

We request only the leads_retrieval and related Page permissions strictly needed to fetch and route leads into the connecting business’s CRM.
Lead data retrieved from Meta is used solely to create and manage that lead within the connecting business’s workspace. We do not sell it or use it for advertising or profiling.
Access tokens and Page credentials are stored to maintain the connection; verify tokens are stored only as a one-way hash.
Our use of data received from Meta complies with the Meta Platform Terms and Developer Policies.

3. How We Use Information

We use personal information to:

Provide, operate, and maintain the Service and its features;
Authenticate users, verify email addresses, and secure accounts;
Capture, de-duplicate, route, and manage leads and customer records;
Send transactional communications (e.g. verification codes, account and lead notifications);
Provide customer support and respond to enquiries;
Detect, prevent, and address fraud, abuse, and security issues;
Comply with legal obligations.

4. Legal Bases for Processing

Where applicable law requires a legal basis, we rely on: performance of a contract (providing the Service); legitimate interests (securing and improving the Service); consent (where collected at the point of lead submission by the originating channel); and compliance with legal obligations.

5. How We Share Information

We do not sell personal information. We share information only as follows:

With the subscribing business whose workspace the data belongs to and its authorized users;
With service providers who help us operate the Service (e.g. hosting and email delivery), under contractual confidentiality and data-protection obligations;
For legal reasons, where required by law, regulation, legal process, or to protect rights, safety, and the integrity of the Service.

6. Data Retention

We retain personal information for as long as a workspace remains active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Subscribing businesses control the records within their workspace and may delete them. When an account is closed, we delete or anonymize associated data within a reasonable period, subject to legal retention requirements.

7. Data Security

We use technical and organizational measures to protect personal information, including encrypted transport (HTTPS), hashed passwords, role-based access controls, and hashed storage of sensitive connection secrets. No method of transmission or storage is completely secure, but we work to protect your information and continually improve our safeguards.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or restrict the processing of your personal information, or to object to processing and request portability. Because much of the data in NS CRM is controlled by the subscribing business, requests relating to that data are best directed to the relevant business. You may also contact us using the details below and we will assist or route your request appropriately.

9. International Transfers

Information may be processed and stored on servers located in jurisdictions other than your own. Where required, we apply appropriate safeguards for such transfers.

10. Children’s Privacy

The Service is intended for business use and is not directed to children. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, where appropriate, provide additional notice. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or requests regarding this Privacy Policy or your personal information, contact us at:

NS Technology
Email: privacy@nscrm.com
Website: https://nscrm.com