Seen CRM is a product of Memba LTD, a company registered in Manchester, United Kingdom ("Memba", "we", "us"). This policy explains what personal data we collect when you use seencrm.com, why we collect it, and the choices you have. We act as the data controller for your account information, and as a data processor for the CRM records your workspace stores about its own customers.
1. Data we collect
We collect only what the service needs to operate:
- Account details — your name, work email address, phone number, job title, and profile photo if you add one.
- Workspace data — the leads, accounts, opportunities, tasks, meetings, messages, and activity records your team creates inside its own private workspace.
- Connected mailbox credentials — if you connect a personal mailbox for email sync, we store its server settings and password encrypted with AES-256-GCM. Passwords are decrypted only in memory at connection time and are never logged or shown to anyone, including us.
- Technical data — sign-in timestamps and basic logs needed to keep the service secure and reliable.
2. How we use your data
We use your data solely to provide and improve Seen CRM: authenticating you, storing your workspace records, sending transactional emails (such as welcome and invitation emails from info@seencrm.com), showing aggregate platform statistics that never identify individuals or workspaces, and keeping the service secure.
We do not sell your personal data, and we do not use your workspace records for advertising.
3. Legal basis
We process your data under UK GDPR on the basis of contract performance (running the service you signed up for), legitimate interests (security, fraud prevention, service improvement), and consent where required (such as connecting a personal mailbox, which you can disconnect at any time).
4. Where your data lives
Seen CRM runs on established cloud infrastructure providers: the application is hosted on Vercel and data is stored in managed PostgreSQL databases hosted by Neon. Each workspace’s records are isolated by tenant so that no other workspace can read them. Transactional email is delivered through our mail provider for the seencrm.com domain.
5. Retention
We keep your data for as long as your workspace is active. If you disconnect a synced mailbox, its stored credentials are deleted immediately. If your workspace is closed, we delete or anonymise its data within a reasonable period, except where we must retain records to meet legal obligations.
6. Your rights
Under UK data protection law you have the right to access, correct, export, restrict, object to the processing of, or request deletion of your personal data. To exercise any of these rights, contact us at info@seencrm.com. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority.
7. Changes to this policy
If we make material changes to this policy, we will update the date above and, where appropriate, notify workspace administrators by email.
8. Contact
Memba LTD, Manchester, United Kingdom. Email: info@seencrm.com.