Exodus CRM

Privacy Policy

This Privacy Policy explains how Exodus CRM ("Exodus CRM," "we," "us," or "our") collects, uses, shares, and protects information when you use our customer relationship management platform, website, and related services (collectively, the "Service").

Effective date: May 27, 2026

1. Who this policy applies to

This policy applies to individuals who create an Exodus CRM account, visit our website, or otherwise interact with the Service. If you use Exodus CRM on behalf of an organization, you represent that you have authority to accept this policy for that organization.

Exodus CRM is designed for business use. Our customers may store information about their own customers, leads, contacts, and team members ("Customer Data") in the Service. When we process Customer Data on behalf of a customer, we act as a service provider to that customer and handle the data according to their instructions and applicable agreements.

2. Information we collect

We collect information in the following categories:

• Account information — such as your name, email address, password or authentication credentials, organization name, and profile settings.
• Billing and subscription information — such as payment method details, billing address, and transaction history when you purchase a paid plan.
• Customer Data you submit — such as contact records, orders, events, communications, notes, files, and other information you or your team enter into the Service.
• Connected channel data — when you connect third-party services (for example Meta, WhatsApp, or email providers), we may receive account identifiers, message metadata, and content needed to provide those integrations.
• Usage and device information — such as log data, IP address, browser type, device identifiers, pages viewed, features used, and timestamps.
• Communications — such as messages you send to our support team, feedback, and survey responses.
• Marketing preferences — such as your newsletter subscription status and communication opt-in or opt-out choices.

3. How we use information

We use the information we collect to:

• Provide, operate, maintain, and improve the Service.
• Create and manage accounts, authenticate users, and process subscriptions.
• Enable CRM features such as lead tracking, deal management, events, orders, analytics, and channel integrations.
• Send service-related notices, security alerts, product updates, and support responses.
• Send marketing communications where permitted by law and according to your preferences.
• Monitor, detect, prevent, and respond to fraud, abuse, security incidents, and technical issues.
• Comply with legal obligations and enforce our terms and policies.
• Analyze aggregated or de-identified usage trends to improve performance and user experience.

4. Legal bases for processing

Where applicable data protection laws require a legal basis, we rely on one or more of the following: performance of a contract with you; our legitimate interests in operating and improving the Service; compliance with legal obligations; and your consent where required (for example, for certain marketing communications or optional integrations).

5. How we share information

We do not sell your personal information. We may share information in these circumstances:

• Service providers — with vendors who help us host infrastructure, process payments, send email, provide analytics, or support customer service, subject to contractual confidentiality and security obligations.
• Integrations you enable — with third-party platforms you choose to connect to Exodus CRM, such as messaging, advertising, or email services, according to your configuration and their policies.
• Business transfers — in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate safeguards.
• Legal and safety — when required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect rights, safety, and security.
• With your direction — when you ask us to share information or when sharing is otherwise disclosed at the time of collection.

6. Cookies and similar technologies

We and our service providers may use cookies, local storage, and similar technologies to remember preferences, keep you signed in, understand how the Service is used, and improve performance. You can control cookies through your browser settings. Disabling certain cookies may limit some functionality.

7. Data retention

We retain personal information for as long as needed to provide the Service, fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce agreements. When you delete your account, we delete or de-identify associated personal data from our active systems, except where retention is required by law or for legitimate business purposes such as backup, security, or fraud prevention.

8. Security

We implement administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information, and to receive a portable copy of your data. You may also withdraw consent where processing is based on consent.

You can update account details from your Profile page. To delete your account and associated personal data, follow the instructions on our Data Deletion page. If you cannot access your account, contact us and we will help you complete your request.

10. International transfers

We may process and store information in countries other than where you live. When we transfer personal information internationally, we use appropriate safeguards as required by applicable law.

11. Children’s privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us so we can take appropriate action.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated policy on this page and update the effective date above. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

13. Contact us

If you have questions about this Privacy Policy or our privacy practices, contact us at [email protected].