Privacy Policy

This Privacy Policy explains how MOFUSA Tech Solutions (“we”, “us”, or “our”) collects, uses, stores, shares, and protects personal data in connection with MaxCore CRM, including our marketing websites at maxcorecrm.com and maxcore.mofusatechsolutions.com, our application at app.maxcorecrm.com, and related services (together, the “Services”).

MaxCore CRM is a product of MOFUSA Tech Solutions. Our parent company website is mofusatechsolutions.com. By using the Services, you acknowledge the practices described in this Policy.

This Policy applies to:

• Business customers and their authorized users who create or use a MaxCore CRM account
• Visitors to our marketing websites and contact forms
• Individuals whose personal data is processed in MaxCore CRM on behalf of a customer (for example, leads, prospects, and contacts synced from Meta Lead Ads, WhatsApp, marketplaces, or other channels)

MaxCore CRM is offered to businesses only. It is not intended for personal consumer use or for children.

Controller (our marketing and account data). For data we collect about website visitors, sales inquiries, and customer account administration (billing contacts, login emails, support tickets), MOFUSA Tech Solutions acts as a data controller.

Processor (CRM and Meta-connected data). For lead, contact, conversation, and related business data that customers store or sync into MaxCore CRM—including data received from Meta Lead Ads and the WhatsApp Business API—the customer is the controller and MOFUSA Tech Solutions processes that data only to provide the Services as instructed by the customer, as described in this Policy and our Terms of Service.

Depending on how you interact with us, we may collect:

• Account and business information: name, work email, phone, company name, role, billing details, GSTIN where provided, and account preferences
• Marketing contact form data: name, email, company, phone, subject, message, and technical metadata such as IP address and browser user agent (used to operate the form, prevent abuse, and respond to inquiries)
• Usage and service data: login activity, feature usage, device/browser type, approximate location derived from IP, and diagnostic logs needed to secure and improve the Services
• Customer CRM content: leads, contacts, deals, messages, notes, invoices, inventory records, and files that customers or their integrations place in MaxCore CRM
• Third-party platform data: see Section 5 (Meta and other integrations)

Our marketing sites may load Google Fonts and, on the contact page, an embedded Google Maps view. Those services may process technical data under their own policies when your browser requests those resources.

MaxCore CRM integrates with platforms that customers choose to connect, including Meta (Facebook and Instagram) Lead Ads and the Meta WhatsApp Business API, as well as other lead and messaging sources marketed with the product (for example Google Ads, LinkedIn, IndiaMART, TradeIndia, JustDial, website forms, and webhooks).

Meta Lead Ads. When a customer connects Lead Ads, we receive lead form field values submitted by prospects (such as name, email, phone, and custom questions configured by the customer) via Meta’s APIs, and sync them into the customer’s MaxCore CRM workspace for assignment, follow-up, and CRM workflows.

WhatsApp Business API. When a customer connects WhatsApp, we process message content and related metadata (for example sender/recipient identifiers, timestamps, delivery status, and template usage) so the customer can run two-way conversations, templates, broadcasts, and lead-linked messaging inside MaxCore CRM.

We process Meta-sourced data only to provide the Services to the connecting customer. We do not sell this data, use it to build advertising profiles for unrelated purposes, or share it with other customers.

Customers are responsible for lawful collection, notice, consent, opt-in, and Meta platform policy compliance (including WhatsApp Business and Lead Ads rules) for the data they instruct us to process.

We use personal data to:

• Provide, operate, secure, and support the Services
• Sync and display leads, conversations, and CRM records as directed by customers
• Respond to demos, sales, partnership, and support requests
• Send service and billing-related communications
• Prevent fraud, abuse, and security incidents
• Improve reliability, performance, and product features
• Comply with applicable law and enforce our agreements

Where India’s Digital Personal Data Protection Act, 2023 (DPDP Act) or similar frameworks apply, we process personal data with a valid ground, which may include:

• Consent (for example, marketing inquiries or certain optional features)
• Performance of a contract or steps prior to entering a contract (to provide MaxCore CRM to customers)
• Legitimate uses permitted by law (for example security, fraud prevention, and essential service communications), where applicable
• Compliance with legal obligations

When we act as a processor for customer CRM and Meta-connected data, the customer is responsible for establishing the lawful basis for that processing.

We do not sell personal data. We share data only as needed to operate the Services or as required by law, including:

• Hosting: data is hosted on our private VPS infrastructure used to run MaxCore CRM
• Meta and other platforms: when a customer connects an integration, data may be transmitted to or received from that platform as required to provide the connected feature (for example WhatsApp message delivery)
• Professional advisors and authorities: if required to comply with law, regulation, legal process, or to protect rights, safety, and security
• Business transfers: in connection with a merger, acquisition, or asset sale, subject to appropriate confidentiality

Sub-processors and infrastructure providers are engaged under confidentiality and security obligations appropriate to their role.

MaxCore CRM is built for B2B teams in India and the Middle East. Personal data is processed on our private VPS in connection with providing the Services. If you access the Services from another region, your data may be processed in the locations where we operate our infrastructure and support the product.

We retain account and CRM data for as long as the customer account remains active and as needed to provide the Services. After account closure, we delete or anonymize CRM customer data and Meta lead data associated with that account within 30 days, except where we must retain limited information longer to meet legal, tax, accounting, dispute, or security requirements.

Marketing inquiry records may be retained for a reasonable period to manage the sales relationship and comply with record-keeping needs, after which they are deleted or archived with restricted access.

Subject to applicable law, individuals and customers may request access, correction, export, or deletion of personal data we hold. Customers may also manage or delete much CRM content directly in the product.

To submit a request, email contact@mofusatechsolutions.com with enough detail for us to verify and fulfill the request. We aim to respond within 30 days.

If you are an end-prospect whose data appears in a customer’s MaxCore CRM workspace (including Meta Lead Ads or WhatsApp data), please contact that business first. We will assist the customer, as processor, with verified deletion or correction requests related to data we process on their behalf.

We implement reasonable technical and organizational measures designed to protect personal data on our private VPS and application stack, including access controls, encrypted transport where appropriate, monitoring, and staff access limited to need-to-know. No method of transmission or storage is perfectly secure; customers should also protect their credentials and configure integrations responsibly.

The Services are for businesses and their authorized users only. They are not directed to children, and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

Our marketing websites are designed to operate without advertising or analytics pixels. We may use essential cookies or local storage required for site functionality, security, or remembering basic preferences. We do not currently operate Google Analytics, Meta Pixel, or similar tracking pixels on the MaxCore CRM marketing site.

Third-party embeds (such as Google Fonts or Google Maps on the contact page) may set or read their own cookies or receive technical requests when loaded. You can control cookies through your browser settings.

The MaxCore CRM application may use session cookies or similar technologies necessary to keep you signed in, remember preferences, and secure the product.

We may update this Privacy Policy from time to time. The “Effective date” at the top of this page will be revised when changes take effect. Material changes may also be communicated through the Services or by email to account contacts where appropriate. Continued use of the Services after an update constitutes acknowledgment of the revised Policy.

For privacy questions or data requests, contact:

MOFUSA Tech Solutions
Prince Complex, 14-20, 677/225&226, Madhapur, Hyderabad, Telangana 500114
GSTIN: 36AGUPF5826D1Z9
Email: contact@mofusatechsolutions.com
Phone: (+91) 8309 450 663

Related: mofusatechsolutions.com · maxcorecrm.com · app.maxcorecrm.com