Privacy Policy

1. Overview

LingRio operates a multi-tenant CRM and sales automation platform. This Privacy Policy explains how we collect, use, and protect information when you use our services.

2. Information We Collect

We collect information you provide directly and information generated through your use of the platform:

• Account registration data: name, work email, company name, and tenant domain.
• CRM data: contacts, leads, pipeline stages, tasks, and conversation history.
• Integration credentials: WhatsApp Business Account tokens and phone number identifiers (stored encrypted).
• Usage data: audit logs, sign-in events, and IP addresses for security purposes.

3. How We Use Your Information

We use collected information solely to provide and improve the LingRio platform:

• Authenticate users and enforce tenant isolation.
• Deliver CRM features including messaging, pipeline management, and automations.
• Detect and prevent fraud, abuse, and unauthorized access.

4. Multi-Tenant Data Isolation

Each tenant's data is logically isolated using a tenant_id partition enforced at the database layer. No tenant can access another tenant's data. Tenant administrators are responsible for managing user access within their workspace.

5. WhatsApp and Meta Platform Data

When you connect a WhatsApp Business Account, LingRio receives an access token and phone number identifier via Meta's OAuth flow. This data is used exclusively to send and receive messages on your behalf through the Meta Cloud API. We do not sell or share this data with third parties. Use of Meta platform data is governed by the Meta Platform Terms at https://developers.facebook.com/terms/.

6. Gmail and Google User Data

Connecting Gmail is optional and requires your authorization through Google's OAuth consent screen. Lingrio does not ask for or store your Google password. The current integration requests permission to identify your Google account email address and to read, send, and modify Gmail messages; its implemented email features import incoming messages and send emails from the account you select.

Lingrio accesses the connected email address, Gmail message and synchronization identifiers, message headers, sender details, subjects, and message content. It stores OAuth access and refresh tokens to maintain the connection, synchronization information, imported message subjects and bodies, and sender contact details in the workspace database. When you send an email, recipient addresses, subject, body, and attachments you choose are transmitted to Google for delivery.

This data is used to display email conversations in the Lingrio Inbox, associate senders with CRM contacts and leads, route new leads to the configured pipeline, and send customer communications requested by workspace users. Lingrio's current Gmail synchronization starts with new incoming messages rather than importing your entire historical mailbox.

Imported email conversations are available to authorized users of the connected workspace. Google processes emails sent through Gmail, and infrastructure providers process stored data to operate Lingrio. If you enable AI-assisted or webhook-based workflows for email conversations, relevant conversation data may be transferred to the configured AI provider or webhook destination to perform those user-facing functions. Workspace administrators must obtain the required consent before enabling such processing. Lingrio does not sell Google user data or use it for advertising, credit scoring, or unrelated profiling.

Lingrio limits its use and transfer of information received from Google APIs to the purposes disclosed here and the requirements of the Google API Services User Data Policy, including its Limited Use requirements. Lingrio does not use Google Workspace API data to develop, improve, or train generalized or non-personalized AI or machine-learning models. See the Google API Services User Data Policy.

Disconnecting Gmail in Integrations removes its connection record and stored OAuth tokens, stopping future synchronization through that connection. It does not automatically delete email conversations or contacts already imported into the shared workspace, or delete messages in Gmail. You may request deletion of stored Google data at [email protected]. You can also revoke Lingrio's authorization in your Google Account third-party connections settings.

Lingrio communicates with Google's OAuth and Gmail APIs over HTTPS and uses authenticated, tenant-scoped application controls for access to connected accounts and stored conversations. OAuth tokens are stored in the connection database and are not displayed by the integration interface.

7. Data Retention

Workspace CRM records, including imported email conversations, are retained to provide the workspace's services until deleted through available controls or an authorized deletion request. Deleting an individual sign-in account does not automatically delete shared workspace records. To request deletion of stored Google data or workspace records, contact [email protected]; we verify the requester's authority and explain any applicable legal retention obligations.

8. Security

Passwords are hashed using PBKDF2-SHA256. Authentication tokens are single-use and expire after 15 minutes. All data in transit is protected by TLS.

9. Contact Us

For privacy-related questions or data deletion requests, contact us at [email protected]