Privacy Policy

Effective July 12, 2026 · Ultimate CRM, a service of Geulah Labs

Ultimate CRM ("the Service") is a customer-relationship-management platform operated by Geulah Labs. This policy explains what we collect and how we use it.

What we collect

• Account information — your name, username, email, and password (stored as a salted hash; we never see or store plain-text passwords).
• Workspace data — the contacts, notes, messages, forms, appointments, invoices and files that you and your team add to your workspace. This data belongs to you.
• Facebook / Meta data — if you choose to connect Facebook: your public profile and email (for sign-in) and, if you connect a Facebook Page, a Page access token used solely to publish posts and read engagement on your behalf. We request no other Meta data and never post without your action or scheduled instruction.
• Usage & log data — standard technical logs (IP address, browser type, timestamps) for security and troubleshooting.

How we use it

• To provide, secure, and improve the Service.
• To send messages you compose or schedule (SMS, email, fax, social posts) through our carrier partners (Telnyx, Resend, Meta, Stripe for payments).
• We do not sell your data, and we do not use your workspace data for advertising.

Sharing

Data is shared only with the infrastructure providers needed to run the Service (hosting, database, messaging carriers, payment processing), each bound by their own security terms — and when required by law.

Security

Data is encrypted in transit (HTTPS/TLS). Accounts support two-factor authentication. Access to production systems is restricted.

Retention & deletion

Your data is retained while your account is active. You may request deletion at any time — see Data deletion instructions. Facebook connections can be revoked in Settings, which invalidates stored Meta tokens.

Requests from public authorities

If a government or public authority requests user data, we follow this process:

• Legality review — every request is reviewed for legal validity before any response.
• Challenge — requests we consider unlawful or overbroad are challenged through available legal means.
• Data minimization — if disclosure is legally required, we disclose only the minimum information necessary to comply.
• Documentation — all such requests, our responses, and the legal reasoning are documented and retained.

As of the effective date above, we have received no such requests.

Contact

Questions or requests: support@geulahlabs.com.