Privacy Policy

1. Introduction

DeelRx CRM ("Company," "we," "us," or "our") operates the DRX CRM platform ("Service"). This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information in connection with our Service.

We are committed to protecting your privacy and ensuring you have a positive experience on our platform. This policy applies to all users of DRX CRM, including business owners, employees, and customers whose data is processed through the system.

2. Information We Collect

2.1 Information You Provide

• Account credentials (email, password)
• Business profile information (business name, address, phone, email)
• Customer information (names, phone numbers, email addresses, physical addresses)
• Inventory information (product names, SKUs, pricing, supplier details)
• Transaction data (sales, credits, payments, notes)
• User preferences and settings

2.2 Information Collected Automatically

• Log data (IP address, browser type, pages visited)
• Device information (operating system, device type)
• Usage analytics (features used, interaction patterns)
• Session information (login times, duration)

2.3 Information from Third Parties

We may receive information from payment processors and service providers who assist us in providing the Service.

3. How We Use Your Information

• Providing and improving the DRX CRM platform
• Processing transactions and managing accounts
• Communicating with you about service updates and changes
• Responding to support requests
• Conducting security and fraud prevention
• Complying with legal obligations
• Analytics and understanding usage patterns

4. Data Protection

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes:

• Encryption in transit using TLS/SSL
• Secure authentication mechanisms
• Row-level security in our database
• Regular security audits
• Access controls and permission systems

5. Data Retention

We retain personal information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. Specifically:

• Account data: Retained while account is active
• Business transaction records: Retained for 7 years (tax/legal compliance)
• Customer records: Retained as long as business account is active
• Deleted account data: Purged within 30 days of account deletion (unless legally required)

6. Your Privacy Rights

Depending on your location, you may have the following rights:

• Right to Access: Request a copy of your personal information
• Right to Rectification: Correct inaccurate information
• Right to Erasure: Request deletion of your data
• Right to Data Portability: Receive data in structured format
• Right to Restrict Processing: Limit how we use your data
• Right to Object: Opt-out of certain processing

To exercise these rights, contact us at privacy@deelrx.com with your request details.

7. Information Sharing

We do not sell your personal information. We may share information with:

• Service providers (payment processors, hosting providers)
• Business associates as necessary for providing the Service
• Legal authorities when required by law
• Other users within your business (with appropriate access controls)

8. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have data protection laws that differ from your home country. By using DRX CRM, you consent to the transfer of your information to countries outside your country of residence.

9. Children's Privacy

DRX CRM is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn we have collected personal information from a child under 13, we will delete such information promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy and updating the "Last Updated" date. Your continued use of the Service constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

12. Your California Privacy Rights

California residents have specific rights under the California Consumer Privacy Act (CCPA). We will respond to verified requests within 45 days. You have the right to:

• Know what personal information is collected
• Know whether personal information is sold
• Delete personal information
• Opt-out of the sale or sharing of personal information