מדיניות פרטיות

1. Introduction

This Privacy Policy describes how TCI GROUP LTD, an Israeli company ("Company", "we", "us", or "our"), operates the GOLDICRM platform and how we collect, use, and protect personal information.

By using GOLDICRM, you agree to the terms described in this Privacy Policy.

2. Information We Collect

We collect the following categories of information:

2.1 Information You Provide Directly

• First and last name
• Email address
• Phone number
• Company name
• Organization details (industry, number of employees, business information)

2.2 Account & Authentication Information

When you use social login features:

• Google Login (OAuth)
• Facebook Login

We receive basic profile information permitted by those services.
We do not collect or store your Google or Facebook passwords.

2.3 Google Calendar Data

If you connect your Google account, we may access:

• Event titles
• Event descriptions
• Event times and dates
• Event participants
• Event locations

2.4 Facebook Data

If you connect Facebook:

• We may receive Facebook Lead data
• We may process lead information submitted through Facebook Lead Ads
• We may use Meta Pixel for analytics and marketing purposes

2.5 Payment Information

Payments are processed through Polar (third-party payment processor).
We do not store full credit card information on our servers.

Payment processors may collect:

• Billing details
• Transaction history

Their data handling is governed by their own privacy policies.

2.6 Automatically Collected Information

We may automatically collect:

• IP address
• Device type
• Browser type
• Cookies and authentication tokens
• Usage data and log files

Our platform operates using secure HTTPS connections.

3. How We Use Your Information

We use personal data to:

• Provide and operate the GOLDICRM platform
• Authenticate users
• Create and manage CRM accounts
• Create and read Google Calendar events (if connected)
• Send internal reminders
• Process Facebook Leads
• Improve platform performance
• Provide customer support
• Comply with legal obligations

4. Google API Services User Data Policy Compliance

We:

• Do not sell Google user data
• Do not use Google data for advertising
• Do not transfer Google data to third parties except as required to provide the service
• Do not allow humans to review Google data unless necessary for security or support and with user consent
• Use Google data solely to provide CRM and scheduling functionality

Google Calendar data is never used for profiling or marketing purposes.

5. Data Sharing and Third Parties

We may share data with trusted service providers, including:

• Base44 (hosting infrastructure platform)
• Cloud infrastructure providers (United States and Europe)
• Polar (payment processing)
• Meta/Facebook (when user connects services)

We do not sell personal data to third parties.

6. Data Storage and Security

We implement industry-standard safeguards, including:

• HTTPS encryption
• Encrypted OAuth token storage
• Secure cloud hosting in the United States and Europe
• Access controls and authentication mechanisms

While we implement strong security measures, no system can guarantee absolute security.

7. International Data Transfers

Your information may be stored and processed in:

• United States
• European Union

By using GOLDICRM, you consent to such transfers where permitted by law.

8. GDPR Rights (For European Users)

If you are located in the European Economic Area (EEA), you have the right to:

• Access your personal data
• Request correction
• Request deletion
• Restrict processing
• Object to processing
• Request data portability

To exercise these rights, contact: privacy@goldicrm.com

9. Account Deletion

Users may request deletion of their account and associated data by contacting:
privacy@goldicrm.com

Users may disconnect Google accounts at any time, which will revoke OAuth tokens.

10. Children's Privacy

GOLDICRM is not intended for individuals under the age of 18.
We do not knowingly collect personal information from minors.

11. Cookies

We use cookies and authentication tokens for:

• Login sessions
• Security
• Platform functionality
• Analytics

Users may control cookies through browser settings.

12. Data Retention

We retain personal data only as long as necessary to:

• Provide services
• Comply with legal obligations
• Resolve disputes
• Enforce agreements

13. Changes to This Policy

We may update this Privacy Policy periodically.
Updates will be posted on this page with a revised "Last Updated" date.

14. Contact Information