Privacy Policy

This Privacy Policy explains how Fucharmonk ("Fucharmonk", "we", "us" or "our") collects, uses, shares and protects information in connection with Fucharmonk CRM, our lead-management and follow-up platform built for interior-design companies (the "Service").

This Policy applies to: (a) the interior-design company that registers for an Account and its Authorised Users ("you", "your", the "Customer"); and (b) the leads and contacts that a Customer stores or manages within the Service ("Lead Data"). By using the Service, you agree to the collection and use of information as described here.

Where we process Lead Data on behalf of a Customer, we act as a data processor/service provider and the Customer remains the controller of that data, responsible for having the necessary rights and consents to collect it. Where we process information about a Customer's own Account and Authorised Users, we act as a data controller.

"Account Data": information you give us to create and administer your Account, such as company name, business details (e.g. GST number, company size, years in business), and each Authorised User's name, email address, phone number, role and login credentials.

"Lead Data": information a Customer enters or imports into the Service about their own leads and contacts — for example name, phone number, email, city, budget, project type, timeline, notes, follow-up history and status. Lead Data may also arrive automatically through connected integrations you set up, such as Meta (Facebook/Instagram) Lead Ads, Google Lead Form ads, or WhatsApp messages.

"Usage Data": information generated by using the Service, such as log-in timestamps, IP address, browser/device type, pages visited, actions taken (e.g. status changes, assignments) and activity logs kept for security and audit purposes.

"Cookies and similar technologies": small pieces of data stored in your browser to keep you signed in, remember preferences, and understand how the Service is used. See Section 10 (Cookies) below.

We do not knowingly collect sensitive personal information (such as health data, government ID numbers beyond what is needed for business verification, or payment card details) through the Service.

We use Account Data to: create and secure your Account; authenticate Authorised Users; provide customer support; send service, security and billing notifications; and improve and operate the Service.

We process Lead Data solely to provide the Service to the Customer that owns it — for example, storing leads, routing and auto-assigning them to team members, computing priority, sending follow-up reminders, generating reports, and, where enabled, notifying the assigned owner. We do not use one Customer's Lead Data for the benefit of another Customer, and we do not sell Lead Data.

We use Usage Data to maintain security (for example, detecting suspicious sign-ins or misuse), diagnose and fix issues, understand feature usage, and improve the Service.

Where you choose to enable optional AI-assisted features, relevant Lead Data or notes may be sent to our AI provider (Anthropic) solely to generate the requested output (e.g. a summary or suggested reply); it is not used to train the provider's models under our agreement with them.

Where applicable data-protection law (including India's Digital Personal Data Protection Act, 2023) requires a legal basis for processing, we rely on: performance of our contract with the Customer (to provide the Service); the Customer's consent, obtained by the Customer from their own leads and contacts before entering their data into the Service; our legitimate interests in operating, securing and improving the Service; and compliance with legal obligations.

Customers are responsible for obtaining any consents required from their leads and contacts (for example, consent to be contacted by phone, WhatsApp, or other channels) before adding their information to the Service.

We do not sell Account Data or Lead Data. We share information only in the following circumstances:

With sub-processors and service providers who help us run the Service, under agreements that limit their use of the data to providing services to us — including our database and authentication provider (Supabase), our hosting provider (Vercel), our DNS provider (Cloudflare), and, where enabled, messaging providers (Meta/WhatsApp Cloud API) and our AI provider (Anthropic).

With third-party platforms a Customer chooses to connect (for example Meta Lead Ads, Google Lead Forms, or WhatsApp), to the extent necessary to receive leads or messages the Customer has configured that integration to send.

Within a Customer's own Account, information is visible to that Customer's Authorised Users according to their assigned role and feature permissions.

If required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Fucharmonk, our Customers, or others.

In connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections, and with notice to Customers where required by law.

We use industry-standard technical and organisational measures to protect data, including encryption of data in transit (HTTPS/TLS), database access controls with row-level security so each Customer's data is isolated from others, role-based permissions within each Account, signature verification on inbound webhook integrations, and security HTTP headers to reduce common web-application risks.

No method of transmission or storage is 100% secure. While we work to protect your information, we cannot guarantee absolute security, and you are responsible for keeping your own login credentials confidential.

We retain Account Data and Lead Data for as long as the Account is active, and for a limited period afterwards to allow for export or reactivation, after which it may be deleted in the ordinary course, unless a longer period is required by law (for example, for tax, accounting, or dispute-resolution purposes). It is the Customer's responsibility to export any data they wish to keep before closing their Account.

Activity logs and security-related records may be retained for a longer period where necessary to investigate misuse, enforce our Terms, or comply with legal obligations.

Depending on applicable law, Authorised Users and, where applicable, the individuals whose Lead Data is stored, may have rights to access, correct, port, or request deletion of their personal data, and to withdraw consent where processing is based on consent.

Authorised Users can exercise these rights for their own Account Data by contacting us at the details in Section 13. Requests relating to Lead Data (i.e. a lead or contact wanting their information corrected or removed) should be directed to the interior-design company (Customer) that collected and manages that data, as they control that information; we will assist the Customer in fulfilling such requests where required.

You may request deletion of your personal data at any time. Email us at contact@fucharmonk.com from the email address associated with your Account, using the subject line "Data Deletion Request". We will verify your identity and process the request within a reasonable period (generally within 30 days), unless we are required to retain certain information by law.

Facebook/Meta connected data: if you connect a Facebook Page to the Service using "Connect with Facebook" (Facebook Login), we store an access token and Page identifier so we can receive that Page's Lead Ad submissions. You can remove this at any time by opening Lead Capture in the Service and clicking "Disconnect" on the Meta Lead Ads card, which deletes the stored token and stops any further lead delivery from that Page. You can also revoke Fucharmonk's access from your Facebook account under Settings → Business Integrations. To request deletion of any data we obtained through Facebook Login, email contact@fucharmonk.com with the subject "Facebook Data Deletion".

Requests relating to Lead Data (a lead or contact wanting their own information deleted) should be directed to the interior-design company (Customer) that collected and manages that data, as they control it; we will assist the Customer in fulfilling verified deletion requests where required.

We use strictly necessary cookies to keep you signed in and to protect the security of your session. We do not use third-party advertising or cross-site tracking cookies on the Service. Where analytics cookies are used in future, we will update this Policy accordingly.

You can control cookies through your browser settings; disabling essential cookies may prevent you from signing in or using parts of the Service.

Our infrastructure providers may process and store data in data centres located outside India. Where data is transferred internationally, we rely on our providers' security and contractual safeguards to protect it consistently with this Policy and applicable law.

The Service is intended for business use by adults (18 years and older) and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

If you have questions about this Privacy Policy or how your information is handled, please contact Fucharmonk at contact@fucharmonk.com or the support channel listed on your Account.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you within the Service or by email. Your continued use of the Service after the changes take effect constitutes your acceptance of the revised Policy.