Privacy policy
Ownly CRM is a service of Vysa Trading LLC ("we"). This policy covers this website (crm.vysatrading.com), the live demo and the CRM apps we host for our customers. Contact: support@vysatrading.com.
1. Information we collect
- Contact form: your name, email, trade or city, the plan you're interested in and your message.
- Customer accounts: the name, email and hashed password of each user you create in your CRM.
- Your CRM data: the contacts, jobs, notes, quotes and photos you or your team enter. This data belongs to you.
- Technical data: IP address, browser and access times recorded in server and security logs.
2. How we use it
- To answer your request and prepare your quote.
- To build, host, secure, back up and support your CRM.
- To send service messages (for example billing or security notices).
We do not sell personal information, and we do not use your CRM data for our own marketing.
3. Your CRM data: you are in control
For the data you store in your CRM, you decide what is collected and why; we process it only on your instructions and to provide the service. You are responsible for having a lawful basis to store your own customers' information and for following anti-spam rules (such as Canada's CASL) when you contact them. You can ask us for a full export at any time.
4. AI features
If your plan includes AI lead capture, the text you choose to paste (for example an email or message from a lead) is sent to Google's Gemini API to extract details such as name, phone and job. Please don't paste sensitive data such as health information, government ID numbers or payment card numbers. The public demo does not use AI.
5. Service providers
We use: Hostinger (hosting, databases and backups), Google (Gemini AI, only if enabled), our email provider, and a payment processor when you pay a subscription. They process data under their own privacy terms. Data may be stored in Canada, the United States or other countries where these providers operate.
6. Security
- Encrypted connections (HTTPS) and security headers on every page.
- Passwords stored only as secure hashes; role-based access for each team member.
- Login lockout after repeated failed attempts and automatic logout after inactivity.
- Configuration and data files blocked from public access.
No system is 100% secure, but we take reasonable measures and will notify affected customers without undue delay if a breach affects their data.
7. Retention and deletion
Contact-form messages are kept as long as needed to answer you and keep business records. When a subscription ends, we keep your CRM data for 30 days so you can request an export, then delete it from the live system; backup copies expire on the hosting provider's normal schedule. The demo resets automatically every few hours — please don't enter real data there.
8. Your rights
You can ask to access, correct, export or delete your personal information by writing to support@vysatrading.com. Depending on where you live (for example Canada, the European Union or some U.S. states), you may have additional rights, including the right to complain to a data-protection authority.
9. Changes
We may update this policy; the date above shows the latest version. Material changes will be notified to active customers by email.