Privacy Policy
Last updated: October 2, 2026. We are committed to transparency, data minimization, and the strict protection of your information across all Edfosys platforms.
1. Introduction & Scope
Edfosys ("we", "us", or "our") operates the Edfosys CRM software-as-a-service platform, accessible via edfosys.com, *.edfosys.com, and related digital services. This Privacy Policy details our practices regarding the collection, storage, processing, and disclosure of personal data when you interact with our website, our multi-tenant CRM application, our Meta (Facebook & Instagram) integrations, and our WhatsApp Business Cloud API tools.
By accessing or using our services, you consent to the data practices described in this policy. If you do not agree with any terms, please discontinue the use of our services immediately.
2. Information We Collect
We collect information in three categories:
A. Information You Directly Provide
When registering for an account, subscribing to a plan, or submitting contact inquiries: full name, corporate email address, contact phone number, company name, GST/Tax identification, billing address, and authorized user credentials.
B. Customer Data Processed on Behalf of CRM Tenants
As a multi-tenant CRM provider, our business customers ("Tenants") ingest and store customer prospect data ("Leads"). This may include prospect names, contact numbers, email addresses, course/service interests, deal values, and communication notes. Tenants remain the data controllers of their own lead databases; Edfosys acts solely as a secure data processor under strict tenant isolation.
C. Automatically Collected Technical Data
Browser type, operating system, IP address, device identifiers, session timestamps, and page interaction analytics collected via strictly necessary session cookies.
3. Meta (Facebook & Instagram) Platform Data
Edfosys provides authorized integrations with Meta Technologies, Inc. ("Meta"), including Facebook Login for Business, Meta Lead Ads, and WhatsApp Business Cloud API.
- Lead Ads Ingestion: When a tenant connects their Facebook Page via Facebook Login, Edfosys receives a scoped Page Access Token to fetch leads submitted via that tenant's lead ad forms. Data retrieved typically includes prospect name, phone, email, and custom ad form fields.
- Zero Data Sale or External Advertising: We never sell, rent, monetize, or use Meta user data or Lead Ads data for our own advertising, audience profiling, or cross-service tracking.
- Tenant Scoping & Isolation: Lead data from a tenant's Facebook Page is deposited solely and strictly into that specific tenant's isolated CRM schema. No other tenant or third party can access it.
- WhatsApp Messaging: Messages dispatched and received via WhatsApp Business Cloud API are transmitted via official TLS-encrypted Meta endpoints directly to the recipient.
4. Purpose of Data Processing
- Provisioning and maintaining your CRM tenant workspace and branch architectures.
- Synchronizing leads from connected channels (Facebook Lead Ads, Website Widgets, WhatsApp).
- Executing automated workflows, appointment reminders, and team notification routing.
- Processing SaaS subscription billing and invoicing through PCI-DSS compliant gateways (Razorpay).
- Ensuring security, diagnosing application performance bottlenecks, and preventing unauthorized account breaches.
5. Data Retention & Deletion Rights
We retain personal and CRM lead data only for as long as necessary to fulfill the operational purposes outlined in this policy or as required by applicable legal, fiscal, or regulatory standards.
User Data Deletion: Any individual whose data was captured via Facebook Lead Ads, WhatsApp, or CRM forms has the right to request the complete erasure of their personal information. For step-by-step instructions on requesting removal or submitting a Meta Data Deletion request, please visit our dedicated User Data Deletion Instructions Page.
6. Information Security & Encryption
We implement industry-grade technical and organizational safeguards:
- End-to-end Transport Layer Security (TLS 1.3 / HTTPS) on all web requests and API webhooks.
- AES-256 encryption at rest for sensitive integration access tokens and database connection secrets.
- Multi-tenant logical database isolation preventing cross-tenant data leakage.
- Role-based access control (RBAC) permitting staff access strictly on a need-to-know basis.
7. Contact Data Privacy Officer
If you have questions, feedback, or data privacy requests regarding this Privacy Policy or our Meta integrations, please contact our Data Protection Office:
Entity: Edfosys Technologies
Email: privacy@edfosys.com (or info@edfosys.com)
Location: Ahmedabad, Gujarat, India
Phone: +91 74056 72371