Privacy policy
Last updated 3 September 2026
What we store, and for whom
When a business signs up and starts taking in orders, we store the names and phone numbers of that business's own customers, along with the orders, rack locations and bills the business creates for them. This is kept per business — one shop never sees another shop's customers.
Two separate permissions, never assumed from each other
We track two different permissions for every customer, and getting one never counts as getting the other:
- Being contacted about your own order — so the business you're dealing with can message you about the job you actually gave them.
- Being contacted across shops by Iniquire CRM itself — off by default everywhere it is ever offered, and never turned on just because the first permission was.
Every time either permission is granted, declined, or withdrawn, we record it — who, when, for what, and under which version of the wording shown at the time. That record is never edited or deleted after the fact; it is only ever added to.
How to withdraw
There is a working unsubscribe page for a business's marketing to you, but today it isn't yet linked from inside every marketing message a business sends — a self-serve link on every such message is coming, not shipped yet. Until then, write to us or ask the shop directly and we'll turn its marketing to you off by hand; this never affects the order and job updates you're already waiting on. If you've created a Iniquire CRM account to manage your bookings across shops, you can withdraw the cross-shop permission from that account's own page at any time.
Verifying your phone number (OTP)
When we send a one-time code to verify a phone number, the code itself is never stored in readable form — only a hash of it, used to check what you typed in. The technical details behind that check (the device and network information tied to the attempt) are automatically cleared after 30 days; the record that a number was or wasn't verified is kept as an audit trail.
Exporting or deleting your data
If you have a Iniquire CRM account for managing bookings across shops, you can ask us for a full export of what we hold about that account, or to have it erased. This is not yet a self-service button in the product — write to us and we'll run it by hand. A shop's own record of its relationship with a specific customer is that shop's business record; contact the shop directly, or contact us and we'll pass it on.
India's data protection law
We built the consent handling above — separate permissions, never inferred, always logged and revocable — with India's Digital Personal Data Protection Act in mind. If you believe we're holding or using your data in a way this page doesn't cover, contact us and we'll look into it.
Contact
Write to privacy@iniquirecrm.shop for anything on this page.