Privacy Policy

Who this policy is for

XtremeCRM is business software: it is used by employees of companies ("customers") that subscribe to the Service to manage their own scheduling, customers, orders, and payments. This means two different kinds of personal information pass through XtremeCRM, and they're covered differently below:

• Information about you as a user of the app — if you are an employee of a customer who logs into XtremeCRM, the sections below describe what we collect from your device and account directly.
• Information your employer enters into XtremeCRM about its own customers — names, contact details, service history, orders, and payment records that a subscribing company stores in the Service. We process this data on that company's behalf as a service provider; that company controls what is collected, how long it's kept, and who it's shared with. If you're one of that company's customers and have a question about your own data, contact that company directly, not us.

Information we collect from app users

Account information

Name, email address, and login credentials, provided by you or provisioned by your employer's XtremeCRM administrator.

Location

The Android and iOS apps can share your device's precise location with your team so your dispatcher can see field technicians on a live map. This is off by default — sharing starts only when you explicitly turn it on, and a disclosure is shown before it starts explaining what's collected and how to stop. While location sharing is active, a persistent notification (Android) or status-bar indicator (iOS) stays visible so it's never silent, and it stops automatically when you clock out. You can turn it off at any time from the location control in the app or from your device's system settings.

Payment card data (Tap to Pay)

Where supported, XtremeCRM can accept in-person card payments using your device's NFC hardware ("Tap to Pay"). Card details are read by the device's secure payment hardware and transmitted directly to our payment processing partners (NMI and Celero) for authorization — XtremeCRM does not store full card numbers on the device or on our servers.

Photos and documents

If you upload a profile photo or attach documents/photos to a customer record, those files are stored as part of the Service on behalf of your employer.

Device and diagnostic information

Standard technical information needed to operate the app reliably — app version, crash and error logs, and device identifiers used for push notifications. On Android, the app also reads basic phone state and can use Bluetooth to connect to supported external card readers; both are required by our payment SDK for card-present transactions and are not used for any other purpose.

How we use information

• To provide, operate, and maintain the Service for your employer's account.
• To authenticate your login and enforce access permissions.
• To show your live location to your dispatch team while sharing is turned on.
• To process in-person card payments through our payment partners.
• To send account, scheduling, and messaging notifications.
• To diagnose and fix problems with the app.

We do not sell personal information, and we do not use the information described in this section for advertising.

Who we share information with

We share information with service providers who help us run XtremeCRM, under agreements that limit them to using it only to provide their service to us:

• Microsoft Azure — cloud hosting and infrastructure.
• NMI and Celero — payment processing.
• Twilio — SMS messaging.
• SendGrid — email delivery.
• Google — mapping and address lookup (Places/Maps).

We may also disclose information if required by law, or to protect the rights, safety, or property of Data Access Inc, our customers, or the public.

Data retention

We retain information for as long as your employer's XtremeCRM subscription is active. When a subscription is terminated, we delete the associated data within 30 days.

Your choices

You can turn location sharing on or off at any time in the app, and control location, camera, and notification permissions from your device's system settings. To access, correct, or delete account information, contact your employer's XtremeCRM administrator or us directly (below).

Security

We use encryption in transit and industry-standard access controls to protect information handled by the Service. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children's privacy

XtremeCRM is business software intended for use by adult employees of our customers. It is not directed at children, and we do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. We'll update the "Last updated" date above when we do, and for material changes we'll provide additional notice.

Contact us

Data Access Inc
8611 Concord Mills Blvd #198, Concord, NC 28027
privacy@dataaccessinc.com