Privacy Policy
Effective date: 21 October 2026 | Last updated: 21 October 2026
iBrook Infotech (“we”, “us”, “our”) provides customer relationship management (CRM), business automation, communication and integration software. This policy explains how we collect, use, share, retain and delete personal information when people visit our website, use our software, or interact with businesses that connect external platforms to our CRM.
1. Who is responsible for information
For information about our website visitors and our own business customers, iBrook Infotech may determine why and how information is processed. When our business customers use the CRM to manage their leads, contacts and communications, they generally determine the purposes and means of processing their customers’ data; iBrook Infotech processes it on their behalf, under applicable agreements and instructions. If you contacted a business using our CRM, you may also contact that business about its privacy practices.
2. Information we process
- Business account details, user names, work contact details, credentials and subscription information.
- CRM leads, contacts, opportunities, enquiries, notes, activities and customer communications supplied by authorised business users.
- Information available through authorised integrations: names, email addresses, phone numbers, platform IDs, lead-form responses, comments, messages, media, timestamps and engagement metadata, depending on platform permissions and enabled features.
- Operational data such as IP addresses, device/browser details, access logs, webhook delivery identifiers and security events.
We do not receive all categories of information from every platform. Actual access depends on the connected account, granted permissions, API capabilities and the integration features used.
3. Platform integrations and webhooks
Meta: Facebook, Instagram and WhatsApp Business
When an authorised business connects its eligible Meta accounts, our CRM may receive events through Meta webhooks and obtain permitted details through Meta APIs. Depending on permissions, this may include Facebook Lead Ads submissions, Page comments and replies, Instagram professional-account interactions, WhatsApp Business messages, contact identifiers, message status and related metadata. We use this information to associate interactions with the correct business account, create or update CRM records, route enquiries and support customer follow-up and communication. Meta's own services are governed by Meta's Privacy Policy.
YouTube and Google services
Where enabled and authorised, YouTube API Services may provide channel/video metadata, comments and related permitted engagement information for CRM workflows and reporting. Our use of YouTube API Services is subject to the YouTube Terms of Service and Google Privacy Policy. Users can review and revoke connected Google account access through Google Account permissions. YouTube/Google API data is handled according to applicable API-specific restrictions, including refresh, retention and deletion requirements.
Where approved access and customer authorisation permit, LinkedIn integrations may process business or organisation information, lead submissions, engagement information and related identifiers for authorised CRM and marketing workflows. LinkedIn data is handled in accordance with applicable API terms and the LinkedIn Privacy Policy.
Other services
Our CRM may integrate with additional email, communication, marketing and business platforms. We process only information available under the permissions and functionality authorised for each integration and apply relevant provider terms.
4. Purposes of processing
We process information to provide CRM services; receive and route enquiries; manage leads and customer communications; perform authorised workflow automation; provide reports; authenticate users; prevent misuse; maintain service reliability; respond to support requests; and comply with legal obligations. Our business customers are responsible for ensuring that their own use of the CRM and communications has an appropriate legal basis and meets applicable notice and consent requirements.
5. Disclosure and service providers
We do not sell personal information obtained through platform integrations. Data may be available to authorised users of the business that connected the integration, and to contracted hosting, infrastructure, communication or security providers as necessary to deliver our services, subject to appropriate safeguards. We may disclose information where legally required. We do not intentionally expose one tenant's customer records to another unrelated tenant.
6. Security
We use technical and organisational safeguards appropriate to the services and risks, including encrypted transport, authentication, access controls, tenant separation, restricted credentials, operational monitoring and incident-response procedures. No system can guarantee absolute security.
7. Retention and deletion
We retain information for the period needed to provide the services, meet documented customer instructions, fulfil legal obligations and resolve legitimate disputes. Retention can vary by record type, customer configuration and integration. We delete or de-identify data when no longer required or permitted, including where platform-specific rules require earlier deletion. Disconnecting an integration stops future authorised access after processing completes but may not automatically remove historical CRM records. Valid deletion requests are handled as described below.
8. Your rights and requests
Depending on applicable law, you may request access, correction or deletion of personal information, or raise a privacy concern. Email support@ibrookinfotech.com with sufficient details to locate the relevant information. Please avoid sending passwords, authentication tokens or unnecessary sensitive information. We may verify identity and, where the business customer controls the data, coordinate with that customer. We respond in accordance with applicable law and platform requirements. No CRM login is needed to make a request. See Data Deletion Instructions.
9. Cookies
Our website and applications may use essential cookies or similar technologies for authentication, security and session functionality. Where optional analytics or tracking technologies are deployed, we provide any notices and choices required by applicable law.
10. International processing
Information may be processed in India or in other jurisdictions where our authorised service providers operate, subject to applicable law, contractual commitments and required safeguards.
11. Children
Our CRM integration services are intended for business use. We do not knowingly solicit children's personal information for our own independent marketing through these integrations. Businesses that process children's information are responsible for obtaining required authorisations and complying with applicable law.
12. Updates
We may revise this policy as our products, integrations or legal obligations change. We will publish revisions here and update the date above.
13. Contact
iBrook Infotech
Plot No.89, 3rd Main Road, VGP
Babu Nagar, Medavakkam, Chennai – 600100, India
Email:
support@ibrookinfotech.com
Website:
www.ibrookinfotech.com