Privacy Policy

We handle account, billing and service-operation information to run BubbleSphere CRM. For prospect, client and team records uploaded by a customer, we process information on that customer’s instructions. That customer is responsible for the lawful collection and use of its contacts’ information. If an organization added your details, contact it first about its use of your records; you may also contact us for assistance.

Account information includes email address, name, sign-in information and assigned roles. CRM records may include names, phone numbers, email addresses, company details, notes, deal values, status, assigned team members, product interests and institution selections. Engagement information includes meetings, activities, message content, recipients, delivery status and timestamps.

Billing records include subscription identifiers, plan, status and renewal dates supplied by Paddle. Card details entered into Paddle checkout are handled by Paddle; they are not stored in our CRM records. Operational information may include error reports, request metadata and device or browser details needed for security and troubleshooting.

We use information to authenticate users, enforce permissions, store and display CRM records, manage subscriptions, support messaging and meetings, generate requested AI recommendations, respond to support requests and maintain security. Where applicable, processing relies on providing the contracted service, legal obligations, legitimate operational interests or consent when required. We do not sell personal information or use uploaded contacts to create advertising audiences.

Lovable Cloud provides hosting, authentication and database services. Paddle handles checkout and subscription billing. When SMS sending is configured, Twilio receives the destination number, sender details and message content, and carriers process the text for delivery. If an email delivery provider is configured, it receives the recipient details and content needed to deliver email. Google receives sign-in information when you choose Google sign-in.

We may disclose information when required by law, to protect rights or security, or during a business transfer subject to appropriate protections. Authorized users may access records according to their assigned permissions. Exporting a list creates a copy outside the service, which you are responsible for securing.

When you request an AI next action, the prospect profile, relevant engagement history and additional context you provide are sent through Lovable AI Gateway to the model provider processing the request. Avoid including unnecessary sensitive information. The returned recommendation is shown in the service. Provider processing and retention are subject to its applicable service terms; this policy does not promise that submitted data is never retained or used by a model provider.

Browser storage supports sign-in sessions, your light or dark theme preference and the timing of upgrade reminders. Paddle and Google may use their own cookies or browser storage during checkout or sign-in. Clearing or blocking storage may sign you out or prevent parts of the service from working.

We retain information as needed to provide the service, meet legal and accounting obligations, resolve disputes and protect security. You can request account closure or deletion by email. Some information may remain in backups or legally required records for a limited period; cancellation of a subscription does not automatically delete CRM data.

Access controls and role permissions help protect records, but no online service can guarantee absolute security. Use strong account security, limit team access and avoid uploading sensitive documents that the CRM does not need.

Our service providers may process information outside your province or country, where laws and lawful government access may differ. Contact us if you need information about processing locations or contractual protections before uploading records subject to special residency requirements.

Depending on applicable law, you may request access, correction, deletion, a copy of your information, restriction or objection to processing, or withdrawal of consent where processing relies on consent. You may also complain to the relevant privacy regulator. Contact info@bubblespherecrm.com; we may verify your identity and authority before acting. Some requests are subject to legal exceptions or must be handled by the organization that controls the CRM records.

The service is intended for business users, not children. Do not create an account if you are not legally able to enter a contract. Contact us if you believe a child’s personal information has been submitted inappropriately.

We will update the effective date and provide notice of material changes through the service or account email. Send privacy questions or requests to Darj Holdings Inc. at info@bubblespherecrm.com.