Privacy Policy

This Privacy Policy explains how EGA CRM ("EGA", "we", "us") collects, uses and protects personal data when you visit our website or use our services. We are committed to processing personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Lithuanian law.

1. Who we are

EGA CRM is a self-hosted customer relationship management platform developed and operated from Lithuania, within the European Union. For any questions about this policy or your data, contact us at info@egacrm.com.

2. What data we collect

We only collect what we need to provide and improve our services:

• Contact details you submit through forms (work email, company name, team size, business type).
• Communications you send us, such as demo requests and support enquiries.
• Basic technical data (IP address, browser type, pages visited) collected to keep the site secure and functional.

We do not sell personal data, and we do not use third-party advertising trackers.

3. How we use your data

• To respond to demo requests and enquiries.
• To provide, maintain and improve our services.
• To send service-related communications you have asked for.
• To comply with legal obligations.

4. Legal basis for processing

We process personal data on the basis of your consent, the performance of a contract, our legitimate interests in running and improving our business, and compliance with legal obligations, as defined under Article 6 of the GDPR.

5. Self-hosted deployments

When EGA is deployed on your own infrastructure, the data your business stores in the CRM stays on your servers and under your control. In those cases you act as the data controller, and EGA acts as a processor under a separate Data Processing Agreement (DPA).

6. Data retention

We keep personal data only for as long as necessary for the purposes set out above, or as required by law. Enquiry and demo-request data is retained for up to 24 months unless you ask us to delete it sooner.

7. Data sharing

We share personal data only with trusted service providers who help us operate (for example email and hosting providers), all bound by confidentiality and data-protection obligations, and all within the EU wherever possible. We do not transfer personal data outside the EU without appropriate safeguards.

8. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent at any time.

To exercise any of these rights, email info@egacrm.com. You also have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania.

9. Security

We apply appropriate technical and organisational measures to protect personal data, including encryption, access controls and audit logging. For details on how the platform itself secures data, see our Security page.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated through our website.