Privacy Policy

NewEra CRM ("we," "us," or "our") is a software-as-a-service CRM platform operated by Nagary Consulting Corp, available at neweracrm.io (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

When you sign up for and use the Service, we collect:

• Account information: Your name, email address, password, company name, and role.
• Business information: Legal business name, DBA, tax ID (EIN), business type, industry, business address, website, and authorized representative details — used for billing and SMS carrier registration (A2P 10DLC).
• Phone numbers: Your own phone number, business phone numbers you provision through the Service, and the phone numbers of your customers, leads, vendors, team members, and other contacts that you enter or import into the Service.
• Communication content: SMS messages, call recordings, voicemails, and emails sent or received through the Service.
• Project & financial data: Lead information, project details, estimates, contracts, invoices, payments, photos, files, notes, and other content you upload.
• Usage data: IP address, browser type, device information, pages visited, and timestamps of access.
• Payment information: Billing details processed by our payment processor (Stripe). We do not store credit card numbers on our servers.

2. How We Collect Phone Numbers

Phone numbers enter the Service in three ways:

• Direct entry by you: You manually enter or import phone numbers of your leads, customers, vendors, and contacts.
• Inbound communication: When a contact calls or texts a phone number you have provisioned through our Service, their number is captured and logged.
• Web forms: If you embed our forms on your website, phone numbers submitted by visitors are saved to your account.

You are responsible for ensuring you have a lawful basis (express consent, contractual relationship, or legitimate business interest) to collect and process the phone numbers of your contacts under applicable laws including the Telephone Consumer Protection Act (TCPA) and CTIA messaging guidelines.

3. How We Use Phone Numbers and SMS

Phone numbers in the Service are used to:

• Enable you to call, text, and email your contacts from within the Service.
• Send transactional SMS — such as appointment reminders, estimate notifications, payment requests, project updates, and account verification codes — that you initiate.
• Log inbound and outbound communications in your CRM history for your records.
• Authenticate accounts via SMS verification codes when applicable.

SMS is only sent to recipients who have opted in. NewEra CRM does not initiate marketing or promotional SMS to your contacts on your behalf. All outbound SMS is triggered by you (the account owner) or by automated workflows you have configured.

Standard message and data rates may apply to all SMS sent or received through the Service. Message frequency varies based on your usage and the specific workflows you configure.

We do not sell, rent, or share recipient phone numbers with third parties for marketing purposes, nor are they used to send commercial messaging on behalf of any third party.

4. SMS Opt-Out (STOP) and Help (HELP)

Recipients of SMS sent through the Service can opt out at any time at no cost by:

• Replying STOP to any message — they will be immediately removed from future SMS to that phone number.
• Replying UNSUBSCRIBE, END, QUIT, or CANCEL — these keywords are also honored.
• Replying HELP at any time to receive information about the sender and contact details.

Opt-outs are honored at the Twilio carrier level and cannot be re-enabled by the sender without explicit re-consent from the recipient.

If you (the account owner) wish to opt out of receiving SMS notifications from NewEra CRM itself, you can do so in your account settings under Notifications, or by replying STOP to any system SMS.

5. Service Providers (Sub-processors)

We share information with the following service providers to operate the Service:

• Twilio Inc. — voice calls, SMS messaging, phone number provisioning, A2P 10DLC brand & campaign registration.
• Resend — transactional email delivery.
• Supabase Inc. — database, authentication, and file storage.
• Vercel Inc. — hosting and content delivery.
• Stripe Inc. — payment processing.
• Google LLC — Google Maps APIs for address autocomplete.

These providers have access only to the information necessary to perform their services and are contractually bound to keep it confidential and secure. We do not share your data with any third party for their own marketing purposes.

6. Data Storage and Security

We use industry-standard encryption in transit (TLS) and at rest. Data is hosted in secure US data centers operated by our infrastructure providers. Access to your data is restricted to authorized personnel and audited regularly. We retain your data for as long as your account is active and for a reasonable period thereafter to comply with legal obligations or resolve disputes.

7. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Request corrections to inaccurate or incomplete information.
• Request deletion of your account and associated data.
• Export your data in a portable format.
• Object to specific uses of your data.

To exercise these rights, contact us at privacy@neweracrm.io. We will respond within 30 days.

8. Cookies

We use essential cookies to keep you signed in and remember your preferences. We do not use third-party advertising or cross-site tracking cookies. You can disable cookies in your browser settings, but parts of the Service may not function correctly.

9. Children's Privacy

The Service is not directed to children under 18 and we do not knowingly collect information from children. If you believe a child has provided us with information, please contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the latest revision. Material changes will be communicated via email to active account owners and by a notice within the Service.

11. Contact Us

Questions about this Privacy Policy, or about how we handle your personal information?