This Privacy Notice explains how Good Old CRM collects, uses, and protects your personal data, and the rights you have under the General Data Protection Regulation (GDPR).
Data controller
Good Old CRM is operated by Leon Skalczynski, based in Spain, who acts as the data controller for the personal data described in this notice. You can contact us at malagagames.dev@gmail.com.
Data we collect
- Account data: when you create an account, we collect your email address and an authentication credential. Authentication and cloud storage are handled by Firebase (Google).
- CRM data: the clients, deals, activities, settings, and file attachments you enter into the application.
- Subscription data: payments for the Pro plan are processed by Paddle. We receive your subscription status and the email address associated with your Paddle account, but not your full payment card number.
- AI features: if you use the Smart AI assistant, the minimum relevant CRM data is sent to a Google (Gemini) model to prepare a proposal. Proposed changes are shown to you for review before they are applied.
- Calendar integrations: if you connect Google Calendar (Pro), you authorise Google to share calendar access with the application; the browser token is kept in memory and is not stored in your CRM data. Apple Calendar export generates an .ics file locally, without any credentials.
How we use your data
We use your data to provide and maintain the service, to enable cloud synchronisation, to process and manage subscriptions, to provide the optional AI and calendar features, and to respond to your support requests. We do not sell your personal data.
Legal basis
We process your data on the basis of the performance of our contract with you, our legitimate interests in operating and securing the service, and, where required, your consent (for example, for the Smart AI assistant and calendar integrations). You may withdraw your consent at any time.
Where your data is stored
Data you enter without an account is stored only on your device. If you create an account, your CRM data is synchronised to Firebase Cloud Firestore, which may store it on servers located outside the European Economic Area. Data is transferred subject to appropriate safeguards provided by Google.
Service providers
We rely on third-party providers to operate the service, including Firebase (Google) for authentication, cloud storage, and web hosting, Paddle for payment processing, and Google for the Gemini AI model and Google Calendar. These providers process data only as needed to provide their services.
Cookies and local storage
The web application stores your CRM data and preferences locally in your browser using local storage. We do not use advertising or tracking cookies.
How long we keep your data
Your data is kept for as long as you use the service. You can delete your CRM data from within the application at any time. To request deletion of your account and its cloud data, contact us at malagagames.dev@gmail.com.
Your rights
Under the GDPR, you have the right to access, rectify, or erase your personal data, to restrict or object to processing, and to data portability. You can exercise several of these rights directly in the application, for example by exporting or deleting your data. To exercise any of these rights, contact us at malagagames.dev@gmail.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es) if you believe your data has been processed unlawfully.
Security
We apply reasonable technical and organisational measures to protect your data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Children
The service is not directed to children under 16, and we do not knowingly collect personal data from them.
Changes to this notice
We may update this Privacy Notice from time to time. Material changes will be communicated within the application.
Contact
For questions about this notice or to exercise your rights, contact us at malagagames.dev@gmail.com.
