Privacy policy

The canonical version of this policy is the MuslimSpot CRM privacy notice. Where the two ever differ, that notice applies.

1. Who we are

MuslimSpot CRM is a customer relationship management platform operated by MuslimSpot (muslimspot.com). This website is published by Kingdom Of Coolness LLC, a company registered in the State of Wyoming, United States, at 30 N Gould St, Ste R, Sheridan, WY 82801, United States, which works on the platform with MuslimSpot. In this policy "we" means MuslimSpot and Kingdom Of Coolness LLC.

The live service runs at crm.muslimspot.com. Our development server, mindtechcrm.brightera.org, is used to build and test the product and holds test data only.

2. Who is responsible for your data

For account holders (the business and the team members who sign in), MuslimSpot is the data controller.

For a business's customers and contacts (the people a business adds, writes to, or receives messages from), the business is the data controller and MuslimSpot is the processor. We process those records only on the business's instructions and do nothing else with them. If you are a customer of a business that uses the CRM, ask that business first; you can also ask us and we will help.

3. What we collect

About account holders

• Name, email address and sign-in details.
• The business's name, address and settings.
• Team roles and permissions.
• Connected mailboxes and their access tokens (encrypted at rest).
• Usage of metered features and what each use cost.
• Payment details, handled by Stripe; card numbers never pass through our server.
• Request logs (IP address, time, request) for security and fault-finding.

About a business's customers, on the business's behalf

• Names, email addresses, phone numbers, companies and addresses.
• Emails sent and received through mailboxes the business connects.
• Website form submissions and bookings.
• Quotes, invoices, orders, notes, tasks and tags.
• Chat conversations and call records, where those features are switched on.
• Messages through WhatsApp, Facebook Messenger and Instagram, where the business connects those accounts (see section 4).

4. Data from Meta platforms (WhatsApp, Facebook, Instagram)

When a business connects its WhatsApp Business number, Facebook Page or Instagram account, we receive through Meta's APIs the messages sent to and from it, and the sender's name, profile picture and phone number or profile ID.

• We use this data only to display and answer those conversations for the business that connected the account, and to run the automations that business configures.
• We do not sell it, use it for advertising, share it with other businesses on the platform, or use it to train AI models.
• Access tokens are stored encrypted and deleted as soon as the account is disconnected.
• Anyone can ask us to delete their data; see Data deletion.

5. How we use data

• To provide the service: filing conversations under the right customer, sending the messages a business asks us to send, taking bookings, running automations.
• To keep the platform secure and prevent abuse.
• To bill account holders and send them service notices.

We do not sell personal data. We do not use any business's customer data to train AI models, ours or anyone else's.

6. Where data is stored

On a single server MuslimSpot owns and administers, in a data centre in Lauterbourg, France, inside the European Union. Connections are encrypted with TLS and the database is not reachable from the internet. A nightly encrypted backup is kept in private object storage.

7. Who we share data with

Only the service providers a feature needs, each limited to what that feature requires. The complete list, with what each receives and where, is published in the MuslimSpot CRM privacy notice. It includes:

Provider	Purpose
Contabo GmbH	Data centre and server hardware (France)
Cloudflare, Inc.	Encrypted nightly backup storage
Stripe	Payments
Google, Microsoft, Nylas	Mailboxes and calendars a business connects
Meta Platforms Ireland Limited	WhatsApp, Messenger and Instagram conversations a business connects
Resend	Campaign email from the business's own domain
Telnyx, Twilio, LiveKit, Deepgram	Phone numbers, messages and voice calls
AI model providers (OpenAI, DeepSeek, Alibaba Cloud, Google Gemini)	AI assistants, where a business turns them on
Serper, Hunter, Apollo.io, MillionVerifier, ZeroBounce	Finding businesses and checking email addresses, when a business asks

Where a provider processes data outside the European Economic Area, we rely on the European Commission's Standard Contractual Clauses in that provider's data processing terms. We also disclose data where the law requires it.

8. How long we keep it

• A business's customer records: while the account exists, or until the business deletes them.
• Connected account tokens (mailboxes, Meta, Google, Microsoft): until the account is disconnected, then deleted immediately.
• Closed accounts: deleted from the live system within 30 days.
• Backups: 14 daily and 8 weekly copies, so a deletion clears the last backup in about ten weeks.

9. Your rights

You may ask to access, correct, delete, restrict, or receive a portable copy of your data, and object to processing based on legitimate interest. It is free and needs no reason. Email crm-privacy@muslimspot.com; we answer within one month. You may also complain to the CNIL (France) or your local data protection authority.

10. Security

A default-deny firewall, no public database access, encrypted credentials and tokens, a separately secured staff back office, and automatic security updates. If a breach affects your data we notify the supervisory authority within 72 hours and tell affected account holders directly. Report vulnerabilities to security@muslimspot.com.

11. Cookies

The CRM uses a session cookie to keep account holders signed in. Website chat stores a random visitor identifier in the visitor's browser so a returning conversation continues. This website sets no advertising or analytics cookies.

12. Children

The CRM is for working adults and is not intended for anyone under 16. Tell us if you believe a child has an account and we will delete it.

13. Changes

When something material changes, we update this page and its dates and tell account holders by email before it takes effect.

14. Contact

Privacy: crm-privacy@muslimspot.com. General: salam@muslimspot.com. Kingdom Of Coolness LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, United States, +1 507 522 0270, +1 (930) 786-0138, zeynepch97@gmail.com.