Privacy Policy

Last updated: February 8, 2026

1. Introduction

Best ROI CRM ("we," "our," or "us") is operated by Best ROI Media LLC. We are committed to protecting the privacy of our users ("you" or "your"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our customer relationship management platform and related services.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, company name, and role within your organization.

Business Data

Data you enter into the platform, including lead and customer information (names, phone numbers, email addresses, physical addresses), appointment details, job records, notes, files, and communication history. This data belongs to you and your organization.

Usage Data

We automatically collect information about how you interact with our platform, including pages visited, features used, browser type, device information, and IP address.

Communication Data

If you use our SMS or email features, we process message content, recipient information, and delivery status through our third-party providers (Twilio for SMS, Resend for email).

3. How We Use Your Information

  • To provide, maintain, and improve the Best ROI CRM platform
  • To authenticate your identity and manage your account
  • To process and deliver SMS messages and emails on your behalf
  • To provide customer support and respond to your inquiries
  • To send service-related notifications (e.g., security alerts, system updates)
  • To detect, prevent, and address technical issues and security threats
  • To comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

  • Service Providers: Third-party services that help us operate the platform, including Supabase (database and authentication), Vercel (hosting), Twilio (SMS), and Resend (email).
  • Within Your Organization: Other users within your company account may access shared business data based on their role and permissions.
  • Legal Requirements: When required by law, court order, or governmental authority.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.

5. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit (TLS/SSL), row-level security policies in our database, role-based access controls, and secure authentication. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide you with our services. Business data you enter into the platform is retained until you or your organization deletes it. If you close your account, we will delete or anonymize your data within 90 days, unless we are required to retain it for legal or compliance purposes.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request that we correct inaccurate or incomplete information.
  • Deletion: Request that we delete your personal data.
  • Data Portability: Request a copy of your data in a machine-readable format.
  • Opt-Out: Opt out of non-essential communications.

To exercise any of these rights, please contact us using the information provided below.

8. Cookies and Tracking

We use essential cookies to maintain your authentication session and remember your preferences. We do not use third-party advertising cookies or tracking pixels. Analytics data is collected in aggregate form to improve our service.

9. Third-Party Services

Our platform integrates with the following third-party services, each with their own privacy policies:

  • Supabase — Database, authentication, and file storage
  • Vercel — Application hosting and deployment
  • Twilio — SMS messaging services
  • Resend — Transactional email delivery

10. Children's Privacy

Best ROI CRM is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the platform after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Best ROI Media LLC

Email: privacy@bestroicrm.com