1. Data Controller
TransferCRM is operated by Special Services, Skrzynka 7a, 32-410 Dobczyce, Poland (NIP: PL 6793148834). TransferCRM processes personal data as a data controller. For multi-tenant SaaS, each tenant is also a data controller for their customer data. All data is stored on servers in Frankfurt am Main, Germany (EU), operated by Hostinger International Limited.
2. Data We Collect
We collect only the data necessary to provide our service:
- Account data: name, email, company name, password (hashed)
- Business data: orders, clients, drivers, vehicles, routes
- Payment data: processed securely via Stripe (we do not store card numbers)
- Usage data: login times, feature usage, browser type
- Cookies: session cookies (essential), preference cookies (locale, theme)
3. Purpose of Processing
We process data to provide and improve the TransferCRM service, communicate with you about your account, ensure security, and comply with legal obligations.
4. Data Retention
We retain your data for the duration of your subscription plus 90 days. After account deletion, live data is permanently removed within 30 days. Encrypted backups follow a rolling retention schedule and are fully overwritten within 24 months.
5. Your Rights (GDPR)
Under GDPR, you have the following rights:
- Right of access — request a copy of your personal data
- Right to rectification — correct inaccurate data
- Right to erasure — request deletion of your data
- Right to data portability — export your data in a standard format
- Right to object — object to certain types of processing
6. Security
We use industry-standard security measures including TLS encryption, hashed passwords, tenant data isolation, role-based access control, and regular security audits.
7. Data Storage Location
All personal data is stored exclusively within the European Union (EU). Our servers are located in Frankfurt am Main, Germany, operated by Hostinger International Limited. No data is transferred outside the EU/EEA without appropriate safeguards (Standard Contractual Clauses).
8. Sub-processors
We use the following third-party service providers who may process personal data on our behalf:
- Stripe, Inc. — Payment processing (USA/EU, SCCs)
- Google LLC — Maps, Calendar, Places API (EU)
- Pusher Ltd. — Real-time notifications (EU)
- Hostinger International — Server hosting & infrastructure (EU, DE)
9. Google Account Data (Calendar & Gmail)
Connecting a Google account to TransferCRM is optional and always started by you. We request the narrowest scopes the connected features need:
- openid, email — to show which Google account is connected and to use it as the sending identity.
- calendar.events — to create, update and delete the calendar entries that mirror your transfer bookings. We never read or change unrelated events.
- gmail.send — to send booking confirmations and other transactional messages from your own address. This scope allows sending only: it grants no ability to read, search or delete your mail.
TransferCRM's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained through these scopes is used solely to provide the features you switched on. It is never sold, never used for advertising or profiling, never used to train AI or machine-learning models, and never shared with third parties beyond what running the feature requires or the law demands. Google API Services User Data Policy
You can disconnect the Google account at any time in Settings → Integrations, or revoke access at myaccount.google.com/permissions. Disconnecting deletes the stored access and refresh tokens immediately. Calendar entries already created stay in your calendar and remain yours to delete.
10. Cookies
We use essential cookies for authentication and session management. We do not use third-party tracking cookies. You can manage cookie preferences through your browser settings.
11. Contact
For privacy-related inquiries or to exercise your rights, contact our Data Protection Officer:
Special Services
Skrzynka 7a, 32-410 Dobczyce, Poland
Email: privacy@transfercrm.com