Privacy Policy

This Privacy Policy describes what data PanPerfekt CRM collects and how it is used. PanPerfekt CRM is a cloud CRM platform for service and repair companies. Each company connected to the platform manages its own clients, orders and documents in a separate workspace; data belonging to different companies is fully isolated from one another. The platform is operated by Pavel Vaskalei Panperfekt (K.Witolda 49/15, NIP 8993049919).

1. Who uses the platform

PanPerfekt CRM is used by service and repair companies to manage their clients, orders and team. Each connected company gets its own secure workspace: only that company's owner and the employees they invite have access to it. One company's data is not accessible to other companies using the platform. Companies' clients do not have access to the system and do not create accounts in it — their data is entered manually by staff when an order is placed. New companies are connected to the platform on request — see the contact details in section 7.

2. What data is collected

The system stores: (a) staff data — name, email, phone number, password (stored as a hash), and, if two-factor authentication is enabled, a TOTP secret; (b) data of the clients a company manages in the system — name, phone number, address, email, NIP/tax ID (for invoicing), description of the issue; (c) order data — status, diagnosis/execution dates and times, cost, list of services and parts used, before/after repair photos, notes, change history; (d) technical information — IP address and sign-in time (to protect against password-guessing attacks).

3. Use of Google user data (Google Calendar)

PanPerfekt CRM can connect to the personal Google account of an employee of any company using the platform (only with that employee's consent, via the standard Google consent screen) and requests access to their Google Calendar. This access is used EXCLUSIVELY for the following: when a diagnosis or repair date is set on an order, the system creates a corresponding event on the employee's calendar (with the client's address, phone number and a short order description); when the date/time changes, it updates that event; when cancelled, it deletes it. The account email address is also requested, solely to show in the interface which Google account is connected. Google Calendar data is NOT shared with third parties, is NOT used for advertising, and is not automatically analyzed for any purpose other than visit scheduling. An employee can disconnect their Google account at any time from the "Calendar" tab in the CRM, or from their Google Account settings (myaccount.google.com/permissions) — once disconnected, the system immediately stops creating or modifying events.

4. Data storage and security

Data is stored in a database on a hosting provider's server within the European Union and is only accessible over a secure (HTTPS) connection. Passwords are stored only as an irreversible hash. Access to the system is protected by a password and, optionally, two-factor authentication; after several failed attempts, sign-in is temporarily locked. Data is retained for as long as necessary for the company's operations and to comply with Polish accounting/tax requirements; clients may request deletion of their data (see section 6).

5. Sharing data with third parties

Data is not sold or shared with third parties for advertising or other commercial purposes. Limited data sharing occurs only with technical providers necessary for the service to function: the hosting provider (database storage), Google (Google Calendar API — only with the employee's explicit consent, see section 3), Google Maps Platform (calculating distance to the client's address for route planning), and an SMS/email gateway used to send notifications to clients with their consent.

6. Data subject rights

In accordance with GDPR, a client of any company using the platform has the right to request access to their data, its correction or deletion, and to lodge a complaint with a supervisory authority (in Poland — the President of the Personal Data Protection Office, UODO). Requests can be sent to Libertylive23@gmail.com.

7. Contact

For any questions regarding data processing, please contact: Pavel Vaskalei Panperfekt, K.Witolda 49/15, email Libertylive23@gmail.com, phone 515271493.