Privacy Policy

1. Who we are

CarePro CRM ("we", "us") is operated by EA Digital Solutions, Blk 7 Lot 3 University Hills Subdivision, Dasmariñas, Cavite 4114, Philippines. You can reach us any time at eadigitalsolutions2023@gmail.com.

2. Information we collect

Business account data

• Owner and staff names, email addresses, phone numbers and roles
• Business name, type, address, logo and branding settings
• Subscription plan, trial status and billing references

Business records you enter

• Client profiles, appointments, treatment and service notes
• Sales, invoices, payments, inventory and expense records
• Employee attendance, payroll and commission records

Facebook and Messenger data (only if you connect a Facebook Page)

• Your Facebook user ID, name and profile picture, and the Pages you manage
• Page access tokens, used only to receive and send messages on your behalf
• Messenger conversations with your Page: the sender's page-scoped ID (PSID), public first name, last name and profile picture, message text, attachments and timestamps
• Contact details a person voluntarily types into a message, such as a phone number or email

Technical data

• Log data, IP address, browser type and device information
• Authentication session data required to keep you signed in

3. How we use information

• To provide the CRM: bookings, point of sale, inventory, HR, payroll and reporting
• To deliver Messenger conversations into your inbox and send your replies back to Facebook
• To create and score leads from Messenger inquiries so you can follow up
• To generate AI-assisted reply suggestions and business insights
• To secure the service, prevent abuse and keep audit records
• To contact you about your account, billing and service changes

We do not sell personal data, and we do not use your data to train third-party AI models.

4. Legal basis and consent

We process business account data to perform our contract with you. Facebook and Messenger data is processed only after you explicitly grant permission through Facebook Login, and only for the Pages you select. You can revoke that permission at any time from your Facebook settings or by disconnecting the Page inside CarePro CRM.

5. How we store and protect data

• Data is hosted on managed cloud infrastructure with encryption in transit (TLS) and at rest
• Facebook user and Page access tokens are additionally encrypted with AES-256-GCM and can only be read by our server processes — never by a browser
• Every record is isolated per business through row-level security, so one business can never read another business's clients, sales or conversations
• Staff access is limited by role-based permissions that the business owner controls
• Administrative actions are written to an audit log

6. Sharing with third parties

We share data only with service providers required to run the platform:

• Cloud hosting and database providers (application data)
• Meta Platforms (to receive and send Messenger messages for your connected Page)
• AI providers (message text sent for reply drafting and insights, not retained for training)
• Payment providers (billing identifiers only)
• Email delivery providers (transactional email)

We may also disclose data where required by law.

7. Data retention

Business records are kept for as long as your account is active. If you close your account, we delete or anonymise your data within 90 days, except records we must retain for legal, tax or accounting purposes. Messenger conversations and leads are deleted immediately when you disconnect the Page or submit a deletion request.

8. Your rights

• Access a copy of the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Withdraw Facebook permissions at any time
• Object to or restrict certain processing

To exercise any of these, email eadigitalsolutions2023@gmail.com. We respond within 30 days.

9. Deleting your data

Full instructions are on our data deletion page. Removing CarePro CRM from your Facebook settings also triggers an automatic deletion of the Messenger data we stored for you.

10. Children

CarePro CRM is intended for business use and is not directed at children under 13. We do not knowingly collect data from children.

11. Changes to this policy

We may update this policy. Material changes will be announced inside the app or by email, and the "last updated" date above will change.

12. Contact

EA Digital Solutions — Blk 7 Lot 3 University Hills Subdivision, Dasmariñas, Cavite 4114, Philippines.
Email: eadigitalsolutions2023@gmail.com