Privacy NoticePrivacy Notice

1. Data agencies keep about their own clients

Agencies use SADE CRM to keep data about their own clients, leads and contacts. For that data, the agency is the controller and SADE processes it on the agency's behalf, under our Terms of Service. If you are an agency's client and have a question about your data, please contact that agency; we will help them answer you.

2. What we collect

• Account details: your name, email address, phone number, password (stored only as a secure hash), agency name, country, language and role.
• Agency verification: the business registration number and the registration documents or licences your agency uploads, kept in private storage.
• Billing: your plan, payments and billing email. Card details are handled by our payment providers; we never see or store full card numbers.
• Use and security: your IP address, device and browser, sign-in times, and a log of important actions in your account.
• Messages: what you write to us, for example from the contact form (which opens your own email app) or in support requests.
• Mobile app: a notification token, if you allow notifications on your phone.

sadecrm.com uses no analytics or advertising tools.

3. Why we use it, and on what legal basis

• To provide the Service: your account, the CRM, the apps and support. Basis: our contract with you.
• To bill you and keep accounting and tax records. Basis: our contract, and our legal obligations.
• To verify agencies before their listings go public. Basis: our legitimate interest in a trustworthy marketplace, and our contract.
• To keep the Service secure and prevent fraud and abuse. Basis: our legitimate interest.
• To send service emails, such as sign-in codes, email confirmations and payment notices. Basis: our contract.
• To send news about SADE CRM, only if you agree. Basis: your consent, which you can withdraw at any time.
• To meet our legal obligations and answer lawful requests from authorities.

4. Who receives personal data

We share personal data only with the service providers who help us run SADE CRM, under contracts that protect it:

• DigitalOcean, LLC: hosting of the Service, its database and file storage. Uploaded files are stored in Frankfurt, Germany.
• Hostinger: sending email from SADE.
• PayPro Global, Inc.: reseller and Merchant of Record for orders placed through our online checkout.
• PayPal: payments made with PayPal.
• Twilio Inc.: text and WhatsApp messages, such as reminders and phone verification, where your agency uses them.
• Expo (650 Industries, Inc.): notifications to the mobile app.
• Map services based on OpenStreetMap (OpenFreeMap, Nominatim and Photon by Komoot): maps and address search, which receive the address you search for and your IP address.
• Google LLC (Google Fonts): the CRM loads its typeface from Google, which receives your IP address.

We may also share data with professional advisers under confidentiality, and with authorities when the law requires it. Listings your agency publishes are public, including the contact details your agency chooses to show. We do not sell personal data.

5. Transfers outside Albania

Some of these providers are based in, or store data in, the European Union or the United States. Where data leaves Albania, we rely on the safeguards Law No. 124/2024 provides for, such as adequacy decisions or standard contractual clauses.

6. How long we keep it

• Account and agency data: while your account exists. Accounts without an active plan for 12 months may be deleted after 30 days' notice (see our Terms of Service).
• Billing records: for as long as Albanian accounting and tax law requires.
• Security logs: up to 12 months.
• Verification documents: while your agency is verified, and afterwards only as long as the law requires.

When you ask us to delete data, we do so unless the law requires us to keep it.

7. How we protect it

All connections are encrypted (HTTPS). Passwords are stored as secure hashes. Each agency's data is kept apart from every other agency's, access inside an agency depends on each person's role, and private documents are kept in private storage. Changing your password signs out your other devices. If SADE support needs to look into an account, that access is read-only, time-limited, needs a reason and appears in the agency's log.

8. Your rights

Under Albania's Law No. 124/2024 on personal data protection and, where it applies, the EU General Data Protection Regulation, you can ask us to:

• give you access to your personal data and a copy of it;
• correct data that is wrong or incomplete;
• delete your data, or limit how we use it;
• give you your data in a portable format;
• stop using your data where we rely on our legitimate interest;
• stop using it where we rely on your consent (withdrawing consent does not affect what we did before).

Write to [email protected]. We answer within one month. You also have the right to complain to the Commissioner for the Right to Information and Personal Data Protection (Komisioneri për të Drejtën e Informimit dhe Mbrojtjen e të Dhënave Personale), idp.al.

9. Cookies and browser storage

We use only what is needed for the Service to work: a sign-in cookie in the CRM, and your browser's storage for preferences such as language, display theme and the video's sound setting. We use no analytics or advertising cookies, so there is nothing to opt out of.

10. Children

SADE CRM is a business service and is not meant for anyone under 18.

11. Changes

We may update this notice. The date at the top shows the latest version, and we will tell you about material changes by email or in the CRM.

12. Contact

Sade Group SHPK, NUIS M52008002I, Rruga e Dibrës, Tirana, Albania. Email: [email protected]. Phone: +355 69 808 0118.