CRM Force

CRM Force Privacy Policy

1. Who are we?

CRM Force B.V. (hereinafter "CRM Force" or "we") is located at Boomheide 9, 3776 NE Stroe, registered with the Chamber of Commerce under number 42022380. We advise on and implement Salesforce solutions for organizations.

2. What data do we collect?

We collect personal data that you provide to us through forms on the website, by email or by telephone, such as name, company name, job title, email address, telephone number and other information you enter in the contact form. We also collect anonymized data through cookies and similar technologies to analyze and improve the functioning of our website. If you complete the intake for the Custom CRM product, we also process what you tell us in that conversation: your name, email address and telephone number, and your description of the company, the processes, the roles, the data you record, the integrations you need and the number of users. Do not enter data about customers or employees there; a description in broad terms is enough.

Google Analytics 4 (GA4): We use Google Analytics 4 to gain insight into how visitors use our website. This helps us improve the user experience. The collected data is anonymized and includes information such as which pages you visit, how long you are on the website and how you found the website. IP addresses are anonymized and we do not share data with other Google services.

2b. Salesforce configuration metadata

When you connect your Salesforce organization to the CRM Force platform, we only retrieve configuration metadata. This includes:

  • Flow metadata: names, types, trigger objects, elements and status of Salesforce Flows
  • Validation rules: rule names, error messages and linked objects (formulas are not stored)

We do NOT collect personal data, customer records, attachments, emails or other content data from your Salesforce organization. Only the structure and configuration of your automation.

This metadata is used for: error analysis and explanation (Error Explained), learning paths (Flow Coach, GRIP), org insights (Org Analysis, Maturity Score) and Apex explanation.

Metadata is cached and stored encrypted. Formulas are not cached — they are only fetched on demand and not retained after analysis. Old versions are overwritten with each sync. Storage follows your chosen storage mode (Managed Vault or Own Vault).

2c. The intake for Custom CRM

If you are talking to us about a custom CRM, you receive a personal link to the intake. There you describe in a chat what the system should do. No account is involved: the link itself grants access, is personal and valid for thirty days. Do not share it. In the process we handle:

  • your name, email address and, if you provide it, your telephone number;
  • the messages you send in the conversation;
  • the requirements document and the summary drawn up from it;
  • a price indication based on the number of users you mention;
  • technical data about the conversation, such as the number of turns and the cost of the AI calls. The latter contain no conversation content.

The messages are processed by Claude from Anthropic, PBC, which acts as a processor on our behalf. The data is not used to train models. The conversation and the requirements document are stored in a separate Supabase project in Frankfurt (eu-central-1), isolated from the rest of our systems, and are only reachable from our servers.

We keep an intake for up to twelve months after completion, or twelve months after the link expires if the conversation was never completed. After that we automatically delete the transcript and your contact details; what remains is the requirements document without name or email address. If you want everything removed sooner, email info@crmforce.nl.

2d. The CRM op maat onboarding

If you choose CRM op maat (Custom CRM), you create an account in our onboarding on crmforce.nl. There you deliver what we need to build your CRM. You also complete the intake there, under your account instead of through a personal link. In the process we handle:

  • your account and login: your name, email address and, if you provide it, your telephone number;
  • your company details: company name and contact person;
  • your logo and the colours of your house style;
  • the names and email addresses of the employees who will get a login to the CRM;
  • the sender name, sender address and signature for the emails the CRM will send;
  • the files you upload: exports of existing data and document templates;
  • what you type or dictate in the intake chat, as described under 2c;
  • the meetings you schedule with us through the onboarding;
  • your acceptance of the terms and the data processing agreement, with date and version, and any cancellation together with the reason you give;
  • payment data via Mollie: only the identifiers of customer, mandate, payment and subscription, and their status. We do not store bank account numbers.

Exports and templates may contain personal data of your customers, contacts or employees. For that data you are the controller and CRM Force is the processor: we use it only to set up your CRM and migrate the data. Do not upload more than needed for that. The files are kept in protected storage in the same Supabase project in Frankfurt and can only be opened through links that expire after a short time.

In the intake chat you can also dictate instead of typing. For this we use the speech recognition of your own browser. We do not receive or store any audio; only the text the browser recognises ends up as a message in the chat. Depending on your browser, it may send the audio to its maker's speech service for recognition, for example Google in Chrome. If you do not want that, type instead.

We keep uploaded files until your CRM has been delivered, and no longer than twelve months after the upload. An account without a subscription is deleted twelve months after the last activity. For the intake, the period from 2c applies: twelve months after completion.

3. What do we use your data for?

We use your data to:

  • Contact you in response to a question or quote request;
  • Perform and improve our services;
  • Inform you about relevant updates, services or news (only if you have given consent);
  • Comply with legal obligations.
  • Collect the requirements for a custom CRM and turn them into a proposal.
  • Build a custom CRM from what you deliver in the onboarding, and collect the subscription.

4. Sharing personal data

We do not share your data with third parties unless this is necessary for the execution of our services or to comply with a legal obligation. Think for example of hosting providers or partners who help us execute projects. These parties are bound by the same confidentiality and security as CRM Force. For the Custom CRM intake and onboarding we use Anthropic, PBC (AI processing of the conversations), Supabase (storage, Frankfurt), Vercel (hosting) and Resend (email). Data processing agreements are in place with these parties. Payments for Custom CRM are handled by Mollie.

5. Security

We take appropriate technical and organizational measures to protect your data against loss, misuse or unauthorized access. For example, we use encrypted connections (SSL) and limited access to personal data.

6. Retention period

We do not retain personal data longer than necessary for the purposes for which it was collected, unless there is a legal obligation to retain data longer. Fixed periods apply to the Custom CRM intake and onboarding, see 2c and 2d.

7. Your rights

You have the right to access, correct or delete your personal data. You can also object to the processing or request transfer of your data. Send a request to info@crmforce.nl for this. To ensure that the request was made by you, we may ask you for a copy of a valid identity document (make your BSN and photo invisible).

8. Cookies

We use functional and analytical cookies to ensure our website works properly and to track visitor statistics. Functional cookies are necessary for the operation of the site; we only place analytical cookies with your consent. You can indicate your preferences in our cookie banner. The intake through a personal link sets one functional cookie that remembers your conversation, valid for thirty days. The onboarding keeps your login in your browser's storage. Neither requires consent.

9. Changes to privacy policy

We may modify this privacy policy. Regularly check the most recent version on our website. In case of significant changes, we will notify you via email or website.

10. Contact

Do you have questions about this privacy policy? Contact us at info@crmforce.nl or by post to our office address:

CRM Force B.V.
Boomheide 9
3776 NE Stroe
KVK: 42022380