Privacy Policy

Last updated: —

Template — review before publishing. This document is a starting point written to a common structure. Have it reviewed by a qualified attorney and fill in the bracketed details so it matches how your business actually handles data and the laws that apply to you.

Cosa CRM ("Cosa CRM", "we", "us") provides an all-in-one customer relationship management and marketing platform. This policy explains what information we collect through this website and our platform, why we collect it, and the choices you have.

1. Information we collect

Information you give us. Name, business name, email address, phone number, industry and anything else you type into a form, a demo request or a support conversation.
Customer data. If you become a customer, the contact records, messages, files and campaign data you and your team store in the platform. We process this on your behalf and under your instruction.
Technical information. IP address, browser and device type, pages viewed, referring URL and timestamps, collected automatically through server logs and analytics.
Cookies. Small files used to keep you signed in, remember preferences and measure how the site is used. See section 7.

2. How we use it

To respond to demo requests and provide the services you ask for.
To operate, secure, support and improve the platform.
To send service notices, and — where permitted — relevant marketing you can opt out of at any time.
To meet legal, tax and accounting obligations.

We do not sell your personal information.

3. Messaging consent

If you provide a phone number, you consent to be contacted about Cosa CRM by phone and SMS at that number, including by automated means. Consent is not a condition of purchase. Message and data rates may apply. Reply STOP to opt out of text messages or HELP for assistance.

4. Sharing

We share information with service providers who help us run the business — hosting, communications infrastructure, payment processing, analytics and support tooling — under contracts that limit their use of it. Our platform is built on GoHighLevel, which processes platform data as a subprocessor. We may also disclose information where required by law, or in connection with a merger, acquisition or sale of assets.

5. Retention

We keep personal information for as long as needed to provide the services and to meet our legal obligations, then delete or anonymise it. Customer data is retained for the life of your account and for [X days] afterwards, during which you can request an export.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete, port or restrict processing of your personal information, and to withdraw consent or object to direct marketing. To exercise any of these, contact us at [privacy@yourdomain.com]. We will respond within the timeframe required by applicable law.

7. Cookies

We use strictly necessary cookies to operate the site, and — where you allow it — analytics and advertising cookies to understand traffic and measure campaigns. You can block or delete cookies in your browser settings; some features may stop working if you do.

8. Security

We use industry-standard safeguards including encryption in transit, access controls and logging. No system is perfectly secure, and we cannot guarantee absolute security of information transmitted to us.

9. Children

Our services are not directed to anyone under 16, and we do not knowingly collect their personal information.

10. Changes

We may update this policy. Material changes will be posted here with a revised "last updated" date, and where required we will notify you directly.

11. Contact

Questions about this policy or your data:
[Legal entity name]
[Mailing address]
[privacy@yourdomain.com]