clizora-legal

Privacy Policy — Clizora

Last updated: May 29, 2026

1. Introduction

This Privacy Policy describes how Clizora (“we”, “the app”) collects, uses and protects user information (“you”, “the user”) when you use the Clizora mobile application (“the Service”).

By using Clizora you accept this Policy. If you do not agree, please do not use the Service.

2. Information we collect

2.1 Your account data

Your email and name (for Firebase authentication).
Your profile photo (optional, if you upload one).

2.2 CRM data you enter

Information about your contacts/leads: names, phone numbers, emails, notes, monetary value, source, status.
Reminders, calendar events, automations, templates, files in the “Office” module.
Messages you send or receive within the Service.

2.3 Data from integrations you voluntarily connect

Google / Gmail (if you connect it): we request gmail.send (to send emails to your leads from your account) and gmail.readonly (to display the inbox associated with each lead). We store your OAuth token securely to maintain the connection. We do not sell or share your emails.
WhatsApp Business / Meta (if you connect it): we store your access token and the Phone Number ID of your WhatsApp Business account.
Telegram (if you connect it): we store your bot token.

2.4 Usage-generated data

Messages with the AI assistant (to process the response via Google Gemini).
Push notification tokens (Firebase Cloud Messaging) to send you alerts.
Usage metrics (how many times you used each feature) to enforce your plan limits.

3. How we use your information

We use the data only to:

Let you manage your contacts/leads (CRM).
Send and receive emails on your behalf via Gmail if you connected it.
Send and receive messages on your behalf via WhatsApp/Telegram if connected.
Process your messages with the AI assistant (via Google Gemini).
Send you push notifications related to your activity.
Enforce your plan limits (Free / Plus / Pro).
Process subscription payments through Google Play (via RevenueCat).

We do not use your data for our own advertising and we do not sell it to third parties.

Your information is shared only with the following services, all under privacy agreements:

Third party	Purpose	Data shared
Google Firebase	Backend (Auth, database, Cloud Functions, FCM)	Your account and CRM data (encrypted in transit and at rest)
Google Gemini API	Process your messages with the AI assistant	Message text and recent chat context
Google Gmail API	Send and read emails on your behalf (if connected)	Only with your explicit OAuth authorization
Meta / WhatsApp Cloud API	Send WhatsApp messages (if connected)	Only the messages/templates you send
Telegram Bot API	Send/receive messages (if connected)	Only the messages you send
RevenueCat	Process subscription payments	Your user ID and subscription status
Anthropic	Internal message classification (no sensitive content)	Anonymous message metadata

We do not share your data with anyone else. We do not sell it. We do not give it to advertisers.

5. How we protect your information

Per-user isolation: Firestore rules guarantee that only you can read and write your own data.
Encryption: TLS in transit; encryption at rest by Firebase.
OAuth tokens: stored as server secrets, never embedded in the app.
Server-side verification of paid plan, payment webhooks, and WhatsApp webhooks (HMAC signature).

6. Your rights

You have the right to:

Access all data we hold about you (from the “Export data” module in the app).
Modify your data at any time from the app.
Delete your account and all your data — email us at [your contact email].
Revoke access to Gmail/WhatsApp/Telegram at any time, from the “Profile” section or from the third party’s account.
Port your data to another service (export CSV/PDF from the app if you have the Pro plan).

7. Data retention

We keep your data while your account is active. If you request deletion, we delete your data within 30 days (final backup copies deleted within 90 days).

8. Children under 13

Clizora is not directed to children under 13 and we do not knowingly collect data from minors. If you discover a minor used the app, contact us to delete the data.

9. Changes to this Policy

We may update this Policy. When we do, we will notify you within the app or by email. The “Last updated” date above reflects the current version.

10. Contact

For privacy questions or data deletion requests: Email: clizoracrm@gmail.com

This policy is designed to comply with Google OAuth API Services User Data Policy guidelines, GDPR (EU) and CCPA (California).