Privacy Policy

Last updated: September 5, 2026

CoreTex CRM ("Coretex Lead Dashboard", "we", "us", "our") operates the website coretexcrm.com and the Coretex Lead Dashboard application (together, the "Service"). This Privacy Policy explains what personal data we collect from you, how we use it, who we share it with, and the choices you have.

By purchasing, registering for, or using the Service, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

1. Who We Are

Business name: CoreTex CRM
Owner: Meraj Alam
Location: Lucknow, Uttar Pradesh, India
Support email: hello@coretexcrm.com
Website: coretexcrm.com

2. Information We Collect

2.1 Information you give us directly

• Account information: full name, email address, business name, and a password (stored as a one-way hash — we never see or store your plain-text password).
• Payment-related information: your name and email address at the time of checkout. We do not collect or store your card number, UPI ID, or bank account details — these are entered directly on our payment processor Razorpay's secure checkout page and never touch our servers.
• Support communication: anything you send us by email (e.g. hello@coretexcrm.com) or through in-app support.
• Business data you enter into the dashboard: leads, quotations, invoices, and payment reminders you create. This data is stored in your browser's local storage on your device and, where noted in-app, on our servers linked to your account, solely so the dashboard can function for you.

2.2 Information collected automatically

• Usage data: pages visited, buttons clicked, timestamps, browser type, device type, and referring URL — collected via standard server logs and, where enabled, analytics tools.
• Cookies and local storage: we use cookies for login sessions and browser local storage to save dashboard data on your device (see Section 7).

2.3 Information from third parties

• Payment confirmation: Razorpay shares payment status, a transaction ID, and payment signature with us to confirm your purchase. Razorpay's own privacy policy governs the payment data it processes directly.
• Advertising platforms: if you arrived at our site by clicking an ad, platforms such as Meta (Facebook/Instagram) or Google may share limited, aggregated conversion information with us (e.g. that an ad click led to a purchase) through tools such as the Meta Pixel or Google tag. See Section 8 below.

3. How We Use Your Information

• To create and manage your account and provide access to the dashboard.
• To process your one-time ₹499 payment and verify it was successful.
• To send you transactional emails: welcome email, login credentials, payment receipt, and — if you request it — password reset or refund confirmation.
• To power AI-assisted features (AI Follow-up Scripts, AI Business Advisor) — see Section 6.
• To respond to support requests.
• To detect, prevent, and address fraud, abuse, or technical issues.
• To measure and improve the effectiveness of our advertising (in aggregate, not by identifying you personally to advertisers beyond what's described in Section 8).

We do not sell your personal data to third parties.

4. Who We Share Data With

• Razorpay (payment processing) — receives your name, email, and payment amount to process the transaction.
• Hostinger (web hosting) — stores our application and database on its servers.
• Google (Gemini API) — when you use the AI Follow-up Scripts or AI Business Advisor tools, the relevant prompt text (e.g. lead details you provide, your business question) is sent to Google's Gemini API to generate a response. Google's own privacy policy governs how it processes this data.
• Advertising and analytics partners (e.g. Meta, Google), only in the limited, aggregated form described in Section 8, and only if such tools are active on our site.
• Law enforcement or regulators, only where required by applicable Indian law.

We do not share your lead or customer data (the data you enter about your own clients) with any third party except the infrastructure providers above, strictly to operate the Service.

5. Data Storage & Security

• Passwords are hashed using industry-standard bcrypt hashing — we cannot see or recover your plain-text password.
• Data in transit is protected using SSL/TLS (HTTPS) encryption.
• Access to production data is restricted to the site owner.
• No method of transmission or storage is 100% secure; while we take reasonable precautions, we cannot guarantee absolute security.

6. AI Features

The AI Follow-up Scripts and AI Business Advisor tools are powered by Google's Gemini API. Content you submit to these tools (such as a lead's business type or a business question) is sent to Google to generate a response and is subject to Google's applicable API data-handling terms. Please avoid entering sensitive personal information (of yourself or your leads) into these AI tools beyond what is necessary for the feature to work. AI-generated content is provided as a suggestion only and should be reviewed before use — see also our Terms & Conditions.

7. Cookies & Local Storage

We use:

• Essential cookies to keep you logged in to your dashboard session.
• Browser local storage to save your lead, quotation, invoice, and settings data directly on your device for a faster experience.
• Advertising cookies/pixels (e.g. Meta Pixel, Google Ads tag), if enabled, to measure ad performance and show you relevant ads. These are set by the respective third party once you interact with an ad or visit the site from one.

You can control or delete cookies through your browser settings. Disabling essential cookies may prevent the dashboard from working correctly.

8. Advertising Disclosure (Meta / Facebook & Google)

We may run ads on Meta technologies (Facebook, Instagram) and/or Google. Where active, these platforms' pixels or conversion tools may receive information such as: the fact that a page was visited, that a purchase was completed, and general device/browser information — used to measure ad performance and to show you more relevant ads. This is governed by Meta's and Google's own data policies in addition to this Privacy Policy. You can manage your ad preferences directly in your Facebook/Instagram or Google account settings.

This site is not part of the Facebook™ or Meta™ website, and is not endorsed by Meta in any way. FACEBOOK™, INSTAGRAM™ and WHATSAPP™ are trademarks of Meta Platforms, Inc.

9. Data Retention

We retain your account and payment records for as long as your account is active and as needed to comply with our legal and tax obligations. You may request deletion of your account and associated data at any time (Section 11), subject to records we are legally required to retain (e.g. payment/GST records).

10. Children's Privacy

The Service is intended for business owners aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact us and we will remove it.

11. Your Rights

You may contact us at hello@coretexcrm.com to:

• Request a copy of the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your account and personal data (subject to legal retention requirements).
• Withdraw consent for marketing communications.

We will respond to verified requests within a reasonable time, generally within 30 days.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Service after changes means you accept the updated policy.

13. Contact Us

Questions about this Privacy Policy? Email hello@coretexcrm.com.