Last updated: September 2026
This policy explains what information the Multim CRM system — including its Android mobile app — collects, why, and how it's protected. Multim CRM is an internal business tool used by Multim Group employees and, for certain features, by our customers via links we send them (such as delivery confirmations). It is not a public consumer app.
1. Who this applies to
This policy covers:
- Employees and authorized users who log into the Multim CRM web panel or the Multim CRM Android app to do their jobs (sales, logistics, R&D, management, etc.).
- Customers and partners who interact with specific public-facing forms we send them (for example, a delivery confirmation link, or a discount approval email) — these do not require creating an account.
2. Information we collect
Account & login information
- Name, work email address, and phone number (for employees).
- Password (stored encrypted — we never see or store it in plain text).
- Two-factor authentication status (we store whether it's enabled, not the underlying authentication codes themselves).
Mobile app specific
- Push notification token — a device identifier issued by Google (Firebase) so we can deliver notifications to your phone. We do not use this to track your location or activity outside the app.
- Fingerprint / Face unlock — handled entirely by your device's own operating system. Multim CRM never receives, stores, or has access to your biometric data itself — we only receive a yes/no confirmation from your device that you unlocked it.
- Camera access — used only when you actively choose to take a photo within the app (for example, delivery evidence or a work-progress photo). We do not access your camera at any other time.
- Device information — a device name/model and app version, used only for support and to keep your notification settings working correctly.
Business data (used by employees while doing their jobs)
Depending on your role, the CRM stores information needed to run the business, such as: customer and lead contact details, sales opportunities and quotations, delivery and logistics records, uploaded documents and photos (for example, delivery evidence or technical drawings), and internal notes, approvals and activity history.
| Data | Why we collect it |
|---|
| Login credentials | To verify who you are and protect access to business data |
| Push token | To send you real-time alerts (approvals, assignments, reminders) |
| Photos you upload | Delivery/work evidence, technical records — part of the business record you're creating |
| Customer & sales data | The core purpose of the CRM — managing our business relationships |
3. What we do NOT do
- We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes.
- We do not track your location in the background — the app has no location-tracking feature.
- We do not access your photos, contacts, or files beyond what you explicitly upload within the app.
- We do not show ads or use third-party analytics/advertising SDKs in the mobile app.
4. How we protect your information
- All traffic between the app and our servers is encrypted (HTTPS only — the app refuses to connect any other way).
- Your login session on the mobile app is stored in your device's secure, encrypted storage (Android Keystore), not as plain text.
- Access to business data within the CRM is role-based — employees only see what's relevant to their job.
- Passwords are hashed using industry-standard encryption; we cannot read them even internally.
5. Third-party services we use
To operate the app, we rely on a small number of trusted service providers, each only for its specific purpose:
- Google Firebase Cloud Messaging — delivers push notifications to the app. Google's own privacy policy applies to how they handle the delivery mechanism itself.
- Our own servers (multim.org) — where all business and account data is actually stored.
6. Data retention
We retain account and business data for as long as needed to operate the business and meet our legal/record-keeping obligations. When an employee leaves the company, their account access is deactivated; associated business records (e.g. deals they worked on) are retained as part of our business history, as is standard practice.
7. Your rights
If you'd like to know what information we hold about you, request a correction, or ask a question about how your data is handled, contact us using the details below.
8. Changes to this policy
If this policy changes in a meaningful way, we'll update the "last updated" date at the top of this page.
9. Contact us
