HDM CRM Privacy Notice

1. Who handles your data

High Demand Media provides HDM CRM. We manage account, security and service information to operate the product. Each customer organization controls the contacts, companies, tasks, tickets, notes and other business records it places in its workspace. We process that customer data to deliver its contracted services and according to its instructions. Contact info@highdemandmedia.com.

2. Information processed

The CRM processes invited users’ names, email addresses, profile preferences, organization details, permissions, business records, attachments, activity history, integration credentials and linked communications. We record the version, time, language, user and organization when terms are accepted. Permissions determine record access within an organization. Support access must be limited to what is authorized and necessary.

3. Purposes and boundaries

We use customer data only to operate, secure, support and deliver the services that customer has contracted. We do not sell customer CRM data, use it for our own advertising campaigns or make it available for advertising based on connected Google data. Organizations are responsible for their own lawful collection, notices and instructions. A customer’s website form must provide that customer’s privacy information.

4. Google integrations

Connecting Gmail or Google Calendar is optional and per user. Gmail access reads messages matched to accessible CRM contacts, including message text and metadata; initial import covers up to the last 90 days. The CRM can send, reply to and forward emails when you instruct it. Mail attachments are not imported by this sync. Mailbox visibility is restricted to its connected user; internal comments can be visible to colleagues with access to the associated record. Calendar access reads selected calendar events and synchronizes linked CRM appointments and meeting notes in both directions. Tokens and cached message bodies are encrypted by the application. Disconnecting removes the local connection and its cached integration data, not the original emails or events in Google. Separate CRM records or internal comments may remain. You may also revoke access in your Google Account. Use and transfer of Google data follow the Google API Services User Data Policy, including Limited Use requirements. Google data is not used for ad targeting, retargeting or general AI model training.

5. Providers and processing locations

The service uses Render for application infrastructure and AWS for file storage and email delivery. Google provides the optional integrations you connect. Authorized infrastructure providers process data to deliver these functions. Hosting and processing can involve the United States and other locations supported by providers; no exclusive country or region is guaranteed in this notice.

Render

Application hosting and background processing for CRM requests and scheduled jobs.

Amazon Web Services (AWS)

Object storage for CRM files and email delivery through the configured AWS services.

Google — optional connection

Gmail and Google Calendar APIs when a user authorizes a connection. Google also provides the user’s underlying account under its own terms.

Website-specific providers

Hostinger hosts the marketing site. FormSubmit delivers quote-form email notifications. Optional Google and Meta tags concern website tracking and are not part of the authenticated CRM. They are not authorized to receive connected Gmail data for advertising.

Changes and questions

Contact info@highdemandmedia.com for questions about processing locations or providers. This list describes the reviewed architecture, not a guarantee that all processing occurs in a single country. Material provider changes require review and customer notice as described in the agreement.

6. Retention and service closure

During service, data remains available according to permissions and the customer’s instructions. When the organization owner or HDM CRM owner starts closure under the service agreement, the organization has 30 days of read-only access for consultation and export. New records and integration synchronization stop. At the end of those 30 days, access and the option to cancel closure end permanently. Active workspace data is scheduled for deletion; HDM will not recover or restore the closed organization’s data. Any residual backup copies are not available for customer recovery. Storage cleanup may retry after provider failures. Backup copies are subject to the actual provider backup lifecycle and must not be restored to active use without reapplying deletion requests. Limited records may be retained where law requires or for necessary legal claims.

7. Your choices and requests

You can update profile preferences, disconnect integrations and ask your organization administrator about your workspace data. Contact the organization that collected your information for access, correction, export or deletion requests. HDM assists that organization under the applicable agreement and law. For your HDM account information or a privacy complaint, contact info@highdemandmedia.com. We may proportionately verify your identity; available rights depend on applicable law.

8. Security and updates

The service uses authentication, organization boundaries, permissions and safeguards appropriate to its functions. No system is entirely risk-free. Do not upload regulated health, payment-card or other specially restricted data unless a separate written agreement expressly supports it. Material changes receive an updated version and notice where required. This notice does not authorize unrelated marketing or replace Google’s consent screen.