Privacy Policy

Who this policy is for

Crmqoo is a lead marketplace. Two very different groups of people appear in this policy, and the rules are not the same for each, so we have separated them rather than writing one set of statements that is only half true for either.

Agents are our customers. They subscribe, buy credits, and use the app. If that is you, read the two agent sections below.

Leads are members of the public who filled in one of our advertising forms asking to be contacted about Takaful or insurance. They are not our customers and never pay us. If your details reached us that way, read the lead sections below. The sections after those apply to everyone.

Agents: what we collect about you

When you create an agent account we collect your display name, email address and password, and which industry you work in. When you accept our Terms of Service at signup we record that you accepted, when, which version you accepted, and whether you signed up on the web or in the app.

When you subscribe or buy credits, payment is handled by our payment provider (Razorpay on the web, Apple's In-App Purchase system on iOS). We receive confirmation of the transaction and your subscription status. We never see or store your full card details.

We also hold what you do in the app: which leads you have unlocked, the CRM notes, statuses, reminders and message templates you create, and the quotations you generate.

Agents: how we use it, and what we do not do

We use your account information to give you access to the app, CRM and quotation engine, to process your subscription and credit payments, to work out your unlock allowance, and to contact you about your account.

We do not sell agent information, and we do not share it with other agents, advertisers or data brokers. The only third parties who receive it are our payment providers, strictly to process your payments, and the infrastructure providers who host the service.

Your display name appears on the quotation PDFs you generate, because those are documents you give to your own clients.

Leads: what we hold about you

If you filled in one of our advertising forms, we hold what you entered: your name, phone number, email address, date of birth, state, monthly income band, occupation, smoking status, and the type of protection you said you were interested in. We also hold a record of which advertisement brought you to the form, and of the consent you gave when you submitted it.

We did not obtain your details from anywhere else. We do not buy contact lists.

Leads: health information

Your smoking status is information about your health, which Malaysia's Personal Data Protection Act 2010 treats as sensitive personal data and protects more strictly than ordinary information.

We ask for it because Takaful and insurance contribution rates depend on it, and an agent cannot prepare a meaningful quote without it. We collect it, and pass it to the agent matched to you, only with your explicit consent, which is the consent box on the form you filled in. You can withdraw that consent at any time.

Leads: how agents receive your details, and how we are paid

This is the part worth reading carefully. Crmqoo is a lead marketplace. Licensed agents subscribe to the service and buy credits, and they spend those credits to unlock a lead's contact details. When your details are unlocked, we are paid. That is how the service is funded, and it is why the form you filled in was free to you.

Your details are released to one agent only, so that a single agent contacts you rather than several calling at once. Once an agent has unlocked your details, no other agent can.

We do not make your information available to marketers, data brokers, advertisers, or anyone other than the one agent matched to your request.

Agents work for their own Takaful or insurance companies. They are not our employees or representatives, and they are responsible for holding whatever licence or registration their work requires. Any policy or certificate you go on to buy is arranged between you, that agent and their company.

Leads: what agents may and may not do with your details

Every agent accepts terms that allow them to use your details only to contact you and prepare and discuss a quote. They may not sell your details, pass them to another agent, upload them to another service, or add them to any mailing list unrelated to that quote. Those obligations continue even if they stop subscribing.

If your details are lost or exposed at an agent's end, they are required to tell us within 24 hours. We can suspend or remove an agent who misuses lead information.

Stopping contact, and deleting your information

If you no longer want to be contacted, or want your information deleted, email [email protected] and we will remove you from our pool so your details are no longer available to any agent. Where an agent has already received them, we will pass your request on to that agent, who is required to act on it.

We handle these requests manually, so please give us the phone number you submitted, which is how your record is found.

Note that if you later fill in one of our advertising forms again, that is a fresh submission with fresh consent, and your details will re-enter the pool. Withdrawing does not block you from choosing to come back.

Where your information is stored

Our database runs on servers located in Singapore. Leads submitted through our advertising forms pass through Google services, including Google Sheets and the advertising platforms the forms run on, before reaching our systems.

This means information is processed outside Malaysia. Singapore has its own data protection law, and for leads the consent given on the form covers the transfer.

How long we keep it

Agent account information is kept for as long as the account is open, and afterwards only where we are required to keep records, for example billing records for tax purposes.

Lead information is kept for up to 24 months from the date the form was submitted, after which it is deleted, unless we are required to keep it longer by law. If you ask us to delete it sooner, we will.

Cookies

On this site we use a single authentication cookie to keep agents signed in. We do not use advertising or analytics cookies here, and we do not track visitors across other websites.

Our advertising landing pages are separate sites and run Google advertising measurement. Each carries its own privacy policy explaining that.

Your rights under the PDPA

Whether you are an agent or a lead, under Malaysia's Personal Data Protection Act 2010 you have the right to ask what personal information we hold about you, to have anything inaccurate corrected, to require us to stop using it for direct marketing, and to withdraw consent where our use of it rests on consent.

Email [email protected] to exercise any of these. We will respond within 21 days.

Who we are, and how to contact us

Crmqoo is operated by MENTIX SDN. BHD. (Registration No. 1664601-P), which is the data controller responsible for the personal information described in this policy.

For any privacy question, or to exercise any of the rights above, contact us at [email protected].

Changes to this policy

We may update this policy from time to time. The current version is always the one on this page, and the date it was last changed is shown at the top.