Privacy Policy

Who this policy is for

Crmqoo is a lead marketplace. Two very different groups of people appear in this policy, and the rules are not the same for each, so we have separated them rather than writing one set of statements that is only half true for either.

Agents are our customers. They subscribe, buy credits, and use the app. If that is you, read the two agent sections below.

Leads are members of the public who filled in one of our advertising forms asking to be contacted about Takaful or insurance. They are not our customers and never pay us. If your details reached us that way, read the lead sections below. The sections after those apply to everyone.

Agents: what we collect about you

When you create an agent account we collect your display name, email address, phone number and password, and which industry you work in. We use your phone number to contact you about your own account; it is never shown to other agents and never passed to a lead. When you accept our Terms of Service at signup we record that you accepted, when, which version you accepted, and whether you signed up on the web or in the app.

When you subscribe or buy credits, payment is handled by our payment provider (Razorpay on the web, Apple's In-App Purchase system on iOS). We receive confirmation of the transaction and your subscription status. We never see or store your full card details.

We also hold what you do in the app: which leads you have unlocked, the CRM notes, statuses, reminders and message templates you create, and the quotations you generate.

Agents: how we use it, and what we do not do

We use your account information to give you access to the app, CRM and quotation engine, to process your subscription and credit payments, to work out your unlock allowance, and to contact you about your account.

We do not sell agent information, and we do not share it with other agents, advertisers or data brokers. The third parties who receive any of it are our payment providers, strictly to process your payments, the infrastructure providers who host the service, and the AI provider described in the next section, which only ever receives what you choose to send it.

Your display name appears on the quotation PDFs you generate, because those are documents you give to your own clients.

AI features, and what leaves our systems

Two features in the app are optional, are switched on by you the first time you use them, and send information to OpenAI, an AI provider in the United States, to do their work. Nothing is sent unless you use the feature.

Voice updates. After a call you can record up to sixty seconds describing what happened, instead of typing it. That recording is sent for transcription, and the resulting text is sent again so the app can work out the status, the callback date and a short note. Because you are describing a conversation with a client, the recording and the transcript can contain that client's name and whatever you say about them, including what they are looking for and what they can afford. We do not store the recording. It is deleted once it is text, and only the note you approve is saved to the lead.

Writing your WhatsApp messages. You can have the app draft message templates in your own style, based on how you say you write and on example messages you paste in. Phone numbers, email addresses and IC numbers are removed on your phone before anything is sent, and the examples are about your writing rather than about any particular client.

In both cases you see the result and confirm it before anything is saved, and nothing is ever sent to a client automatically. Under OpenAI's API terms, information sent this way is not used to train their models.

Please use your judgement about what you record. If a client has asked you to keep something private, do not say it into a voice note. Typing a note by hand sends nothing anywhere, and the whole app works normally if you never use either feature.

Leads: what we hold about you

If you filled in one of our advertising forms, we hold what you entered: your name, phone number, email address, date of birth, state, monthly income band, occupation, smoking status, and the type of protection you said you were interested in. We also hold a record of which advertisement brought you to the form, and of the consent you gave when you submitted it.

We did not obtain your details from anywhere else. We do not buy contact lists.

Leads: health information

Your smoking status is information about your health, which Malaysia's Personal Data Protection Act 2010 treats as sensitive personal data and protects more strictly than ordinary information.

We ask for it because Takaful and insurance contribution rates depend on it, and an agent cannot prepare a meaningful quote without it. We collect it, and pass it to the agent matched to you, only with your explicit consent, which is the consent box on the form you filled in. You can withdraw that consent at any time.

Leads: how agents receive your details, and how we are paid

This is the part worth reading carefully. Crmqoo is a lead marketplace. Licensed agents subscribe to the service and buy credits, and they spend those credits to unlock a lead's contact details. When your details are unlocked, we are paid. That is how the service is funded, and it is why the form you filled in was free to you.

Your details are released to one agent only, so that a single agent contacts you rather than several calling at once. Once an agent has unlocked your details, no other agent can.

We do not make your information available to marketers, data brokers, advertisers, or anyone other than the one agent matched to your request.

Agents work for their own Takaful or insurance companies. They are not our employees or representatives, and they are responsible for holding whatever licence or registration their work requires. Any policy or certificate you go on to buy is arranged between you, that agent and their company.

Leads: what agents may and may not do with your details

Every agent accepts terms that allow them to use your details only to contact you and prepare and discuss a quote. They may not sell your details, pass them to another agent, upload them to another service of their own choosing, or add them to any mailing list unrelated to that quote. Those obligations continue even if they stop subscribing. The one exception is the AI features built into Crmqoo itself, described above, which an agent may use and which we hold responsible for the handling of anything sent through them.

If your details are lost or exposed at an agent's end, they are required to tell us within 24 hours. We can suspend or remove an agent who misuses lead information.

Stopping contact, and deleting your information

If you no longer want to be contacted, or want your information deleted, email [email protected] and we will remove you from our pool so your details are no longer available to any agent. Where an agent has already received them, we will pass your request on to that agent, who is required to act on it.

We handle these requests manually, so please give us the phone number you submitted, which is how your record is found.

Note that if you later fill in one of our advertising forms again, that is a fresh submission with fresh consent, and your details will re-enter the pool. Withdrawing does not block you from choosing to come back.

Where your information is stored

Our database runs on servers located in Singapore. Leads submitted through our advertising forms pass through Google services, including Google Sheets and the advertising platforms the forms run on, before reaching our systems.

Where an agent uses the AI features described above, the information those features send is processed in the United States by OpenAI, and is not retained by them for training.

This means information is processed outside Malaysia. Singapore has its own data protection law, and for leads the consent given on the form covers the transfer to our systems. If you would prefer that nothing about you is put through the AI features, tell the agent handling your enquiry, or email us and we will pass it on.

How long we keep it

Agent account information is kept for as long as the account is open, and afterwards only where we are required to keep records, for example billing records for tax purposes.

Lead information is kept for up to 24 months from the date the form was submitted, after which it is deleted, unless we are required to keep it longer by law. If you ask us to delete it sooner, we will.

Cookies

On this site we use a single authentication cookie to keep agents signed in. We do not use advertising or analytics cookies here, and we do not track visitors across other websites.

Our advertising landing pages are separate sites and run Google advertising measurement. Each carries its own privacy policy explaining that.

Your rights under the PDPA

Whether you are an agent or a lead, under Malaysia's Personal Data Protection Act 2010 you have the right to ask what personal information we hold about you, to have anything inaccurate corrected, to require us to stop using it for direct marketing, and to withdraw consent where our use of it rests on consent.

Email [email protected] to exercise any of these. We will respond within 21 days.

Who we are, and how to contact us

Crmqoo is operated by MENTIX SDN. BHD. (Registration No. 1664601-P), which is the data controller responsible for the personal information described in this policy.

For any privacy question, or to exercise any of the rights above, contact us at [email protected].

Changes to this policy

We may update this policy from time to time. The current version is always the one on this page, and the date it was last changed is shown at the top.