OOykey CRMLog in

Privacy Policy

Last updated: 24 October 2026

Oykey CRM ("we", "us") is a lead management CRM operated by Tech Alphonic at oykey.in. Businesses ("customers") use it to collect, organise and follow up on sales enquiries ("leads"). This policy explains what data we process and how we protect it.

1. Data we collect

  • Account data: name, email address, phone number and password (stored only as a secure hash) of users our customers invite to the CRM.
  • Lead data: details that people submit to our customers through Facebook / Instagram Lead Ads, website forms, spreadsheets or manual entry, such as name, phone number, email, city and answers to form questions.
  • Activity data: call outcomes, notes, follow-ups and stage changes recorded by our customers' users.
  • Facebook data: when a customer connects Facebook, we receive their Facebook user ID and name, the list of Pages they manage, Page access tokens, lead form details and the leads submitted to those forms.

2. How we use Facebook data

We use the permissions granted through Facebook Login (such as leads_retrieval, pages_show_list, pages_read_engagement, pages_manage_metadata and pages_manage_ads) only to show the customer their Pages and lead forms, subscribe their Pages to new-lead notifications and import those leads into the customer's own CRM account. We do not use Facebook data for advertising, do not sell it, and do not share it with anyone other than the customer who connected it.

3. How we use data in general

  • To provide the CRM: storing leads, assigning them to team members, reminders, reports and exports.
  • To keep accounts secure and prevent misuse.
  • To provide support when a customer asks for help.

We do not sell personal data and we do not use lead data for our own marketing.

4. Who controls lead data

Each customer controls the leads in its own account and decides how to use them. We process lead data only on the customer's instructions. Data of one customer is kept separate from every other customer.

5. Storage and security

Data is stored on servers of our hosting provider. Connections use HTTPS, passwords are hashed and Facebook access tokens are encrypted (AES-256) before they are stored. Access inside a customer account is limited by user roles.

6. Retention

We keep data while the customer's account is active. When a customer disconnects Facebook, the stored Facebook tokens are deleted immediately. When an account is closed, or on a valid deletion request, the related data is deleted within 30 days, except where the law requires us to keep it longer.

7. Your rights

You can ask to access, correct or delete your personal data. If you submitted your details to one of our customers, you can contact that business directly, or write to us and we will forward your request. See our Data Deletion page for steps.

8. Changes

We may update this policy. The latest version is always on this page with the date it was last updated.

9. Contact

Questions about privacy: support@oykey.in