Privacy Policy
Effective date: 18 October 2026
This Privacy Policy explains how Akshaykumar G Vyas (trading as BizXpeditor) ("we", "us") handles personal data in LiteCRM, our customer relationship management service available at litecrm.bizxpeditor.com (the "Service"). It covers the information we collect, how we use it, who we share it with, and the choices you have.
1. Who is responsible for your data
LiteCRM is used by businesses ("Customers") and the people they add to their account ("Users").
- Customer Data: the contacts, accounts, messages, follow-ups, appointments and other records a Customer's Users put into LiteCRM. The Customer decides what is collected and why, and is responsible for it (the "data fiduciary" or "controller"). We process Customer Data only on the Customer's behalf and instructions, to provide the Service.
- Account Data: information about Users themselves, such as name, email and login details, and data received when a User connects Google or Zoom. We are responsible for this data as described in this policy.
If you are a customer of a business that uses LiteCRM and want to access or correct your information, please contact that business first. We will help them respond.
2. Information we collect
- Account information: name, email address, mobile number, job title, the organization you belong to and your role. Passwords are stored only as a secure one-way hash; we can never see them.
- Customer Data you enter or import: contact and company details, notes, tags, follow-ups, appointments, message templates, WhatsApp messages you send through LiteCRM or log manually, and chat histories you choose to import from WhatsApp export files or spreadsheets.
- Google and Zoom data, only if you connect those accounts (see sections 3 and 4).
- Technical information: IP address, browser type, and date and time of requests, recorded in server logs for security and troubleshooting.
- Communications: messages you send to our support team.
We do not collect payment card details in LiteCRM.
3. Google user data
Connecting a Google account is optional. Each User connects their own account from Integrations in LiteCRM, through Google's own sign-in and consent screen.
What we access
| Permission (scope) | What LiteCRM does with it |
|---|---|
openid, email | Identify the Google account you connected and show its email address on your Integrations page. |
calendar.events | Create an event on your primary Google Calendar when you book an appointment in LiteCRM (with a Google Meet link if you choose one), and update or delete that same event when you reschedule or cancel it in LiteCRM. |
What we don't do
- We do not read, list, copy or change any other events in your calendar.
- We do not access your Gmail, Google Drive, Google Contacts or any other Google service.
How we store and protect it
We store the access keys (OAuth tokens) Google issues, encrypted at rest, together with your Google email address and the IDs and links of the events LiteCRM created. They are used only to perform the actions above when you ask for them.
Sharing
We do not share Google user data with anyone. The event details and Meet link LiteCRM creates are visible to you in LiteCRM and Google Calendar, and to the people you send the meeting link to.
Disconnecting and deletion
You can disconnect Google at any time from Integrations. When you do, we ask Google to revoke LiteCRM's access and delete the stored tokens immediately. You can also remove access from your Google Account at myaccount.google.com/permissions. Events already on your calendar stay there unless you delete them.
Limited Use
LiteCRM's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We use Google user data only to provide and improve the user-facing appointment features described above.
- We do not transfer it to others, except as needed to provide those features, to comply with law, or as part of a merger or acquisition with your prior consent.
- We do not use it for advertising, including retargeting or personalized ads.
- We do not sell it, or use it to determine creditworthiness or for lending.
- We do not use it to develop, improve or train generalized AI or machine-learning models.
- No human reads it unless you give us permission (for example, for a support request), it is needed for security purposes such as investigating abuse, or it is required by law.
4. Zoom data
Connecting Zoom is optional. If you connect it, we access your Zoom user profile (to show which account is connected) and create, update or delete Zoom meetings that you schedule through LiteCRM. We store the encrypted access keys and the meeting ID and join link. We do not access your recordings, chats, contacts or other meetings. You can disconnect Zoom at any time from Integrations; we then revoke access and delete the stored keys.
5. WhatsApp
LiteCRM does not connect to your WhatsApp account and cannot read your WhatsApp messages. When you send a message, LiteCRM saves it and opens WhatsApp (Web or app) with the text filled in, and you press send. Incoming messages appear in LiteCRM only if you log them or import a chat export file yourself. Your use of WhatsApp is governed by WhatsApp's own terms and privacy policy.
6. How we use information
- To provide, operate and maintain the Service, including your inbox, follow-ups, appointments, imports and exports.
- To create your account, authenticate you and keep your organization's data separate from others'.
- To send service emails, such as invitations, password resets, security notices and follow-up reminders.
- To provide support, and to fix problems and improve the Service.
- To detect and prevent fraud, abuse and security incidents, and to comply with law.
We process Account Data on the basis of your consent and to perform our contract with you or your organization, and Customer Data on the Customer's instructions. We do not sell personal data, and we do not use Customer Data or Google user data for advertising.
7. How we share information
- Service providers who help us run LiteCRM, such as cloud hosting, database and email-delivery providers. They may use the data only to provide their services to us, under confidentiality and security obligations.
- Google and Zoom, only when you connect them and ask LiteCRM to create or change a meeting.
- Within your organization, as described in section 8.
- Legal reasons: if required by law, court order or government request, or to protect the rights, safety and property of our users, the public or us.
- Business transfers: if we are involved in a merger, acquisition or sale of assets, subject to this policy and, for Google user data, your prior consent.
8. Privacy within your organization
- Contacts, accounts, follow-ups and appointments are shared with the other Users in your organization.
- WhatsApp conversations are private to the team member who had them. Other team members, including owners and admins, cannot see them in LiteCRM.
- Organization owners and admins can manage Users, reset passwords, and import and export contacts. Exports include only the exporting User's own conversations.
- Each organization's data is kept separate; Users of one organization cannot see another organization's data.
- Our administrators may access data only when needed to provide support you ask for, keep the Service secure, or comply with law.
9. Retention and deletion
We keep Customer Data for as long as the Customer's account is active. A Customer may export their data at any time, and may ask us to delete their organization. After closure or a deletion request, we delete or anonymize the data within 30 days, except where we must keep it longer by law. Copies in backups are overwritten in the normal backup cycle. Server logs are kept for a limited period for security purposes. Google and Zoom tokens are deleted as soon as you disconnect.
10. Security
We protect data with encryption in transit (HTTPS), encryption of third-party access keys at rest, hashed passwords, organization-level data separation, role-based access controls and regular backups. No system is perfectly secure, but we work to protect your information and will notify affected Customers and authorities of a personal data breach as required by law.
11. Your rights
Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you may:
- Ask for a summary of the personal data we hold about you and how it is used.
- Ask us to correct, complete or update your data. You can edit most of it yourself under My profile.
- Ask us to erase your data, or withdraw consent you have given. This may mean we can no longer provide the Service to you.
- Nominate another person to exercise these rights on your behalf.
- Raise a grievance with us, and, if unresolved, with the Data Protection Board of India.
To exercise these rights, contact us using the details below. Where we process data on behalf of a Customer, we may refer your request to that Customer.
12. Cookies
LiteCRM uses only essential cookies: one keeps you logged in, and one protects forms from cross-site request forgery. We do not use advertising or third-party tracking cookies.
13. Children
LiteCRM is a business tool and is not intended for anyone under 18. We do not knowingly collect personal data from children.
14. Where data is stored
Data may be stored and processed by our hosting providers in India or other countries. Where data leaves India, we take steps to keep it protected as described in this policy and as required by law.
15. Changes to this policy
We may update this policy from time to time. We will change the effective date above and, for significant changes, notify Users by email or in the Service before the changes take effect.
16. Contact and grievances
For questions, requests or complaints about privacy, contact:
Akshaykumar G Vyas (trading as BizXpeditor)
Grievance Officer: Akshaykumar G Vyas
Email: support@bizxpeditor.com
WhatsApp: +918866065365
Address: Ahmedabad, Gujarat, India
We aim to acknowledge requests within 72 hours and resolve them within 30 days.