CRM privacy notice
CRM is in development and holds no personal data, because nobody can create an account for it. This page covers what that means, what we hold if you have written to us about it, and what we commit to before it is available.
When CRM is available there will be a full notice at this address.
- In effect from
- Last reviewed
- Questions to
- privacy@muslimspot.com
What CRM collects today
Nothing. CRM is in development. Nobody can create an account for it, there is no CRM database, and no customer data has been put into it.
The full notice will be published before the first account can be created. Until then this page states what is true, which is what follows.
What we hold if you have written to us
There are two ways we might hold data connected to CRM.
If you emailed us
We have your email address and what you wrote, in a mailbox on our own mail server in Lauterbourg, France. We keep correspondence so that a conversation can be continued. The basis for holding it is our legitimate interest in answering the people who write to us. Ask us to delete the thread and we will.
If you visited this website
The web server records the request: an IP address, a timestamp, the page and your browser’s user agent. That is used for security. This website sets no cookies and runs no analytics.
What we commit to before it is available
- The full notice will be published and linked from the product page before the first account can be created.
- Every processor that can see customer data will be named, in a table like the one below, before it sees any.
- Customer data will be held on our own server in Lauterbourg, France, unless the notice says otherwise in advance.
- A customer platform holds personal data about people who have no relationship with MuslimSpot: a business's own customers and contacts. The notice will state that the business is the controller of those records and MuslimSpot is the processor, and what we do with them on that business's instructions.
- We will not use a customer's data to train anything, ours or anybody else's. A change to that position would be made by asking each customer, with a default of no.
The processors we use, company-wide
None of these touch CRM, because there is no CRM data. The full list is here so that it can be read now.
| Who | What they do for us | What they can see | Where |
|---|---|---|---|
| Contabo GmbH | Owns the data centre and the physical machine our server runs on. They have physical custody of the disks. They are not given access to the application or the database. | Everything on the machine, in the sense that whoever holds the hardware could in principle reach it. Nothing is handed to them. | Lauterbourg, France (European Union) |
| Cloudflare, Inc. (R2 object storage) | Holds the nightly off-box backup, so that a failure of our machine is recoverable. The bucket is private and is not readable without our keys. | A copy of the database, uploaded files and screenshots, as they exist at the time of the nightly run. | Cloudflare's own network. The bucket is created with Cloudflare's automatic region selection, so we cannot state that every copy stays inside the EEA. Outside the EEA. |
| Twilio SendGrid (Twilio Inc.) | Sends application e-mail: the optional TimeTracer digest, and account mail such as a password reset. Mail you send to a muslimspot.com address does not go through them. That runs on our own mail server. | The recipient's e-mail address and the contents of the message sent to them. | United States and other locations in Twilio's network. Outside the EEA. |
| GitHub, Inc. (a Microsoft company) | Hosts the desktop application release files. When the desktop app checks for or downloads an update, it fetches the file from GitHub. | The IP address and user agent of the computer downloading an update, as any web server would. No account data and no screenshots. | United States and other locations in GitHub's network. Outside the EEA. |
What we do not use
- No analytics on this website.
- No advertising network, advertising pixel or conversion tracking.
- No third-party fonts. Both typefaces are served from our own server.
- No session recording, heatmaps or chat widget.
- No cookies, which is why there is no cookie banner.
- No selling or sharing of personal data.
Your rights, and who to ask
For what we do hold, which is your email to us and the server log line from your visit, you have the full set of rights the GDPR gives you: access, rectification, erasure, restriction, portability and objection. Write to privacy@muslimspot.com.
You can also complain to a supervisory authority. Our processing happens in France, so that is the Commission Nationale de l’Informatique et des Libertés (CNIL). You may use the authority where you live instead.
The company-wide policy covering this website is the MuslimSpot privacy policy. The notice for the product that is available is the TimeTracer privacy notice.
Questions about CRM itself go to crm@muslimspot.com.