Last updated 31 October 2026
Witnes CRM is sales, marketing and service software run by Witness Technologies OPC Private Limited ("we", "us"), 101 FF Hardik Shopping Centre, Opp Narsinhji Pole, M G Road, Vadodara, Gujarat 390001, India. This policy explains what we do with personal data on crm.witnes.in and in the Witnes CRM web and mobile apps. It follows the Information Technology Act, 2000 and the SPDI Rules, 2011, and the Digital Personal Data Protection Act, 2023 and its Rules as they come into force.
Who is responsible for what
- Your company decides which contacts, leads, tickets and other records it keeps in Witnes CRM and why. For that data it is the data fiduciary (the "controller"), and it is responsible for having the right to hold it and to contact those people.
- We are your company's data processor for that data. We process it only on your company's instructions, to run the service. We do not sell it, use it to market to anyone, or use it to train AI models.
- For the details of the people who sign in, enquire or visit crm.witnes.in, we are the data fiduciary and this policy is our notice to you.
If you are a contact in someone's Witnes CRM and want to see, correct or delete your data, or stop their emails, ask that company; every campaign email carries an unsubscribe link, and we remove unsubscribed, bounced and complained addresses from future sends automatically.
What we collect about you
- Your account: name, email, phone number, a hashed password and the company you belong to.
- Details you send through our contact form or by email.
- Technical data recorded for security and reliability, such as IP address, browser, device and the pages and actions requested.
- On the mobile app, a device token for notifications. Camera, photos, contacts or location are used only if a feature you open asks for them.
- Cookies and browser storage needed to keep you signed in and remember your settings. We do not use advertising cookies.
What your company keeps in Witnes CRM
Records your team creates or imports: contacts and companies, leads and deals, calls, emails and notes logged on them, quotes and invoices, campaign and event data (including email opens and clicks), support tickets and chat messages. Your company is responsible for what it puts in, including any sensitive data, and for telling its contacts how it uses their data.
Who else sees it
- Within your company, people see what their role allows: admin, sales manager, sales representative, marketing, support agent or accountant.
- Service providers that run Witnes CRM for us, who may use the data only for that: Microsoft Azure for hosting and storage in India (Central India), and Amazon Web Services for sending and receiving email and notifications. If your company turns on an AI feature, the text it sends is processed by Kimi K3, an AI model made by Moonshot AI and run by Amazon Web Services on Amazon Bedrock in India, to give the answer, and is not used to train models.
- Courts, police or regulators where the law requires it, and a buyer if our business is ever sold, who must keep to this policy.
We do not sell personal data.
Where it is kept and how it is protected
Each company's data is kept in a database of its own, served over HTTPS and backed up every day. The service is hosted on Microsoft Azure in Central India. No system is perfectly secure. If a breach affects your data we will tell your company and, where the law requires, the Data Protection Board and the people affected.
How long we keep it
We keep your company's data while its account is open. You can export contacts, companies and leads at any time, and ask us to delete your data when you leave; copies in backups are removed as the backups expire, and we keep only what the law requires us to keep. Account and contact-form details are kept while they are needed and for the period the law requires.
Your rights
You can ask to see the personal data held about you, to have it corrected or completed, to have it erased where the law allows, to withdraw consent, to nominate someone to act for you if you die or are unable to, and to have a grievance heard. For data we hold as fiduciary, write to us and we will reply within the time the law gives. For data in a company's Witnes CRM, ask that company; we will help it respond.
Children
Witnes CRM is for businesses. We do not knowingly collect data from anyone under 18 and do not track or advertise to children.
Changes
If we change this policy we will change the date above and, for a material change, tell account administrators by email.
Grievance officer
Grievance Officer, Witness Technologies OPC Private Limited, 101 FF Hardik Shopping Centre, Opp Narsinhji Pole, M G Road, Vadodara, Gujarat 390001, India.
Email: info@witnesstechnologies.in
Phone: +91 92840 44638