Privacy policy

Who we are

youcrm builds and runs AI systems inside companies: it connects a company's systems and data, builds workflows and an AI assistant on them, and keeps them running. youcrm is operated by Ilan Dazanashvili (דז'נשוילי אילן) · Ashdod, Israel.

We have two roles. For the systems we build and run for a client, the client owns the data and decides what it's used for, and youcrm processes it only on the client's behalf (under Israeli law, the client is the database owner and youcrm the holder). For this website and the booking page, youcrm decides, and this policy is the whole picture.

This website, and booking a call

youcrm.ai sets no cookies, uses no analytics or trackers, and loads nothing from other servers.

When you book a call on meet.youcrm.ai, we receive what you enter, such as your name, email, company and anything you write about the call. It's kept by us and by the calendar and video-call services we use to set up the call. We use it only to hold the call and follow up on it, and delete it on request.

What a client's system processes

Depending on what the client connects, its system processes:

• Documents that arrive by email, upload or WhatsApp: PDFs, scans and images.
• Messages on the channels the client connects, such as its WhatsApp number: text, images, documents and voice notes.
• Contact details and records from the client's CRM, accounting software and portals, synced in both directions.
• Call recordings and transcripts, where the client connects its phone system.
• The system's own log: every step it took, and who approved what.

We process only what the client's workflows need, and only to run them. We never sell, rent or pass the data on, never use it for advertising, and never use one client's data for another client.

WhatsApp

When a system is connected to a client's WhatsApp number, it receives and stores the messages exchanged on that number (text, images, documents and voice notes) and the contact's name and number, and shows them in the client's own system, next to that contact's record. Voice notes may be transcribed to text; transcription runs on our own server.

Replies are drafted for the client's team, and a message to the client's customers goes out only after a person approves it, or from a template the client approved in advance. The client is responsible for telling its customers that it uses a system to manage its conversations, especially where those conversations include sensitive information such as health details.

Facebook, Instagram and Messenger

When a client connects its Facebook Page or Instagram account, its system receives what people send to that Page or account: the answers they give in the client's lead forms, comments on the client's posts and ads, and messages in Messenger and Instagram Direct, together with the person's name and the ID Meta gives them for that Page. It shows them in the client's own system, as leads and conversations, next to that person's record.

Replies, both public replies to comments and private messages, are written or approved by the client's team and sent from the client's Page, within the window Meta allows. This data is used only to run the client's system: never for advertising, never sold, and never for any other client. The client can disconnect its Page at any time, in its Facebook settings or by asking us, and the system stops receiving data from it.

AI

The systems use models from leading AI providers, called through their APIs. A model receives only the document or message the task needs, and its answer comes back into the client's system.

We don't train models of our own on client data. Each AI capability can be switched off separately, and where a fixed rule is more accurate, we use the rule.

Where data is stored

Client systems run on dedicated servers we manage, in the EU, with some files stored in Israel. All traffic is encrypted. We work with a small number of established providers for hosting, network, messaging and AI, and the full list goes to clients on request.

How we keep data safe: the security page

Who can see it

At youcrm, administrative access to the servers is limited to the engineer who runs your system, and only for setup, maintenance and support. At the client, each person sees what their account allows. Each client has its own database, files and service account, and nothing of one client's is ever shown to another.

How long we keep it

For as long as the client works with us. When a client leaves, it gets a full export of its data and configuration in documented formats within 30 days, and we then delete it from our servers on request. Booking details are kept while we're in touch, and deleted on request.

Your rights

You can ask to see, correct, get a copy of or delete the information we hold about you. If you're a customer of one of our clients, your request goes to that company, which decides about its data, and we'll help it carry the request out.

Deleting data from Facebook, Instagram or Messenger: write to the address at the bottom of this page with the name of the business you contacted and the name on your profile. We delete it from that business's system within 30 days and confirm by email. If you connected a Page to youcrm, you can also remove its access yourself, under Business integrations in your Facebook settings.

Requests from authorities

If a government or law-enforcement authority asks us for information about a person, we check that the request is lawful, challenge it if it isn't, disclose only the minimum the law requires, and keep a record of each request, our answer and the legal reasoning behind it.

Changes to this policy

If we change this policy, we update the date at the top, and tell clients directly about any material change.