Privacy Policy

1. Introduction & Scope

OctopusCRM Solutions Ltd ("OctopusCRM", "we", "our", or "us") is committed to protecting the privacy and cryptographic security of our trade workers, agency partners, and client end-users. This Privacy Policy details how we process personal data across our cloud software, mobile invoicing application, touchscreen e-signature engine, and white-label agency tenant portals.

2. Information We Collect

• Account & Business Credentials: Name, trading address, email address, mobile phone number, VAT numbers, and corporate branding logos.
• On-Site E-Signature Evidence Logs: Touchscreen signature vector strokes, client name, timestamp, device telemetry, and GPS location coordinates captured during contract sign-off.
• Financial & Payment Information: Payment card tokens processed via PCI-DSS compliant Stripe card terminals, transaction histories, and customer invoice logs.
• White-Label Tenant Metadata: CNAME domain mappings, agency sub-tenant user rosters, and custom e-signature template configurations.

3. How We Use Your Data

We process your personal data strictly for operational performance, including job sheet dispatching, generating legal PDF audit trails for e-signatures, processing point-of-sale card payments, automating payment reminder chasers via SMS/email, and maintaining uptime SLA for white-label reseller agency portals.

4. Security & Sub-Processor Isolation

All data in transit is encrypted using 256-Bit TLS 1.3 SSL, and stored data is encrypted at rest using AES-256. White-label agency tenants benefit from logically isolated sub-tenant database boundaries. We never sell or monetize personal or business data.