Privacy Policy

1. Who is responsible for the information

Naiku ("Naiku," "we," "us," or "our") operates the Naiku website and platform. For information a business enters into its private CRM—including customer records and Facebook Lead Ads submissions—the business using Naiku normally decides why and how that information is used. Naiku processes that information to provide the service to that business. For information submitted directly to Naiku, such as a Naiku setup request, Naiku is responsible for the uses described below.

2. Information we collect

Information submitted directly

We may collect names, business names, work contact details, business type, team size, website, setup needs, account details, support requests, and billing or subscription status.

CRM and service information

Businesses may store leads, customer and job records, estimates, proposals, invoices, appointments, communications, photos, files, and related operational information in their isolated workspace. We also process security, audit, device, and usage information needed to operate and protect the service.

Facebook and Meta information

When an authorized business administrator connects Facebook, Naiku may receive and process:

• the connected business, Page, form, ad account, campaign, ad, and lead identifiers and names;
• Lead Ads submissions, including the contact details and answers a person chose to submit on the business's Facebook lead form;
• permission status, authorization tokens, and technical metadata needed to maintain the connection and securely route leads; and
• ad-performance information when the business separately enables reporting features that require it.

Naiku does not ask for or receive the connecting administrator's Facebook password.

3. How we use information

• provide, configure, secure, support, and improve Naiku;
• route Facebook Lead Ads submissions into the correct business's isolated CRM and prevent duplicate delivery;
• authenticate users, enforce permissions, maintain audit records, and investigate abuse or service failures;
• communicate about setup, support, billing authorization, service notices, and requested product information; and
• comply with law, enforce agreements, and protect Naiku, our customers, and other people.

We do not sell personal information. We do not use CRM customer or Facebook lead information for cross-context behavioral advertising.

4. How information is shared

We may make information available to the business that operates the connected CRM and its authorized users. We also use service providers for infrastructure, hosting, security, communications, support, and billing. They may process information only to provide those services to us or as the law permits. We may disclose information when required by law, to protect rights and safety, or as part of a business transaction subject to appropriate safeguards.

5. Isolation and security

Each customer business receives a separate service environment. Facebook authorization tokens and integration settings are kept in server-restricted records and are not returned to ordinary browser clients. We use access controls, signed routing, encrypted network connections, and audit measures designed to protect information. No security program can guarantee that every incident will be prevented.

6. Retention

We retain information for as long as reasonably needed to provide the service, follow the customer business's instructions, maintain security and audit records, resolve disputes, and meet legal obligations. A connected business can disconnect Facebook from CRM Settings; this removes stored Facebook authorization tokens from that CRM and stops new Lead Ads intake. Imported lead and CRM records remain until the business deletes them or requests their deletion, because they form part of the business's operational records.

7. Your choices and requests

If you submitted a lead form to one of our customer businesses, contact that business first because it controls the resulting customer record. You may also contact Naiku and we will help route a verified request. Business administrators can disconnect Facebook in Naiku CRM Settings and may also manage the app from their Meta Business Integrations settings.

Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of certain personal information. We may need to verify your identity and authority before acting. See our data deletion instructions or email hello@naiku.app.

8. Children

Naiku is a business service and is not directed to children. We do not knowingly offer accounts to children under 18.

9. Changes to this policy

We may update this policy as the service or legal requirements change. We will post the updated policy here and change the effective date. We will provide additional notice when required.