Effective date: October 10, 2026
This document is a supplement to the general Kiges Privacy Policy and regulates data processing issues specific to the Kiges CRM service — a customer relationship management platform for managing clients, deals, tasks, and sales processes, located at https://crm.kiges.cc.
1. General Provisions
1.1. This document supplements the general Kiges Privacy Policy and applies in conjunction with it. In case of discrepancies between the documents regarding Kiges CRM, this document prevails.
1.2. Use of the Kiges CRM service implies the User's consent to the terms of this document and the general Kiges Privacy Policy.
1.3. Terms used in this document are applied in the meanings defined in the general Kiges Privacy Policy and the Public Offer.
2. Data Processed within Kiges CRM
2.1. To ensure the functionality of the Kiges CRM service, the following categories of data are processed:
2.1.1. Account data: email address, password (hashed), User's name, notification settings.
2.1.2. Workspace data: workspace name, organization details, CRM settings, sales pipeline configurations, custom fields, automation settings, interface preferences.
2.1.3. CRM records data: data about the User's clients and counterparties entered into the Service — names, contact details (phone numbers, email addresses, addresses), company names, deal information, notes, tasks, communication history, and attached files.
2.1.4. Team member data: names, email addresses, roles and permissions, invitation data, and activity logs of employees invited by the User to the workspace.
2.1.5. Payment data: tariff information, payment history, bank card details (processed by the payment provider; Kiges CRM does not store full payment data). From the payment provider, Kiges CRM may receive partial (masked) card data, which is displayed in the "Payment Methods" section of Kiges Pay for the purpose of identifying the User's payment method. Such partial data does not allow a payment to be made and cannot be used for unauthorized debiting of funds.
2.1.6. Technical data: IP address, browser information, access time, cookies, server logs.
2.2. Kiges CRM does not request or process special categories of personal data (information about health, racial or ethnic origin, political opinions, religious beliefs, etc.). The User undertakes not to enter special categories of personal data of their clients into the Service.
2.3. Kiges CRM does not verify the accuracy of the data provided by Users or entered by Users about their clients and is not responsible for its reliability.
3. Purposes of Data Processing
3.1. Data is processed for the following purposes:
3.1.1. Storing and processing CRM records (clients, deals, tasks, notes) entered by the User.
3.1.2. Providing the functionality of sales pipelines, task management, and analytics.
3.1.3. Managing team member access and role permissions within the workspace.
3.1.4. Ensuring User authorization and access to service features.
3.1.5. Invoicing and payment processing.
3.1.6. Providing technical support.
3.1.7. Preventing abuse, fraud, and violations of the Public Offer.
3.1.8. Sending notifications to the User about service status, workspace, and account.
4. Personal Data of the User's Clients
4.1. The User acts as the data controller for the personal data of their clients, counterparties, and other persons entered into the Service. Kiges CRM processes such data on behalf of and under the instructions of the User (as a data processor).
4.2. The User is solely responsible for having a lawful basis for entering their clients' personal data into the Service, including obtaining consent where required, providing privacy notices to their clients, and fulfilling data subject requests (access, rectification, deletion) from their clients.
4.3. The User undertakes not to enter into the Service personal data of third parties obtained unlawfully or without a lawful basis, and not to use the Service for processing data in violation of data protection legislation (GDPR, CCPA, and equivalent legislation).
4.4. Kiges CRM is not responsible for the User's compliance with data protection legislation regarding the personal data of the User's clients and bears no liability for claims of such data subjects related to the User's data processing.
4.5. The User undertakes to indemnify and hold Kiges CRM harmless from any claims, fines, penalties, and liabilities arising from the User's violation of data protection legislation regarding the data of their clients.
5. Team Members
5.1. The User may invite employees (team members) to their workspace and assign them roles and access permissions.
5.2. Team member data is used exclusively to provide access to the workspace, manage permissions, and record activity within the workspace.
5.3. The User is responsible for informing their team members about the processing of their personal data and for assigning appropriate access rights.
5.4. The User is responsible for all actions of team members within the workspace and must revoke access of former employees in a timely manner. Kiges CRM is not liable for the actions of team members performed with access granted by the User.
6. Data Storage and Protection
6.1. Workspace data and CRM records are stored for the period of use of the Service and for a reasonable period thereafter, except for data that must be stored in accordance with applicable legislation.
6.2. Kiges CRM takes technical and organizational measures to protect User data, including encrypting data transmission via HTTPS, restricting employee access to data, and regular backups.
6.3. Access to the User's workspace data by the Contractor's personnel is limited to cases necessary for technical support and service operation.
6.4. In the event of a data security breach, Kiges CRM takes measures to eliminate the breach and notifies affected Users within a reasonable time.
6.5. Kiges CRM does not guarantee absolute data security and is not liable for the disclosure of data resulting from circumstances beyond the Contractor's control, including hacker attacks, failures of third-party services, or actions of government authorities.
7. Data Sharing with Third Parties
7.1. Kiges CRM does not share Users' personal data with third parties, except in cases provided for by the legislation of the Republic of Serbia.
7.2. Kiges CRM may use the services of third-party providers (payment providers, hosting providers, email sending services) to ensure the operation of the service. Data sharing with such providers is carried out under confidentiality agreements.
7.3. Kiges CRM may share aggregated and anonymized statistical data with third parties for the purpose of analysis and service improvement.
7.4. Kiges CRM may share User data with authorized state authorities of the Republic of Serbia on the grounds and in the manner established by the legislation of the Republic of Serbia.
7.5. CRM records data entered by the User is not shared with third parties, except with third-party providers involved in the operation of the Service or integrations connected by the User themselves.
8. User Rights
8.1. The User has the right to:
8.1.1. Request information about the personal data processed by Kiges CRM.
8.1.2. Demand clarification, blocking, or destruction of their personal data if it is incomplete, outdated, inaccurate, or unlawfully obtained.
8.1.3. Withdraw consent to the processing of personal data by sending a notification to info@kiges.cc.
8.1.4. Delete their account and all associated data by contacting support.
8.2. Upon account deletion, Kiges CRM deletes the User's data within a reasonable time, except for data that must be stored in accordance with applicable legislation (e.g., transaction data, abuse prevention logs).
8.3. The User is responsible for fulfilling data subject requests (access, deletion, rectification) from their clients, as Kiges CRM processes such data on behalf of the User.
9. Data Deletion
9.1. The User can delete their CRM records, deals, tasks, and other workspace data at any time through the service interface.
9.2. When a workspace or account is deleted, all associated data, including CRM records, team member data, and settings, is deleted without the possibility of recovery, except for data subject to mandatory storage by law.
9.3. Kiges CRM reserves the right to delete data of inactive accounts after 12 (twelve) months from the date of the User's last activity.
9.4. The Contractor is not liable for any losses of the User arising from the deletion of data, including loss of CRM records or workspace settings.
10. Cookies and Analytics
10.1. Kiges CRM uses cookies to ensure the operation of authorization and remember User settings.
10.2. Kiges CRM may collect aggregated anonymous statistics on service usage to improve the service.
10.3. Disabling cookies may result in the inability to access parts of the service that require authorization.
11. Additional Conditions
11.1. Kiges CRM reserves the right to make changes to this document. The User undertakes to independently monitor the current version.
11.2. All questions regarding data processing in Kiges CRM should be sent to: info@kiges.cc.
11.3. This document is an integral part of the Public Offer for the provision of services dated October 10, 2026 and the general Kiges Privacy Policy, available at: https://help.kiges.cc/en/documents-rules/kiges-privacy-policy?app=kiges