Skip to content

Legal

Privacy policy

This Privacy Policy (the "Policy") explains how Limited Liability Company "SOFTTECH GROUP" ("shamCRM", "we") processes personal data of users of the shamCRM service (https://www.shamcrm.com).

1. Controller and contacts

LLC "SOFTTECH GROUP", Republic of Uzbekistan, 100059, Tashkent, Yakkasaray district, Bogsaray, Mirabad street 10. E‑mail: [email protected].

2. Data we collect

  • shamCRM account data: name, e‑mail, phone number (if you share it), organization, service metadata.
  • Technical data: IP address, device or browser type, cookies, event logs.
  • TikTok integration (Login Kit): after your explicit consent via OAuth 2.0 we receive only the fields from the user.info.basic scope: open_id (TikTok internal identifier) and display_name (display name). We do not collect or use avatar_url, statistics, video lists or other data unless you provide separate consent and we request broader permissions.
  • YouTube integration: after Google OAuth consent we receive the channel id and title, OAuth tokens, the video list, and comments that you import as leads.

3. Purpose of processing

  • Authenticate and link your TikTok account to your shamCRM profile.
  • Display your display_name so teammates can identify you in the interface.
  • Provide security, debugging, and ongoing service improvements.

4. Legal basis

Your consent (OAuth authorisation), performance of our agreement (delivery of CRM services), and compliance with the laws of the Republic of Uzbekistan and other applicable rules.

5. Retention

We store data while your integration or account stays active or as long as it is needed for the purposes in this Policy. You can break the TikTok link or delete the account at any time.

6. Sharing with third parties

We do not sell or share your data for marketing. We may disclose it only to: (a) infrastructure providers (hosting and similar) under data processing agreements; (b) competent authorities when the law or a court requires it; (c) parties involved in business reorganisations, subject to confidentiality safeguards.

7. International data transfers

Servers or vendors may be located outside your country. We implement safeguards to protect data during cross-border transfers.

8. Security

We apply organisational and technical protection measures. No method is 100% guaranteed, so we continuously improve security.

9. Your rights

You can request access, rectification, deletion, withdrawal of consent (including through TikTok settings), and restriction of processing by writing to [email protected].

10. Cookies

We use cookies and similar technologies for authentication, preferences, and analytics. On the public shamCRM site this is Google Analytics, Yandex Metrica, and Microsoft Clarity. Clarity records how people use the pages (clicks, scroll, heatmaps). Form field text is masked by default. You can limit cookies in your browser, but some features may work with reduced functionality.

11. TikTok integration details

  • We use only the TikTok Login Kit product and only the user.info.basic scope.
  • We receive and use: open_id and display_name.
  • Purpose: link your TikTok account to shamCRM and show your name correctly.
  • Revocation: you can revoke access in TikTok settings or contact us to disable the integration and delete related tokens.

12. YouTube integration

If you connect a company YouTube channel, we use the YouTube Data API v3 after your explicit consent through Google OAuth 2.0.

  • Scopes: youtube.readonly (channel and comments), youtube.force-ssl (comment replies). We do not request youtube.upload and we do not upload videos.
  • What we store: channel id and title, OAuth access/refresh tokens, and identifiers of comments you import as CRM leads.
  • Why: turn comments under videos into leads and reply from the CRM under the same comment on the channel.
  • Revocation: Disconnect in shamCRM revokes the token at Google and deletes stored tokens immediately. You can also revoke access in Google account permissions.
  • We do not read the viewer feed, buy ads on your behalf, or share YouTube data with third parties for marketing.

13. Changes to this Policy

We may update the Policy. The current version is always available at this address. We will announce significant changes.

14. Contact

E‑mail: [email protected]
Address: Republic of Uzbekistan, 100059, Tashkent, Mirabad street 10