shamCRM Privacy Policy

Last updated: 2025-12-01

This Privacy Policy (the "Policy") explains how Limited Liability Company "SOFTTECH GROUP" ("shamCRM", "we") processes personal data of users of the shamCRM service (https://www.shamcrm.com).

1. Controller and contacts

LLC "SOFTTECH GROUP", Republic of Uzbekistan, 100059, Tashkent, Yakkasaray district, Bogsaray, Mirabad street 10. E‑mail: [email protected].

2. Data we collect

• shamCRM account data: name, e‑mail, phone number (if you share it), organization, service metadata.
• Technical data: IP address, device or browser type, cookies, event logs.
• TikTok integration (Login Kit): after your explicit consent via OAuth 2.0 we receive only the fields from the user.info.basic scope: open_id (TikTok internal identifier) and display_name (display name). We do not collect or use avatar_url, statistics, video lists or other data unless you provide separate consent and we request broader permissions.

3. Purpose of processing

• Authenticate and link your TikTok account to your shamCRM profile.
• Display your display_name so teammates can identify you in the interface.
• Provide security, debugging, and ongoing service improvements.

4. Legal basis

Your consent (OAuth authorisation), performance of our agreement (delivery of CRM services), and compliance with the laws of the Republic of Uzbekistan and other applicable rules.

5. Retention

We store data while your integration or account stays active or as long as it is needed for the purposes in this Policy. You can break the TikTok link or delete the account at any time.

6. Sharing with third parties

We do not sell or share your data for marketing. We may disclose it only to: (a) infrastructure providers (hosting and similar) under data processing agreements; (b) competent authorities when the law or a court requires it; (c) parties involved in business reorganisations, subject to confidentiality safeguards.

7. International data transfers

Servers or vendors may be located outside your country. We implement safeguards to protect data during cross-border transfers.

8. Security

We apply organisational and technical protection measures. No method is 100% guaranteed, so we continuously improve security.

9. Your rights

You can request access, rectification, deletion, withdrawal of consent (including through TikTok settings), and restriction of processing by writing to [email protected].

10. Cookies

We use cookies and similar technologies for authentication, preferences, and analytics. You can limit cookies in your browser, but some features may work with reduced functionality.

11. TikTok integration details

• We use only the TikTok Login Kit product and only the user.info.basic scope.
• We receive and use: open_id and display_name.
• Purpose: link your TikTok account to shamCRM and show your name correctly.
• Revocation: you can revoke access in TikTok settings or contact us to disable the integration and delete related tokens.

12. Changes to this Policy

We may update the Policy. The current version is always available at this address. We will announce significant changes.

13. Contact

E‑mail: [email protected]
Address: Republic of Uzbekistan, 100059, Tashkent, Mirabad street 10