Privacy Policy

Alex Windshield CRM ("the Service", available at crm.alexwindshield.ca) is a customer relationship tool for auto glass businesses. Each business ("Account") uses the Service to collect and manage its own customer inquiries. This policy explains what data the Service processes and how.

1. Data we process

• Account data: business name, email, password (stored hashed), phone, city.
• Customer inquiries: name, phone, email, vehicle details and message text that a customer submits through the Account's website form, Facebook Lead Ads form, Messenger, Instagram Direct, SMS, WhatsApp or phone call.
• Meta Platform data: when an Account connects its Facebook Page or Instagram account, we store the Page ID, Page name, Instagram account ID and access tokens issued by Meta, and we receive real-time notifications (webhooks) of new lead form submissions and incoming messages addressed to that Page/account. We fetch the sender's public profile name to label the conversation.
• Telephony data: call metadata, SMS content and optional call recordings processed through Twilio.

2. How we use it

Solely to provide the Service to the Account: showing inquiries in the Account's pipeline, notifying the Account of new activity, and letting the Account reply to its customers from one place. We do not sell data, do not use it for advertising, and do not share it with third parties except the processors below.

3. Meta Platform data — specific commitments

• Data received from Facebook and Instagram is used only to display the Account's own leads and messages inside the Service and to send the Account's replies back to the same person.
• Access tokens are stored server-side, never exposed in the browser, and deleted when the Account disconnects its Page/Instagram or deletes the Account.
• We comply with the Meta Platform Terms and Developer Policies.

4. Processors

Hosting (Canada/USA), Twilio (calls and messaging), Meta Platforms (Facebook, Instagram), Telegram (optional notifications to the Account owner).

5. Retention and deletion

Data is kept while the Account is active. An Account owner can disconnect Facebook/Instagram at any time in Settings → Integrations, which deletes the stored tokens. Full deletion of an Account and all its data can be requested as described on our Data Deletion page; deletion is completed within 30 days.

6. Your rights

Customers of an Account who wish to access, correct or delete their information should contact that business directly; we assist Accounts with such requests. You may also contact us at the address below.

7. Contact

Alex Windshield CRM · Ontario, Canada · info@alexwindshield.ca