Privacy Policy

AjoWork CRM · crm.ajowork.com · Last updated: November 2026

AjoWork CRM ("we", "us") is a web-based customer relationship management service. This policy explains what personal data we handle, why, and the choices you have. It is designed with Nigeria's Data Protection Act 2023 (NDPA) and similar privacy laws in mind.

1. Two kinds of data

Account data is information about the people who use AjoWork CRM (name, work email, password, role). For this, we are the data controller.

CRM data is information a business enters about its own prospects and customers (names, phone numbers, emails, notes, visits). The business that owns the workspace decides what is collected and why; we only store and process it on that business's behalf. Businesses are responsible for having a lawful reason to collect their customers' data.

2. What we collect

• Account details: name, email, hashed password (we never store your actual password).
• CRM records you enter: clients, leads, activities, tasks, service cases and notes.
• Location, only when a salesperson taps Check in and allows their browser to share it: latitude, longitude, accuracy and time. We do not track location in the background.
• Security information: IP address, browser/device type and sign-in times, used for sign-in alerts and abuse prevention.
• Email delivery records (recipient, subject, time) to confirm messages were sent.

3. How we use it

• To run the service: sign-in, workspaces, notifications, reports and exports.
• To send emails: welcome messages, invitations, sign-in alerts, password resets, task and handover notifications.
• To keep the platform secure and fix problems.

We do not sell personal data and do not use it for advertising.

4. Who can see your data

Each workspace is separate. Inside a workspace, access depends on a person's role (for example, salespeople see their own records; managers see their team's). The platform owner can see account and usage counts to run the service, but does not routinely browse a business's customer records. We may share data with hosting and email providers who help us deliver the service, or where the law requires it.

5. Cookies

We use one essential session cookie to keep you signed in and protect against forged requests. We do not use advertising or tracking cookies.

6. Keeping and deleting data

We keep data while an account or workspace is active. You can ask us to delete your account or workspace data, or export it, at any time. Security and audit logs may be kept for a limited period to protect the service and meet legal duties.

7. Security

Passwords are hashed, connections use HTTPS, every request is checked against the user's role and workspace, and sensitive actions are logged. No system is perfectly secure, so please use a strong, unique password and sign out on shared devices.

8. Your rights

You may ask to access, correct, export or delete your personal data, to object to or restrict certain processing, and to withdraw consent where we rely on it. If your data was entered by a business using AjoWork CRM, please contact that business first. You may also complain to the Nigeria Data Protection Commission.

9. Children

AjoWork CRM is for business use and is not directed at children.

10. Changes and contact

We may update this policy and will change the date above. Questions or requests: support@ajowork.com.