Nygmat CRM (the “System”) is an internal order-management tool used by the company and its invited employees. This policy describes what data the System stores and how it is used. By using the System you consent to this policy.
Information we collect
Users. Name, e-mail address, role, avatar, password hash, login timestamps and an audit log of actions performed in the System (log in, log out, order status changes, sending orders to the warehouse).
Orders. Marketplace order data received by e-mail and from connected services (order id, items, prices, shipping and customer delivery details, vendor confirmations, tracking numbers). This data is processed only to fulfil and track customer orders.
Mail. The System reads messages from the company mailboxes connected by an administrator (Amazon and vendor notifications). Message bodies are kept for a limited period for troubleshooting and then removed.
How we use the information
- Operate, maintain and improve the order workflow.
- Notify managers about order events and technical problems.
- Create tasks for the warehouse and communicate with connected services on the company’s behalf.
- Keep an audit trail required for accountability inside the company.
Third-party services
The System exchanges data with services the company uses to run its business: Google (Gmail API), Veeqo, Pyrus, Telegram (technical alerts) and an e-mail provider for invitations and password resets. Each service processes the data under its own privacy policy. Access tokens and API keys are stored encrypted.
Cookies and log files
The System uses a session cookie to keep you signed in. Web-server logs may record IP addresses, browser type and timestamps for security and diagnostics; they are not linked to marketing profiles and are not shared with advertisers.
Data retention and security
Data is stored on company-controlled servers protected by role-based access, HTTPS and encryption of secrets. Order data is retained for as long as it is needed for bookkeeping; e-mail bodies, viewed notifications and generated reports are cleaned up automatically after a short retention period.
Your rights
Employees may review and correct their profile data in the System. Requests to access, correct or delete personal information, including information about customers contained in orders, can be sent to the administrator of the System.
Children’s information
The System is not intended for use by persons under 18 and does not knowingly collect information from children.
Changes
This policy may be updated; the date at the top of the page shows the current version.