Privacy

How NordCRM processes data

Without consent: only anonymous page-view totals by date and page path.
With consent: page visits, active time, clicks, referrer, user-agent and random visitor and session IDs. Signed-in sessions may be linked to the user and company.
Never: form content, passwords, keystrokes, messages, mouse movements or raw IP addresses.
Retention: analytics data is deleted after no more than 180 days. Consent and a random visitor ID are stored locally in the browser.
Accounts: necessary sign-in, permission and security events are retained in the audit log to operate and protect the service.
Suppliers: hosting, database and email suppliers may process data under agreements and applicable safeguards.
Your rights: contact info@nordcrm.se for access, correction, deletion or objection. You may also lodge a complaint with the Swedish Authority for Privacy Protection.