Privacy Policy

TeamMonitro ("we", "us", "our") provides a cloud-based workforce visibility and sales platform made up of the website at www.teammonitro.com, the web admin panel at admin.teammonitro.com, the TeamMonitro Windows desktop app and the TeamMonitro Android app (together, the "Service").

Our customers are businesses ("Customers"). This means we play two different roles:

• For data our Customers put into the Service (their employees' activity, call logs, their leads, data from their Facebook Pages, etc.) the Customer decides why and how it is processed. The Customer is the data controller / "Data Fiduciary", and we process that data only on the Customer's instructions as their processor.
• For data about our own website visitors and Customer account holders (e.g. a person who signs up or contacts us) we are the controller.

If you are an employee of one of our Customers, or a person whose details are held as a lead by a Customer, please contact that business first about your data - we will help them respond to you.

Account and business information. Company name, admin users' names, email addresses, mobile numbers, login credentials (passwords are stored only as one-way hashes), roles and subscription and billing details. Card and UPI payments are handled by our payment provider (Razorpay); we do not store full card numbers.

Employee data entered or collected on a Customer's behalf. Depending on the features a Customer enables, this can include an employee's name and mobile number, device information, working and idle time, application and website usage, periodic screenshots and on-demand live screen view (desktop app), attendance and shift records, leave and payroll details, and call logs (number, contact name, call time, duration and type) from the Android app.

Lead / CRM data. Names, phone numbers, notes, follow-up dates, statuses, tags and custom fields that Customers add manually, import from CSV, create from call logs, or receive from connected lead sources.

Website visitors and enquiries. Details you send through our contact or demo form (name, work email, phone, company, message), and standard technical data such as IP address, browser type, pages viewed and essential cookies.

Technical and security data. Log files, IP addresses, session records and an audit log of administrative actions, used to keep the Service secure and working.

The Service offers an optional Meta Lead Ads integration. A Customer's authorised admin can choose to connect their Facebook account using Facebook Login, select the Facebook Pages they manage, and have new Facebook and Instagram Lead Ad form submissions created automatically as leads in their TeamMonitro account.

When a Customer connects, we receive and store only what is needed for this feature:

• The connecting user's Facebook user ID and name (to show who connected the integration).
• The IDs and names of the Facebook Pages the user chose to share, and Page access tokens for those Pages.
• The IDs, names and status of the Lead Ad forms on those Pages.
• The lead form submissions themselves: the answers the person entered in the form (typically name, phone number, email and any custom questions), submission time, and the related form, ad and campaign names and IDs and platform (Facebook or Instagram).

How we use it. Only to create and update leads in the connecting Customer's own TeamMonitro account, assign them to that Customer's employees, and show a sync log to that Customer. We use the permissions pages_show_list, pages_read_engagement, pages_manage_metadata, pages_manage_ads, leads_retrieval and business_management solely for this purpose.

What we do not do. We do not sell Meta data, use it for advertising or profiling, combine it across different Customers, share it with other Customers or third parties (other than the hosting providers listed below), or use it for any purpose other than providing the integration to the Customer who connected it.

Security. Access tokens are encrypted at rest (AES-256-GCM), all traffic uses HTTPS, webhook requests from Meta are verified with a signature, and each Customer's data is isolated from every other Customer's.

Removal. A Customer can disconnect at any time from Leads → Meta Ads → Disconnect in the TeamMonitro admin panel, or remove the TeamMonitro app from Facebook Settings → Business Integrations. On disconnection we delete the stored tokens and Page/form settings. To have lead data deleted as well, see our Data Deletion Instructions.

Our use of information received from Meta also complies with the Meta Platform Terms.

• To provide, operate and maintain the Service and the features each Customer enables.
• To create Customer accounts, authenticate users and manage subscriptions and billing.
• To provide customer support and send service messages (e.g. OTPs, security alerts, billing notices).
• To keep the Service secure, prevent fraud and abuse, and keep audit records.
• To fix problems and improve the Service, using aggregated or de-identified usage information.
• To respond to enquiries and, where permitted, send product updates (you can opt out at any time).
• To comply with legal obligations and enforce our Terms of Service.

TeamMonitro is intended for monitoring company-owned or company-authorised devices for legitimate business purposes. Customers are responsible for informing their employees, obtaining any consent required by law, and using monitoring features in line with the laws that apply to them. Monitoring only happens through the TeamMonitro apps installed on a device and only for the features the Customer enables.

We do not sell personal data. We share it only:

• With service providers who host or support the Service under confidentiality and data protection obligations - for example cloud hosting and storage (Amazon Web Services), database hosting (MongoDB), payments (Razorpay) and email delivery.
• Within a Customer's account - with that Customer's own admins and employees according to the roles and permissions the Customer sets.
• For legal reasons - where required by law, court order or a government authority, or to protect the rights, safety and property of our users or the public.
• In a business transfer - as part of a merger, acquisition or sale of assets, subject to this policy.

We keep Customer data for as long as the Customer's account is active or as needed to provide the Service. Customers can configure retention for some data (for example screenshots) and can delete records at any time; deleted leads and employees go to a Recycle Bin and are then permanently deleted.

When an account is closed, we delete or anonymise Customer data within 90 days, except where we must keep certain records (such as invoices) to meet legal, tax or accounting requirements. The Meta Lead Ads sync log is kept for up to 180 days.

We use HTTPS/TLS encryption in transit, hashed passwords, encrypted third-party access tokens, role-based access control, per-company data isolation, session revocation and audit logging. No system is completely secure, but we work to protect your information and will notify affected Customers of a personal data breach as required by law.

Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you may have the right to access, correct, update or erase your personal data, withdraw consent, nominate another person to exercise your rights, and raise a grievance.

To exercise these rights, email support@teammonitro.com. If your data is held by one of our Customers (for example as their employee or lead), we will pass your request to that Customer and assist them. We respond within 30 days.

The admin panel uses essential cookies to keep you signed in and secure. Our website may use basic analytics to understand traffic. You can control cookies in your browser settings; blocking essential cookies may stop the admin panel from working.

The Service is for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us data, contact us and we will delete it.

Data is stored with our cloud providers and may be processed in India or in other countries where they operate. Where data is transferred, we take steps to keep it protected as described in this policy and as required by law.

We may update this policy from time to time. We will post the new version on this page and change the "Last updated" date, and notify Customers of significant changes by email or in the admin panel.

For questions, requests or complaints about privacy, contact: