Privacy policy

Last updated: 1 November 2026

This policy explains how Perago ("we", "us") handles personal data in Perago CRM (the "Service"), available at leadsmanager.perago.in. If you have any question, write to support@perago.in.

1. Who this applies to

The Service is a business tool used by real-estate companies and their staff ("users"). Users sign in with an account created by their company's administrator. The Service is not intended for children and we do not knowingly collect data from anyone under 18.

2. What we collect

• Account data — name, email address, role and a securely hashed password for each user.
• Business data entered by users — contacts, leads, channel partners, properties, remarks, follow-ups, tasks and daily reports. This is entered by your company; we process it on your company's behalf.
• Technical data — a session cookie that keeps you signed in, a security token that protects forms, and server logs (IP address, time, page requested) used for security and troubleshooting.
• Google data — only if you choose to connect Google Calendar; see the next section.

We do not use advertising or tracking cookies, and we do not use third-party analytics.

3. Google user data (Google Calendar)

Connecting Google Calendar is optional and is done by each user for their own Google account, from the Calendar page.

What we access

• Your Google account email address (scopes openid and email) — only to show you which account is connected.
• Permission to create, change and delete calendar events (scope https://www.googleapis.com/auth/calendar.events).

How we use it

• We add the calls, meetings and site visits you schedule in Perago CRM to your primary Google Calendar, with the reminders you chose (pop-up and, if you ask for it, email).
• When such an appointment is rescheduled, completed, reassigned or deleted in Perago CRM, we update or remove the same event in Google Calendar.
• We only work with events that Perago CRM created. We do not read, list, download or store any other event in your calendar.

What we store

• The access token and refresh token Google gives us, encrypted in our database.
• The connected Google email address, your reminder settings, and the ID of each event we created (so we can update it later).

Sharing and limits

• We do not sell Google user data, share it with third parties, or use it for advertising.
• We do not use Google user data to develop, improve or train generalised or non-personalised AI or machine-learning models.
• No person at Perago reads your Google data, except with your permission (for example, when you ask for help), when needed for security, or when required by law.

Perago CRM's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting

You can disconnect at any time from Calendar → Google Calendar → Disconnect. We then revoke our access with Google, immediately delete the stored tokens and event IDs, and — if you leave the option ticked — remove the upcoming events we added. You can also remove access from your Google account at myaccount.google.com/permissions.

4. How we use data

• To provide the Service: show your contacts, schedule, reminders, history and reports.
• To keep the Service secure: sign-in protection, preventing abuse, and investigating errors.
• To contact your company's administrator about the Service (for example, important changes).

We do not use your data for marketing to you or to the contacts stored in the Service.

5. Sharing

Within a company, data is visible according to roles: advisors see their own contacts; administrators can see their team's data. Outside your company, we share data only with:

• our hosting provider, which stores the Service on its servers under contract;
• Google, only when you connect Google Calendar, to create and update your events;
• authorities, when the law requires it.

6. Storage & security

Data is sent over HTTPS. Passwords are hashed and Google tokens are encrypted. Access is limited by role, and sign-in attempts are rate-limited. No system is perfectly secure, but we work to protect your data and will inform affected administrators of any breach without undue delay.

7. Retention & deletion

• Business data is kept while your company uses the Service. Your company's administrator can edit or delete records at any time.
• Google tokens are kept only while Google Calendar is connected and are deleted as soon as you disconnect or your account is deleted.
• When a company stops using the Service, we delete its data within 90 days, unless the law requires us to keep it longer.
• To ask for deletion of your data, write to support@perago.in.

8. Your choices & rights

Depending on where you live (for example, under India's Digital Personal Data Protection Act, 2023, or the GDPR), you may ask to see, correct or delete your personal data, or withdraw consent. For data your company entered, please contact your company's administrator; for anything else, contact us. We reply within 30 days.

9. Changes to this policy

If we change this policy, we will update the date above and, for important changes, tell administrators in advance.

10. Contact

Perago · support@perago.in