Privacy Policy

Last updated: October 28, 2026

This Privacy Policy describes how LetsMedia Lab LLP ("the Company", "We", "Us" or "Our") collects, uses and discloses Your information when You use the PocketCRM mobile application and the website pocketcrm.letsmedialab.com (together, the "Service"), and explains Your privacy rights.

We use Your Personal Data to provide and improve the Service. Where required by applicable law, We process Your information only where We have a valid legal basis, including Your consent.

1. Definitions

• Account means a unique account created for You, usually by Your organisation, to access the Service.
• Application means PocketCRM, the Android software provided by the Company.
• Company means LetsMedia Lab LLP, Whitefield, Bangalore, Karnataka, India.
• Organisation means the business that provides You with a PocketCRM Account and controls the CRM data stored in it.
• Device means any device that can access the Service, such as a mobile phone or tablet.
• Personal Data means any information that relates to an identified or identifiable individual.
• Service Provider means any person or company that processes data on behalf of the Company, such as hosting providers.
• Usage Data means data collected automatically through the use of the Service.
• You means the individual using the Service, or the entity on whose behalf that individual uses it.

2. Information We Collect

2.1 Account and CRM data

• Name, email address, phone number, role and Organisation details.
• Lead, contact, follow-up, note and task information entered by You or Your Organisation.

2.2 Calls, phone data and call recordings (PocketCRM mobile app)

PocketCRM is a sales CRM with a built-in phone dialer for Android. With Your agreement, the app asks You to set it as Your default Phone app, so that calls are placed and answered inside PocketCRM. From these calls We collect:

• the phone numbers You dial or receive;
• call direction (outgoing, incoming, missed), start time and duration;
• the CRM lead the call relates to and any notes or outcome You add;
• the call recording, only if You enable recording (see section 5).

PocketCRM does not read Your device's existing call history, SMS messages or contacts, and does not send or receive SMS.

2.3 Usage and device data

Usage Data may include Your Device type, operating system, unique device identifiers, IP address, app version, access times and diagnostic data.

3. Permissions the App Requests and Why

Before the app first asks for phone permissions, it shows an in-app notice explaining how call data is used, and nothing is requested until You agree. Permissions are requested only when You use the related feature:

• Default Phone app role: to place and answer calls inside PocketCRM and show the in-call screen. This is core to the Service.
• Phone permission (call and phone state): to place calls and detect when calls start and end so they can be logged against Your leads.
• SIM information: to let You choose which SIM to call from.
• Microphone: to record calls, only if You enable recording and accept the recording notice.
• Notifications, exact alarms, full-screen alerts, vibration and run at start-up: to deliver follow-up reminders.
• Display over other apps: to show a pairing guide during optional two-way recording setup.
• Internet: to sync data with Your Organisation's PocketCRM account.

You can revoke any permission or change the default Phone app at any time in Android settings. Some features, such as calling from PocketCRM, will not work without the related permission.

4. How We Use Your Information

Call data, lead data and other Personal Data are used to:

• provide, maintain and secure the Service;
• place, answer and log calls and link them to leads;
• show call history, follow-up reminders, dashboards and reports to You and authorised users of Your Organisation;
• play call recordings back to authorised users;
• manage Your Account and respond to Your requests;
• contact You about the Service, including security and service updates;
• analyse usage and improve the Service;
• comply with legal obligations.

5. Call Recording

• Recording is optional. It starts only after You accept the in-app recording notice and allow microphone access.
• Recording laws vary. You are responsible for informing the other party and obtaining any consent the law requires. PocketCRM does not record calls in secret.
• Numbers You mark as private are never logged or recorded.
• Recordings are uploaded over an encrypted connection to Your Organisation's PocketCRM account and can be played only by authorised users.
• Recordings are kept according to Your Organisation's retention policy, and may be deleted sooner on request.
• You can turn recording off at any time from Profile → Call recording in the app.

6. Sharing and Disclosure

We may share Your Personal Data only in these situations:

• With Your Organisation: Your Organisation controls the CRM data, including call logs and recordings, and its authorised users can access them.
• With Service Providers: such as cloud hosting providers, who process data on Our behalf and only to provide the Service.
• Business transfers: in connection with a merger, acquisition or sale of assets. We will give notice before Personal Data becomes subject to a different privacy policy.
• Legal requirements: where required by law or valid requests from public authorities, or to protect rights, property or safety, or to prevent wrongdoing.
• With Your consent: for any other purpose.

7. Cookies on the Website

Our website uses only essential session cookies needed for it to work and, where applicable, cookies that remember Your preferences. You can refuse cookies in Your browser settings, but parts of the website may not work. The mobile app does not use browser cookies.

8. Retention of Your Personal Data

We retain Personal Data only as long as necessary for the purposes in this policy and to comply with legal obligations, resolve disputes and enforce agreements.

• Account information: for the duration of the Account relationship plus up to 24 months after closure.
• CRM data, call logs and call recordings: according to Your Organisation's retention policy, and deleted or anonymised after the Account is closed, subject to legal requirements and backup cycles.
• Support correspondence: up to 24 months after the ticket is closed.
• Usage Data and server logs: up to 24 months, for security monitoring and troubleshooting.

We may retain data longer where required by law, to establish or defend legal claims, at Your request, or where it remains in encrypted backups scheduled for routine deletion. When retention periods expire, We delete or anonymise the data.

9. Security

Data is transmitted over HTTPS. Login tokens are stored in secure device storage. Access to recordings and call data is limited to authorised users. No method of transmission or storage is 100% secure, so We cannot guarantee absolute security.

10. International Transfers

Your information may be processed and stored on servers located outside Your state or country, where data protection laws may differ. Where required by law, We use appropriate safeguards for such transfers.

11. Your Rights and Choices

• Access, correct or request deletion of Your Personal Data, including call data and recordings, by contacting Us or Your Organisation's administrator.
• Withdraw consent at any time, for example by disabling recording, revoking permissions in Android settings, or changing the default Phone app. Withdrawal does not affect processing done before it.
• Mark numbers as private so they are never logged or recorded.
• Opt out of non-essential communications using the unsubscribe link or by contacting Us.

We may need to retain certain information where there is a legal obligation or lawful basis to do so.

12. Children's Privacy

The Service is not directed to anyone under the age of 16, and We do not knowingly collect Personal Data from children. If You believe a child has provided Us with Personal Data, contact Us and We will delete it as soon as reasonably possible.

13. Links to Other Websites

The Service may link to websites not operated by Us. We have no control over, and assume no responsibility for, the content or privacy practices of third-party sites.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post the new version on this page, update the "Last updated" date, and notify You by email or a prominent notice in the Service before material changes take effect.

15. Contact Us

If You have questions about this Privacy Policy or Your data, contact:

LetsMedia Lab LLP, Whitefield, Bangalore, Karnataka, India
Website: pocketcrm.letsmedialab.com
Email: [email protected]
Phone: +91 78990 93230