Privacy Policy

Who We Are

Fyrestone operates the web-based CRM platform available at crm.fyrestone.io and the marketing website at fyrestone.io (collectively, the "Service"). When this Privacy Policy refers to "Fyrestone", "we", "us" or "our", it means the entity operating these platforms.

This Privacy Policy applies to all visitors to the Fyrestone marketing website and all registered users of the Fyrestone CRM platform. By using the Service, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide

When you create a Fyrestone account or use the platform, you may provide us with:

• Account information: your name, email address, password, and business name when you register.
• Business details: your business phone number, address, and other details you add to your account profile.
• CRM data: the names, email addresses, phone numbers, and notes you enter about your clients, leads, contractors, and companies — this is the data you store in the CRM to run your business.
• Billing contact details: your billing name and email address, used to send invoices and receipts. Card numbers are processed directly by Stripe or PayPal; Fyrestone never receives or stores your full payment card details.
• Communications: messages you send to the Fyrestone support team.

Information Collected Automatically

When you use the Service, we automatically collect certain technical information:

• Log data: IP address, browser type and version, pages visited, time spent, and the date and time of your visit.
• Device information: device type, operating system, and screen resolution.
• Usage data: which features you use, how often, and how you navigate the platform — used to understand what is working well and where we can improve.
• Cookies: small files placed on your device to keep you logged in and remember your preferences. See the Cookies section below for more detail.

Information from Third-Party Services

If you connect a third-party payment processor (Stripe or PayPal) to your account, those providers may share limited confirmation data with us — such as whether a payment was successful — to update invoice statuses in your account. We do not receive your full card details from these providers.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Fyrestone platform and its features.
• Create and manage your account and subscription.
• Process payments and send billing receipts and invoices.
• Send you important account notifications — such as security alerts, billing updates, and service announcements.
• Respond to your support requests and questions.
• Send product updates and feature announcements (you can opt out at any time).
• Monitor and analyse usage patterns to improve the platform.
• Detect, prevent, and address fraud, security incidents, and misuse.
• Comply with legal obligations.

How We Share Your Information

We do not sell, rent, or trade your personal information. We only share information in the following limited circumstances:

Service Providers

We work with trusted third-party providers who help us operate the Service. These include payment processors (Stripe and PayPal), cloud infrastructure providers who host our servers, SMS gateway providers who deliver text messages you send through the platform, and email delivery services. These providers access your information only to perform services on our behalf and are contractually required to keep it confidential.

Legal Requirements

We may disclose your information if required to do so by law, or in response to valid requests from public authorities (such as a court order or government agency). We will notify you of such requests where we are legally permitted to do so.

Business Transfers

If Fyrestone is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different privacy policy.

Data Storage and Security

Your data is stored on secure cloud servers. We use industry-standard security measures including:

• Encryption in transit using TLS/HTTPS for all data sent between your browser and our servers.
• Encryption at rest for stored data.
• Access controls that restrict who within Fyrestone can access your account data.
• Regular automated backups to protect against data loss.
• Ongoing monitoring for security incidents and vulnerabilities.

No method of transmission over the internet or electronic storage is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately.

Cookies and Tracking

Fyrestone uses cookies — small text files stored on your device — to make the Service work and to improve your experience.

• Essential cookies: Required for the platform to function — keeping you logged in and maintaining your session. These cannot be disabled.
• Preference cookies: Remember your settings and preferences so you do not need to re-enter them each visit.
• Analytics cookies: Help us understand how the platform is used so we can make improvements. Data collected is aggregated and anonymous.

You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in to the platform.

Data Retention

We retain your account data for as long as your account is active. When you close your account:

• Your CRM data (contacts, leads, invoices, etc.) is retained for 30 days after account closure, giving you time to export if needed, then permanently deleted.
• Billing records and transaction history are retained for the period required by applicable financial and tax regulations.
• Anonymised, aggregated usage data may be retained indefinitely for product improvement purposes.

Your Privacy Rights

You have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal data. Note that some data may be retained for legal or contractual reasons.
• Data export: Export your CRM data (contacts, invoices, etc.) from within your account settings at any time.
• Opt out of marketing: Unsubscribe from product emails at any time using the unsubscribe link in any email, or by contacting us. You will still receive essential account and security notifications.
• Restriction: Ask us to restrict processing of your data in certain circumstances.

To exercise any of these rights, please contact us. We will respond within 30 days.

Children's Privacy

The Fyrestone Service is not directed to children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will take steps to delete that information.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (to the address on your account) at least 30 days before the changes take effect, and update the "Last updated" date at the top of this page. Your continued use of the Service after any changes take effect constitutes your acceptance of the updated policy.