Legal

Privacy Policy

Last updated: July 5, 2026

1. Introduction

Ayidhu ("we," "us," or "our") operates the Ayidhu CRM platform accessible at ayidhu.com and its subdomains. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our services.

By using Ayidhu, you agree to the collection and use of information in accordance with this policy. If you disagree with any part, please discontinue use of our services.

2. Information we collect

Account information: When you sign up, we collect your name, email address, and organization details. This information is used to create and manage your account.

CRM data: All data you enter into Ayidhu (contacts, leads, deals, notes, appointments, etc.) is stored on your behalf and belongs to your organization. We do not use your CRM data for any purpose other than providing the service.

Usage data: We collect anonymized usage metrics (page views, feature usage, error rates) to improve the product. This data cannot be linked back to individual records.

Cookies: We use session cookies for authentication and functional cookies to remember your preferences. We do not use tracking cookies for advertising.

3. How we use your information

We use collected information to:

  • Provide, maintain, and improve the Ayidhu platform
  • Authenticate users and authorize access to your organization's workspace
  • Send transactional emails (account confirmation, password reset, billing receipts)
  • Respond to support requests and inquiries
  • Detect and prevent fraud, abuse, and security incidents
  • Comply with legal obligations

We do not sell your personal data. We do not use your CRM records to train machine learning models.

4. Data storage and security

Your data is stored on Cloudflare's global infrastructure using D1 (SQLite) databases and R2 object storage. Each organization's data is logically isolated by tenant ID — no data is shared between organizations.

Data is encrypted at rest and in transit (TLS 1.3). Access to production systems is restricted to authorized personnel only, protected by multi-factor authentication.

We retain your data for the duration of your subscription. Upon cancellation, your data is retained for 30 days before permanent deletion, giving you time to export.

5. Data sharing

We share personal data only with:

  • Cloudflare: Infrastructure provider (Workers, D1, R2, Pages)
  • Clerk: Authentication and identity management
  • Paddle: Payment processing as our merchant of record (we never store card numbers)

Each sub-processor is bound by data processing agreements and complies with applicable privacy regulations. We do not share data with advertisers or data brokers.

6. SMS/text messaging and mobile information

With your prior express consent, we or organizations using our platform may send you text (SMS) messages such as appointment reminders, account notifications, and customer service communications. Consent is collected when your mobile number is recorded along with an explicit opt-in agreement, and it is not a condition of any purchase. Message frequency varies; message and data rates may apply.

No third-party sharing: Mobile phone numbers and SMS opt-in consent are not shared with, sold to, or disclosed to third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are used solely to deliver the messages you agreed to receive.

You can opt out at any time by replying STOP to any message, and get assistance by replying HELP or contacting [email protected]. See our SMS messaging program page for full program details.

7. Your rights

Depending on your jurisdiction, you may have the right to:

  • Access a copy of your personal data
  • Correct inaccurate data
  • Request deletion of your data ("right to be forgotten")
  • Export your data in a machine-readable format
  • Object to or restrict certain processing activities

To exercise any of these rights, email [email protected]. We will respond within 30 days.

8. Children's privacy

Ayidhu is not directed at children under 16. We do not knowingly collect personal information from anyone under 16. If we become aware that a child under 16 has provided personal data, we will delete it promptly.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. For material changes, we will notify you by email or by a prominent notice in the application at least 14 days before the change takes effect.

10. Contact us

Questions about this policy? Contact our privacy team at [email protected].