Support

How can we help?

Submit a request and we will get back to you within 24 hours.

Name

Product

Company

Ferd CRM v/Wirelabs AS · Org.no NO936541186MVA · Norway

Information about how Ferd CRM processes your personal data

Last updated

April 12, 2026

1. Introduction

This Privacy Policy explains how Ferd CRM ("we", "us", or "our") collects, uses, stores, and protects your personal data when you use our customer relationship management platform and related services (the "Service").

Ferd CRM is a Norwegian company and acts as the data controller for all personal data collected and processed through the Service. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and applicable Norwegian data protection law.

Personal data means any information that can be directly or indirectly linked to an identified or identifiable natural person, including but not limited to name, email address, IP address, and usage data.

For questions about our processing of your personal data, please contact us at: support@ferdcrm.com

2. Data We Collect

We collect different categories of personal data depending on how you interact with the Service. We do not sell your personal data to third parties.

Account Data

Information you provide when creating and managing your account:

Full name
Email address
Password (stored as a secure hash, never in plain text)

CRM Data

Data you enter and store within the Service:

Contacts and their details
Companies and associated information
Deals, pipelines, and stages
Notes and tasks
Emails you store or log in the CRM

Usage Data

Data collected automatically when you use the Service:

Login times and session duration
Features accessed and used
IP address
Browser type and device information

Payment Data

Payment information related to your subscription:

Billing name and address
Subscription plan and payment history

All payment processing is handled by Stripe. We never store your full credit card number, CVV, or other sensitive payment credentials on our servers.

Communication Data

Information from your interactions with us:

Support requests and correspondence
Emails exchanged with our team

3. How We Use Your Data

We process your personal data for the following purposes:

Provide the Service

Operate, maintain, and deliver the CRM platform and its features to you

Process Payments

Manage subscriptions, billing, and invoicing through Stripe

Transactional Emails

Send account confirmations, password resets, billing receipts, and service notifications

Improve the Product

Analyze usage patterns to enhance features, performance, and user experience

Prevent Fraud

Detect and prevent unauthorized access, abuse, and security threats

Legal Compliance

Comply with applicable laws, regulations, and legal processes

4. Legal Basis (GDPR)

Under the GDPR, we rely on the following legal bases for processing your personal data:

Contract Performance (Art. 6(1)(b))

Processing necessary to provide the Service, manage your account, and fulfill our contractual obligations to you.

Legitimate Interest (Art. 6(1)(f))

Processing for product improvement, fraud prevention, and security purposes, where our interests do not override your fundamental rights.

Consent (Art. 6(1)(a))

Where you have given explicit consent for specific processing activities, such as optional AI features. You may withdraw consent at any time.

Legal Obligation (Art. 6(1)(c))

Processing required to comply with applicable laws, such as tax regulations and data retention requirements.

5. Data Hosting & Storage

Ferd CRM offers multiple hosting regions so your data stays close to your team. When you create your workspace, you select a hosting region and your data remains in that region.

East & West regions

Europe region

Scandinavia

Norway region

All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. Backups are stored within the same hosting region as your primary data.

6. Data Retention

We retain your data only as long as necessary to provide the Service and comply with our legal obligations:

Active account: Your data is retained for as long as your account remains active.

Cancelled account: Data is retained for 90 days after cancellation to allow reactivation or export, then permanently deleted.

Backups: Backup copies are purged within 30 days following permanent deletion of your data.

Usage logs: Anonymized usage and analytics logs are retained for up to 12 months.

7. Sub-processors

We use the following third-party sub-processors to operate the Service. Each sub-processor is bound by data processing agreements that ensure your data is handled securely and in compliance with GDPR.

Provider	Purpose	Location
Stripe	Payment processing	US / EU
Resend	Transactional email delivery	US
Anthropic	AI features (Claude)	US
Fathom Analytics	Privacy-focused website analytics (no cookies)	EU
Hosting Provider	Infrastructure, servers, and Redis caching	Per selected region

8. AI Features & Data

Ferd CRM offers optional AI-powered features, including AI Brief, AI Draft, and Risk Radar. When you use these features, relevant CRM data from your workspace is sent to Anthropic's Claude API for processing.

Data is sent to Anthropic only when you actively trigger an AI feature.

Anthropic does not store your data beyond the duration of the API request.

Your data is not used by Anthropic to train or improve their models.

You can opt out of AI features at any time by simply not using them. No AI processing occurs without your explicit action.

9. Cookies & Tracking

Ferd CRM uses only essential cookies required for the Service to function. We do not use third-party advertising cookies or track you across other websites.

Essential Cookies

Session cookie: Keeps you logged in during your browsing session.
CSRF token: Protects against cross-site request forgery attacks.
Preferences: Remembers your settings such as theme and language.

We use Fathom Analytics for website analytics, which is privacy-friendly by design. Fathom does not use cookies, does not collect personal data, and is fully GDPR-compliant. No third-party advertising cookies are used anywhere in the Service.

10. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data. To exercise any of these rights, please contact us at support@ferdcrm.com.

Right of Access

Request a copy of the personal data we hold about you.

Right to Rectification

Correct inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your personal data where there is no legitimate reason for us to continue processing it.

Right to Data Portability

Export your data in a structured, machine-readable format (CSV).

Right to Restriction

Request that we limit the processing of your personal data under certain conditions.

Right to Object

Object to processing of your data based on legitimate interests.

Withdraw Consent

Withdraw previously given consent at any time, without affecting the lawfulness of prior processing.

Right to Complain

Lodge a complaint with your local supervisory authority. In Norway, this is the Datatilsynet (Norwegian Data Protection Authority).

11. Data Export & Portability

We believe your data belongs to you. You can export your CRM data at any time using the tools built into the Service:

CSV export: Export your contacts, companies, deals, and other CRM data in CSV format at any time from your account settings.

API access: Use our API for programmatic data export and integration with other systems.

Post-cancellation window: After cancelling your subscription, you have a 90-day window to log in and export your data before permanent deletion.

12. International Transfers

Some of our sub-processors are located in the United States. When your personal data is transferred outside the European Economic Area (EEA), we ensure adequate protection through the following mechanisms:

EU Standard Contractual Clauses (SCCs): We use EU-approved Standard Contractual Clauses for transfers of personal data to sub-processors in the United States.

Adequacy decision: Norway is recognized by the EU as providing an adequate level of data protection under the EEA Agreement.

13. Children

Ferd CRM is a business tool not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a person under 18, we will take steps to delete that information promptly.

14. Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration:

Encryption

TLS 1.3 in transit, AES-256 at rest

Two-Factor Authentication

Optional 2FA for all user accounts

Role-Based Access

Granular permissions and access controls

Audit Logs

Activity logging for security monitoring

Regular Backups

Automated backups within your hosting region

Access Controls

Strict internal access policies for our team

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

Provide at least 30 days' notice before the changes take effect.

Notify you via email or a prominent notice within the Service.

Update the "Last updated" date at the top of this policy.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

16. Contact & Data Protection

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Ferd CRM v/Wirelabs AS

Org.no NO936541186MVA

Norway

Email: support@ferdcrm.com

If you are unsatisfied with our response to a privacy concern, you have the right to lodge a complaint with the Datatilsynet (Norwegian Data Protection Authority) at www.datatilsynet.no.