Privacy Policy

Last updated: 26 September 2026

FreeCRiM ("the Service") is operated by Zoom Buzz Limited ("we", "us", "our"). This policy explains what data we collect, why, and how we protect it.

What FreeCRiM is

FreeCRiM keeps your companies, contacts and deals as rows in an Excel workbook stored in your own Microsoft 365, not in a database only we control. The workbook is your record; FreeCRiM keeps an encrypted access token and a cache of the workbook's rows so the web app - and, in future, the Outlook add-in and Teams app - can read and update it quickly.

What data we collect

Account data

  • Your name and email address, from your Microsoft 365 sign-in profile
  • An internal user identifier

Microsoft 365 access

When you connect Microsoft 365, we ask for the following permissions:

  • Sign-in and profile (openid, profile, email, User.Read) - to identify you and read your basic profile.
  • Files (Files.ReadWrite.All) - to open, read and write the one CRM workbook you choose or create. This scope technically covers every file in your OneDrive and SharePoint, because Microsoft offers no narrower per-file grant for a file the app itself may create; FreeCRiM only ever reads or writes the workbook you have registered, and never lists, opens or writes any other file.
  • Contacts and people (Contacts.Read, People.Read) - used only if you choose to import your Microsoft contacts or frequently-contacted people to help populate your first companies and contacts. We do not read your contacts otherwise.
  • Offline access (offline_access) - so a change you make is still written back to your workbook after you close the browser tab.

Workbook cache

  • A cache of the rows in your CRM workbook - companies, contacts, deals, activities - so the app can list and search them without a Microsoft Graph round trip on every page view. The workbook remains the source of truth; the cache exists only to make reads fast and can always be rebuilt from the workbook.

What we do not do

  • We do not sell or share your personal data with third parties.
  • We do not keep a copy of your workbook that outlives the cache described above; deleting the workbook or disconnecting Microsoft 365 removes it.
  • We do not use your data for advertising or profiling, and we run no advertising or remarketing pixels of any kind.

How we protect your data

  • Your Microsoft 365 access token is encrypted at rest.
  • All data in transit is encrypted using TLS.
  • Access to production systems is limited to authorised personnel.

Third-party services

We use the following third-party services to operate FreeCRiM:

  • Microsoft Graph API - to read and write your CRM workbook, and, where you choose, your contacts and people, on your behalf.
  • DigitalOcean - infrastructure hosting and managed database.
  • Supabase - sign-in and session management, shared with other Zoom Buzz Limited products; your FreeCRiM account is not visible to those other products.
  • New Relic - application monitoring and error tracking (no personal data is sent to New Relic).
  • Mixpanel - product-usage analytics, activated only with your consent. You are identified only by a random internal identifier; we do not send your email address, name, or any other directly identifying information to Mixpanel.
  • Google Analytics 4 - aggregate web-traffic and acquisition analytics, activated only with your consent. Data is pseudonymous and advertising features are disabled.

We do not sell or share your personal data with any third party.

Your rights

  • Access: you can view your connected workbook and its cached rows from within the app at any time.
  • Deletion: disconnecting Microsoft 365 removes your access token and the workbook cache; delete your account entirely from the account menu: My account, then Delete account.
  • Portability: your data remains in your own Excel workbook, in your own Microsoft 365, in the standard .xlsx format, whether or not you keep using FreeCRiM.
  • Revocation: you can revoke FreeCRiM's access at any time from your Microsoft 365 account's app permissions page, independently of anything you do inside FreeCRiM.

Data retention

  • Account data: retained while your account is active.
  • Microsoft 365 access token: retained while your Microsoft 365 connection is active; deleted when you disconnect Microsoft 365 or delete your account.
  • Workbook cache: retained while the workbook is registered to your account; deleted when the workbook is removed or the account is deleted, and always rebuildable from the workbook while it remains registered.

Cookies and analytics

FreeCRiM uses essential cookies for session management and authentication. These are always active and required for the Service to function.

We also use optional analytics cookies and similar technologies, activated only with your explicit consent, requested via the cookie banner on your first visit. You can decline, or change your choice at any time, and declining does not affect your use of the Service. With consent we use Mixpanel and Google Analytics 4 as described above.

We do not use any advertising or remarketing pixels.

Changes to this policy

We may update this policy from time to time. Continued use of the Service after a change constitutes acceptance of the updated policy.

Contact

If you have questions about this privacy policy, contact us at [email protected]. See also our Terms of Service.