Privacy Policy
Last updated: 26 August 2026
Tech CRM is a lead management and messaging platform published by Technopek Group. This policy explains what data we collect, why, who we share it with, how long we keep it and how to have it deleted.
1. Who is responsible for your data
Tech CRM, available at https://crm.technopek.com, is published and operated by Technopek Group, a marketing agency headquartered in Agadir, Morocco (offices in Agadir and Casablanca).
Data controller: Technopek Group SARL, Office 32, Galerie Mamounia, 3rd floor, Building C, 80000 Agadir, Morocco.
Contact for any question or request about personal data: contact@technopek.com · phone: +212 6 64 64 53 48. We answer every request within 30 days at the latest.
2. What this policy covers
This policy applies to the crm.technopek.com website, to the Tech CRM application and its mobile interfaces, to the pages our customers publish through the page editor, and to the messaging channels our customers connect to their workspace: WhatsApp Business, Facebook Messenger and Instagram.
It does not apply to third party websites a customer may link to, nor to the Meta platforms themselves, which remain governed by their own policies.
Inside Tech CRM, every customer has an isolated workspace. The customer is the controller of the data of their own prospects; Technopek Group acts as a processor for that data, and as controller for the account data of its users.
3. Account and workspace data
When you create an account, or when our agency creates one for you, we collect:
- First and last name of the user.
- Business email address and phone number.
- Password, stored only as a hash, never in readable form.
- Company name, industry, city and interface language.
- Role inside the workspace (administrator, sales agent, agency).
- Sign-in log: date, time, IP address and browser used.
- Content you enter yourself: lead records, notes, appointments, quotes and invoices, published pages.
4. Data received from Meta platforms
This data only enters Tech CRM if you connect a channel yourself, by approving the connection in the official Meta dialog (Facebook Login for Business or WhatsApp Embedded Signup). As long as no channel is connected, Tech CRM receives no data from Meta.
Platform by platform, here is what we receive:
- WhatsApp Business: the contact's phone number, the name shown on their WhatsApp profile, the content of the messages exchanged with your number (text, images, documents, audio), timestamps and delivery status, and the technical identifiers of the connected WhatsApp Business account and phone number.
- Facebook Page and Messenger: the identifier and name of the connected Page, the conversation identifier and public name of the contact, the content of the messages exchanged with the Page, comments and reactions posted on the Page's posts, and, if you turn that feature on, the answers submitted through lead ad forms.
- Instagram professional account: the identifier and username of the connected account, the identifier and username of the contact, the content of direct messages, and the comments posted under your posts.
5. What we never collect
Tech CRM does not read your friend list, your personal contacts, your private photos, your news feed, or the conversations of any Page, Instagram account or WhatsApp number you have not connected. We request no advertising permission and have access to no ad account.
6. Meta permissions we request, and what each one is used for
When you connect a channel, Meta asks you to grant specific permissions. Below is the complete list of the permissions Tech CRM may request, and exactly what each one enables inside the application. You can revoke them at any time from your Facebook account settings, or by disconnecting the channel inside Tech CRM.
| Permission | What it is used for in Tech CRM |
|---|---|
whatsapp_business_messaging | Receive and send the WhatsApp messages of the business phone number you connected, and show them in your inbox. |
whatsapp_business_management | Read the configuration of the connected WhatsApp Business account: phone number, display name, verification status and approved message templates. |
pages_messaging | Read the Messenger conversations of the Facebook Page you connected and reply to them from Tech CRM. |
pages_show_list | Show the list of Pages you administer so that you can pick the one to connect. No data is read from the Pages you do not pick. |
pages_manage_metadata | Subscribe Tech CRM to the notifications of the connected Page, so that a new message or a new comment arrives in real time. |
pages_read_engagement | Read the comments, reactions and public insights of the posts of the connected Page. |
pages_manage_engagement | Reply to a comment, hide it or delete it from Tech CRM, at your request. |
pages_read_user_content | Read the content published by visitors on the connected Page (comments and visitor posts), so that no enquiry is left unanswered. |
instagram_business_basic | Identify the professional Instagram account linked to the Page: username, profile picture and identifier. |
instagram_business_manage_messages | Read the direct messages of the connected Instagram account and reply to them from Tech CRM. |
instagram_business_manage_comments | Read the comments posted under your Instagram posts and reply to them from Tech CRM. |
7. Our commitments on data obtained from Meta
- Explicit authorisation: we only access this data after you have approved the connection in the official Meta dialog (Facebook Login for Business or WhatsApp Embedded Signup), and only for the phone numbers, Pages and accounts you selected yourself.
- Never sold, never used for advertising: we never sell, rent or share this data with advertisers, data brokers or advertising networks.
- No profiling, no AI training: this data is never used to score or profile people, and never used to train an artificial intelligence model, whether ours or a third party's.
- Service limited use: it is used only to operate the features you have turned on in Tech CRM, namely the unified inbox, lead records, appointments and the statistics of your own activity.
8. Technical data and cookies
- IP address, device type, operating system and browser, for security and troubleshooting.
- Pages viewed inside the application and on the pages published by our customers, together with campaign parameters (utm_source, utm_medium, utm_campaign) when they are present in the link.
- Strictly necessary cookies only: tcrm_session, which keeps your session open, and tcrm_locale, which remembers the language you picked. Tech CRM uses no advertising cookie and sets no third party tracker on its own pages, which is why no consent banner is shown to you.
- On the pages published by a customer, that customer may enable their own Meta or TikTok pixel. The pixel belongs to them, they are responsible for it and must disclose it on their page.
9. Why we process this data
- Performance of the contract: providing the CRM, the inbox, appointments and invoicing to our customers.
- Legitimate interest: securing the service, preventing fraud and abuse, improving the product from aggregated usage statistics.
- Consent: connecting a Meta channel, sending marketing messages, enabling the artificial intelligence assistant.
- Legal obligation: keeping accounting records and answering requests from competent authorities.
10. Hosting, security and retention
Tech CRM is hosted on a dedicated Hostinger server located in the Netherlands, in the European Union. Backups are kept on that same infrastructure.
Traffic between your browser and the service is encrypted in transit with HTTPS, using a Let's Encrypt certificate. The server disk and the backups are protected by access control: only the technical administrators of Technopek Group can reach them, through SSH keys. Passwords are hashed and can be read by nobody, including us.
Retention periods:
- Data from a Meta channel: deleted within 30 days of that channel being disconnected.
- Workspace data: deleted within 30 days of the workspace being deleted or the contract ending.
- Technical sign-in logs: kept for as long as needed to secure the service, then deleted along with the workspace they belong to.
- Invoices and accounting records: kept for the period required by Moroccan law, even after a workspace is deleted. They are stored separately and contain no messages.
11. Sub-processors
We sell no data. We rely on the smallest possible number of providers, each for one precise purpose:
| Provider | Purpose | Processing region |
|---|---|---|
| Hostinger | Hosting of the server, the database and the backups | Netherlands (European Union) |
| Google Workspace | Technopek Group's business email, used for correspondence with customers and for data related requests | European Union and United States |
| Meta Platforms | WhatsApp Business, Messenger and Instagram: delivery of the messages and comments of the channels you connect | European Union and United States |
| OpenAI | Artificial intelligence features (AI agent, assistant, voice-message transcription, comment moderation): only the data needed, when the customer uses these features | United States |
12. Transfers and disclosure to third parties
The transactional emails of the service (account confirmation, password reset) are sent from no-reply@crm.technopek.com by a Postfix server installed on our own machine: they pass through no emailing provider.
Some of the providers listed above may process data outside Morocco and the European Union. Those transfers rely on the contractual commitments and safeguards published by each provider. No other recipient is added without updating this page.
We may also disclose data where Moroccan law requires us to, at the request of a competent authority.
13. Your rights
Under Moroccan law 09-08 on the protection of individuals with regard to the processing of personal data, and in the spirit of the General Data Protection Regulation (GDPR) for people located in the European Union, you have the following rights:
- Access: obtain a copy of the data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask for your data to be deleted.
- Objection: object to processing based on our legitimate interest.
- Restriction: ask for processing to be frozen while a point is verified.
- Portability: receive your data in a machine readable format.
- Withdrawal of consent: at any time, without affecting what was done before the withdrawal.
14. How to exercise your rights
Write to contact@technopek.com from the email address of your account, describing your request. We answer within 30 days at the latest.
If your request concerns the data of a prospect stored in the workspace of one of our customers, we forward it to that customer, who is the controller of that data, and we assist them in answering it within the same deadline.
You may also lodge a complaint with the Moroccan National Commission for the Control of Personal Data Protection (CNDP), or with the data protection authority of your country of residence.
15. Deleting your data
Three routes are open to you: deletion from inside the application, in Settings; disconnecting a Meta channel, which purges the messages and comments synchronised from that channel; or an email request to contact@technopek.com with the subject “Data deletion request”.
The detailed steps, the processing time and what we are legally required to keep are explained on the dedicated page: https://crm.technopek.com/data-deletion
16. Minimum age
Tech CRM is a professional tool reserved for people aged 18 or over. We do not knowingly collect data about minors. If you become aware that a minor has provided us with data, write to contact@technopek.com and we will delete it.
17. Changes to this policy
This page is the authoritative text. Every change is published here with a new update date. When a change affects the nature of the data collected, its recipients or your rights, we notify the administrators of the workspaces concerned by email and through an in-app message before it takes effect.
18. Contact us
Technopek Group SARL, Office 32, Galerie Mamounia, 3rd floor, Building C, 80000 Agadir, Morocco.
Email: contact@technopek.com
Phone: +212 6 64 64 53 48
Service: https://crm.technopek.com
Related documents: terms of service (https://crm.technopek.com/terms) and data deletion (https://crm.technopek.com/data-deletion).