Blox CRMPrivacy Policy
Last updated: 12 October 2026
Who we are
Blox provides Blox CRM. This policy describes how information is handled when you use the CRM. Your organisation manages the customer records it enters and the access it grants to its users.
Information we handle
We handle account and organisation details, CRM records you enter, activities, uploaded documents where enabled, subscription information, and technical and security logs. Connected services may also provide calendar events, email content and metadata, or WhatsApp messages according to the permissions you grant.
How information is used
Information is used to operate CRM features, authenticate users, apply organisation permissions and subscription limits, support connected workflows, resolve support requests, and investigate security or operational issues. Organisations are responsible for having an appropriate basis for the personal data they enter.
Calendar, email and WhatsApp connections
Calendar and mailbox connections are optional and authorised by each connecting user. Authorised data is used for the requested calendar or mailbox features. WhatsApp uses the organisation’s configured business account. You can disconnect personal integrations in the CRM and revoke permissions with Google or Microsoft. Disconnecting does not remove messages or events already held by the external provider or CRM records already saved.
Service providers and disclosure
AWS provides cloud infrastructure. Google, Microsoft and Meta process information when their integrations are used, under their own policies. CRM information may be shared with a service you explicitly connect, including ChatGPT when you use the CRM plugin. Information may also be disclosed where required by applicable law. Cloud processing may take place outside your country; contact us for hosting and data-processing details before submitting data with location restrictions.
Cookies and security
Cookies and browser storage support sign-in, interface language, theme and application preferences. Access controls and protected credentials support service security. No system can guarantee complete protection; keep your credentials secure and report suspected misuse.
Retention and privacy requests
Retention depends on the type of record, service needs, your organisation’s instructions and applicable obligations. This notice does not promise a fixed deletion period. Contact your organisation administrator or Blox to request access, correction, deletion or information about retention. Requests are assessed subject to applicable law, identity verification and the organisation’s authority over its records.
Contact and updates
For privacy enquiries, contact support@blox.bh. We may update this notice as the service changes; the date shown identifies this version.