CRM Alerts Privacy Policy

CRM Alerts is provided by Nemely AB, Drottninggatan 33, 111 51 Stockholm, Sweden. Contact info@nemely.com for questions about this policy or the personal data Nemely handles.

Your organization decides why and how its business data is used, who may access it and how long it is retained. Its own privacy information applies to that processing. Nemely is responsible for the license-validation and direct support information described here; supplying the app does not give Nemely access to your organization’s Dataverse records.

CRM Alerts uses your organization’s Microsoft Entra ID sign-in. Your organization manages the account, authentication rules, access permissions and account closure. Nemely cannot create, reset or delete that account, and we do not receive your Microsoft password.

Microsoft authentication components obtain access tokens so the app can make authorized requests on your behalf. Account identifiers, authentication state and tokens can be stored on your device by the app and Microsoft’s authentication components. Signing out ends the app session; it does not delete your Microsoft account or your organization’s records.

The app fetches business records directly from the Dataverse APIs in your organization’s environment, using your signed-in identity and the permissions your organization grants. Changes you make are sent to that environment. These Dataverse requests and responses do not go through Nemely’s backend, and Nemely does not receive a copy of those records for license validation.

The app may keep records, metadata, preferences and selected feature content locally to display information and support its features. Local storage is different from sending records to Nemely. Protect your device, follow your organization’s device-management rules and review what is visible in widgets or notifications.

Your organization and Microsoft may maintain their own security, access or audit records for Microsoft services. Those are governed by their policies and settings; they are not app-activity tracking operated by Nemely.

The app checks whether you have a valid individual, organization-provided or trial license. If the required information is unavailable, or a license cannot be validated, access to licensed features may be limited. License checks are separate from permission to access your organization’s business records.

We use this verification to administer access to CRM Alerts. It does not include the business records you view, a record-by-record activity history, your Microsoft password or your payment-card details. Apple handles App Store billing.

Like other online services, the license service receives connection information such as an IP address and request time when the app contacts it. Technical request records may be needed to deliver and secure that service.

Nemely does not track how you move through CRM Alerts, which business records you open or the actions you take in your business data. We do not use that activity for advertising, sell your business data or use it to train AI models. License-validation information is operational information, not a history of your work in the app.

Opening a web page, including this policy, is a website visit. The Nemely website has separate privacy and cookie information. Optional website analytics and marketing tools depend on your website cookie choices; they do not give Nemely access to activity elsewhere in the CRM Alerts app.

You can grant or revoke device permissions in iOS Settings. Declining a permission can limit the feature that needs it. A system permission does not give Nemely general access to your device or your organization’s data.

If you connect Outlook, SharePoint, Goava, GetAccept or another optional service, the app communicates with the configured service under the permissions and accounts you use. Follow your organization’s instructions and review that provider’s privacy terms.

If you choose a cloud AI feature, prompts, selected content, tool results and any media needed for your request may be sent to the selected AI provider. This is separate from the direct Dataverse connection and from license validation. An on-device feature and a cloud-provider feature have different data flows. Only use a provider and content that your organization permits.

If you contact Nemely, we receive the contact details, message and any diagnostic material you choose to send. Do not include passwords, access tokens or confidential business records. If a screenshot or example is needed, remove information that is not necessary to explain the issue.

Access to information handled by Nemely is limited to people and service providers who need it for license administration, hosting, security or the support request. Microsoft and Apple process information for the services they operate. Optional providers process the information you or your organization send to their services.

Where Nemely transfers personal data outside the EU/EEA, the transfer must use an applicable adequacy decision or appropriate safeguards, such as Standard Contractual Clauses. Contact us for the recipients, countries and safeguards relevant to your information.

We rely on contract necessity when providing a license directly to you, or our legitimate interest in administering your organization’s license and protecting the service when you use it at work. Handling a support request relies on the relevant contract or our legitimate interest in answering it. Legal recordkeeping obligations may also apply. Where consent is required for an optional use, you can withdraw it.

License information is retained while needed to administer the license, resolve validation or support issues, and meet applicable recordkeeping or legal-claim requirements. Retention depends on the record and purpose; contact us for details of a particular record. Information should be deleted or anonymized when those purposes no longer apply.

To stop using CRM Alerts, sign out and remove the app from your device. Manage or cancel an App Store subscription separately through Apple. Your organization manages the Microsoft account and the business records in Dataverse; uninstalling the app does not delete them. Ask Nemely about deletion of license or support information that we hold.

Depending on the applicable conditions, you may request access, correction, deletion, restriction or portability of personal data, object to processing based on legitimate interests, and withdraw consent. Contact info@nemely.com for information Nemely holds; contact your organization for its account and business records.

We may need proportionate information to confirm your identity. We normally respond within one month and explain any lawful extension or reason a request cannot be fulfilled. For an incorrect license decision, contact us so a person can investigate.

You may complain to the Swedish Authority for Privacy Protection (IMY) or another competent supervisory authority, including where you live or work. You do not have to contact Nemely first.

The date above identifies this revision. We update the policy when relevant app features or processing change and provide additional notice or obtain consent where required.

Read the CRM Alerts Terms & Conditions for subscription, licensing and use of the app.