Privacy Policy
Last updated July 2026
This Privacy Policy explains how Cerberus Business Systems collects, uses and protects information when you use the Cerberus Systems CRM. We are committed to handling your information responsibly and in line with applicable Canadian privacy law.
1. Information we collect
We collect:
Account information you provide, such as your name, email address, business name and the plan you choose. Customer Data you enter into the CRM, such as the companies, contacts, notes and activities you manage. Payment information, which is handled by our payment provider; we do not store full card numbers. Usage information, such as log data and basic analytics that help us keep the service secure and improve it.
2. How we use information
We use information to provide and operate the service, authenticate users, process subscriptions, provide support, send service and transactional messages, maintain security, and improve the platform. We do not sell your personal information.
3. Customer Data
The records you enter belong to you. We access Customer Data only as needed to operate the service, to provide support you request, or where required by law. Access by our team to a customer workspace is restricted and logged.
4. Service providers we use
We rely on trusted third parties to run the service, and share only what is needed for each to do its job: hosting and database (Supabase), application hosting (Vercel), transactional email (Resend), and payment processing (our payment provider). These providers are bound to protect the information they handle.
5. Data storage and security
Data is stored with our hosting providers and protected with industry-standard measures, including encryption in transit, access controls and tenant isolation so each customer's workspace is kept separate. No system is perfectly secure, but we take reasonable steps to protect your information.
6. Data retention
We keep account and Customer Data for as long as your account is active. After cancellation we retain data for a limited period to allow reactivation and export, then delete it, except where we are required to keep certain records by law.
7. Your rights
Subject to applicable law, you may request access to, correction of, or deletion of your personal information, and you can export your Customer Data from within the app while your account is active. To make a request, contact us using the details below.
8. International processing
Our service providers may process data in Canada, the United States or other countries. Where information is transferred across borders, we take steps to ensure it remains protected.
9. Cookies
We use essential cookies and similar technologies to keep you signed in and to operate the service. We do not use them to track you across unrelated websites.
10. Children
The service is intended for businesses and is not directed to individuals under the age of majority.
11. Changes to this policy
We may update this policy from time to time. When we make material changes we will update the date above and, where appropriate, notify you.
12. Contact
For any privacy question or request, contact us at robert@cerberusbusinesssystems.com.
