Internal organizational system

Privacy Policy

What information CRMC1 uses, why it is used, and how to contact the administrator.

Last updated

1. Who this system is for

CRMC1 is an internal customer relationship management system operated by Capital One Real Estate for employees and authorized personnel. It is not a public self-service CRM. Reading this notice does not grant access to customer records or workspaces.

2. Information accessed and stored

Account information includes name, email, profile image, supplied contact details, roles, account status, and company or project access. Google Sign-In information authenticates and associates authorized accounts. Google does not provide your Google Account password to this CRM.

Authorized users and configured intake channels may supply Lead and contact information, interests, follow-up results, appointments, sales information, notes, and attachments. Call history and recordings may be processed when the relevant integration is enabled.

Operational and security records include the acting user, timestamps, changes, Audit Logs, and request information such as IP address or browser information where recorded.

3. Purposes of use

Information supports Lead management and assignment, customer contact and follow-up, appointments, sales records, reporting, and authorized internal coordination. It also supports authentication, access control, security, troubleshooting, and review of changes.

Google information obtained for authentication is not used to sell data, serve personalized advertising, or train general-purpose AI models. Use of information received from Google APIs must adhere to the Google API Services User Data Policy, including applicable Limited Use requirements.

Google API Services User Data Policy

4. Access and disclosure

Users and administrators access information according to roles, companies, projects, and permitted record scope. Contact information and call recordings require particular care. Related access and actions are subject to the system's controls and audit mechanisms.

Information may be processed by configured hosting, file storage, and integration providers, including Google for sign-in, Lead intake channels, and telephony services, according to enabled functions. Authorized personnel may export or disclose information for approved business purposes; disclosure may also be required by applicable legal obligations.

An email address recorded on a Lead or appointment does not, by itself, authorize automatic invitations or disclosure to that person.

5. Cookies and device preferences

Cookies and browser storage support sign-in, security, language, selected company or project, and display preferences. Blocking or clearing them may require you to sign in again or reselect preferences.

6. Google Calendar — not yet enabled

Google Calendar integration is not currently enabled in CRMC1. This feature does not currently send Appointments or invitation emails. Signing in with Google is not permission to manage your Calendar.

If enabled in the future, account holders will be asked for necessary permissions separately. Appointment information, times, location, details, and selected attendees would be used to create, update, or cancel events in an authorized Calendar. Invited attendees may receive appointment details; check recipients before sending. Customer emails on Leads will not be invited automatically.

Before activation, the organization must review these disclosures against the implemented permissions, information and tokens stored, security measures, retention, and disconnection process. This description does not mean the feature is active or verified by Google.

7. Retention and deletion

Information is retained as necessary for business purposes, security, auditability, and applicable obligations. Periods and conditions can differ by data type. Disabling an account, deleting a Lead, or revoking Google access does not immediately remove all business records, Audit history, or backups.

Correction and deletion requests are assessed against the requester's authority, organizational obligations, and system or backup limitations. This notice does not prescribe one deletion period for every type of information.

8. Security

Authentication, role-based access, and audit records help reduce unauthorized access or changes. Users must protect their accounts and must not share customer information, call recordings, or internal links with unauthorized persons. No system can guarantee absolute security.

9. Information requests and Google permissions

Contact the administrator below to ask questions or request access, review, correction, or deletion. Identity, authority, and applicable requirements are checked before action. A request does not guarantee that every action is available or can be completed immediately.

You can manage or revoke app permissions in your Google Account. Revocation may affect sign-in or related features; it does not automatically delete CRM records.

Manage connections in your Google Account

10. Administrator and updates

System administrator: Capital One Real Estate. Contact it@capitalone.in.th with the subject and relevant data category. Do not send passwords, Client Secrets, or unnecessary customer information.

This notice may change when data practices or services change. Its revision date is displayed on this page. New uses of Google information require appropriate notice and any necessary additional authorization. This page is not automatic certification of Google verification or legal compliance.