GML CRM — Privacy Policy

Effective date: 4 May 2026

Last updated: 4 May 2026

1. About this application

GML CRM (the “App”) is a private, internal customer relationship management application provided by GML India for use by its authorised employees, sales representatives and staff only. The App is not intended for the general public and is not available for self-registration.

2. Account creation & control

All user accounts in the App are created, provisioned and managed exclusively by the GML India system administrator. Users do not sign up, register or create accounts on their own. The system administrator controls:

• Creation, modification and deactivation of user accounts
• Assignment of roles, regions and access permissions
• Linking the company-issued mobile number used to receive the OTP
• Revoking access at any time
• What data each user is allowed to view or edit

Sign-in to the App is OTP-based. A one-time password is sent to the company-provided mobile number linked to your employee account. This SIM/number is issued by GML India for work purposes and is not the employee’s personal number. The App does not require — and cannot be used with — a personal mobile number.

If you are a user of this App, you have been granted access by your employer for work-related purposes. Any concerns regarding your account should be directed to your system administrator or reporting manager.

3. Information we process

The App does not collect personal information from the general public. The information processed inside the App comes from two existing, internal sources:

• Employee information — details such as your name, employee ID, designation, region, reporting hierarchy and contact information. This data is already held by GML India as part of its existing employee records and is provisioned into the App by the system administrator. The App does not gather this information from your device or from any external source.
• Customer contact information — mobile numbers and email addresses of customers are information that the customers themselves have voluntarily provided to GML India during the course of business dealings. This information is owned and maintained by GML India as part of its business records and is used solely for legitimate business communication with those customers.
• Business records — customer accounts, quotations, outstanding payments, projections, tasks and achievements that authorised users record or that are assigned to them. This business data belongs to GML India.
• App account & technical data — the company-provided mobile number on which you receive the OTP for sign-in, OTP verification records, authentication tokens, your activity within the App, and basic technical information such as network status and error logs needed to keep the App working. The mobile number used for sign-in is issued and owned by GML India, not by the employee personally.

The App does not collect contacts, photos, location, microphone, calendar or any personal media from your device. The App does not harvest customer contacts from third parties, public directories or scraped sources. The App does not use advertising identifiers and does not share data with advertising networks.

4. How information is used

• To authenticate authorised employees and keep their sessions secure.
• To allow authorised employees to perform their assigned work within the CRM.
• To enable legitimate business communication with customers using the contact details those customers have provided to GML India.
• To allow management and the system administrator to monitor business performance and ensure data integrity.
• To diagnose and fix technical issues with the App.

We do not sell, rent or share employee or customer information with third parties for marketing purposes. Data is used solely for the internal business operations of GML India.

5. Data storage & security

Data entered through the App is transmitted to GML India’s servers over the internet and stored in infrastructure controlled by GML India. We apply reasonable administrative and technical safeguards including role-based access control, authentication tokens and server-side validation. Despite these measures, no system can be guaranteed to be completely secure.

6. Data retention

Business records (customers, quotations, projections, etc.) are retained as long as required for business and legal purposes. User account data is retained while your account is active and removed or anonymised after the system administrator deactivates the account, in accordance with internal data-retention policies.

7. Your rights

As an authorised user, you may request the system administrator to:

• Review the personal information held in your account.
• Correct inaccurate account information.
• Deactivate your account when you leave the organisation.

Because business data within the CRM belongs to GML India, requests to delete or export business records must be approved by management. See the Account & Data Deletion page for details.

8. Children

The App is not directed to or available for use by children. It is restricted to GML India employees and authorised staff only.

9. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in the App or in legal requirements. The latest version will always be available at this URL. Material changes will be communicated through internal channels.

10. Contact