Cookie Policy

Cookie Policy of Leaf CRM

This document informs Users about the technologies that help Leaf CRM to achieve the purposes described below. Such technologies allow the Owner to access and store information (for example by using a Cookie) or use resources (for example by running a script) on a User’s device as they interact with Leaf CRM.

For simplicity, all such technologies are defined as "Trackers" within this document – unless there is a reason to differentiate.
For example, while Cookies can be used on both web and mobile browsers, it would be inaccurate to talk about Cookies in the context of mobile apps as they are a browser-based Tracker. For this reason, within this document, the term Cookies is only used where it is specifically meant to indicate that particular type of Tracker.

Some of the purposes for which Trackers are used may also require the User's consent, depending on the applicable law. Whenever consent is given, it can be freely withdrawn at any time following the instructions provided in this document.

Leaf CRM uses Trackers managed directly by the Owner (so-called “first-party” Trackers) and Trackers that enable services provided by a third-party (so-called “third-party” Trackers). Unless otherwise specified within this document, third-party providers may access the Trackers managed by them.
The validity and expiration periods of Cookies and other similar Trackers may vary depending on the lifetime set by the Owner or the relevant provider. Some of them expire upon termination of the User’s browsing session.
In addition to what’s specified in the descriptions within each of the categories below, Users may find more precise and updated information regarding lifetime specification as well as any other relevant information — such as the presence of other Trackers — in the linked privacy policies of the respective third-party providers or by contacting the Owner.

How Leaf CRM uses Trackers

Necessary

Leaf CRM uses so-called “technical” Cookies and other similar Trackers to carry out activities that are strictly necessary for the operation or delivery of the Service.

Trackers managed directly by the Owner

• localStorage (Leaf CRM)

  localStorage allows Leaf CRM to store and access data right in the User's browser with no expiration date.

  Personal Data processed: Tracker.

• sessionStorage (Leaf CRM)

  sessionStorage allows Leaf CRM to store and access data right in the User's browser. Data in sessionStorage is deleted automatically when the session ends (in other words, when the browser tab is closed).

  Personal Data processed: Tracker.

• Direct registration (Leaf CRM)

  The User registers by filling out the registration form and providing the Personal Data directly to Leaf CRM.

  Personal Data processed: billing address, city, company name, country, date of birth, email address, first name, gender, last name, number of employees, password, phone number, physical address, prefix , state, Tracker, Usage Data, various types of Data, website, workplace and ZIP/Postal code.

Trackers managed by third parties

• iubenda Consent Database (iubenda srl)

  The iubenda Consent Database allows to store and retrieve records of Users’ consent to the processing of Personal Data, and information and preferences expressed in relation to the provided consent. In order to do so, it makes use of a Tracker that temporarily stores pending information on the User’s device until it is processed by the API. The Tracker (a browser feature called localStorage) is at that point deleted.

  Personal Data processed: Data communicated while using the service, IP address and Trackers.

  Place of processing: Italy – Privacy Policy.

• iubenda Privacy Controls and Cookie Solution (iubenda srl)

  The iubenda Privacy Controls and Cookie Solution allows the Owner to collect and store Users’ preferences related to the processing of personal information, and in particular to the use of Cookies and other Trackers on Leaf CRM.

  Personal Data processed: IP address and Trackers.

  Place of processing: Italy – Privacy Policy.

  Trackers duration:

  • _iub_cs-*: 1 year
  • _iub_cs-*-granular: 1 year
  • euconsent-v2: 1 year
  • usprivacy: 1 year

• Google reCAPTCHA (Google LLC)

  Google reCAPTCHA is a spam protection service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing.

  Personal Data processed: answers to questions, clicks, keypress events, motion sensor events, mouse movements, scroll position, touch events, Tracker and Usage Data.

  Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.

• Google Tag Manager (Google LLC)

  Google Tag Manager is a tag management service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing.

  In order to understand Google's use of Data, consult their partner policy and their Business Data page.

  Personal Data processed: Tracker and Usage Data.

  Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.

• Cloudflare (Cloudflare, Inc.)

  Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc. The way Cloudflare is integrated means that it filters all the traffic through Leaf CRM, i.e., communication between Leaf CRM and the User's browser, while also allowing analytical data from Leaf CRM to be collected.

  Personal Data processed: Tracker and various types of Data as specified in the privacy policy of the service.

  Place of processing: United States – Privacy Policy.

  Trackers duration:

  • _cfuvid: indefinite
  • cf_clearance: 30 minutes

• Crashlytics (Google LLC)

  Crashlytics is a monitoring service provided by Google LLC.

  Personal Data processed: crash data, device information, Trackers and Universally unique identifier (UUID).

  Place of processing: United States – Privacy Policy.

Experience

Leaf CRM uses Trackers to improve the quality of the user experience and enable interactions with external content, networks and platforms.

Trackers managed by third parties

• Google Fonts (Google LLC)

  Google Fonts is a typeface visualization service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that allows Leaf CRM to incorporate content of this kind on its pages.

  Personal Data processed: Tracker and Usage Data.

  Place of processing: United States – Privacy Policy; Ireland – Privacy Policy.

• Font Awesome (Fonticons, Inc. )

  Font Awesome is a typeface visualization service provided by Fonticons, Inc. that allows Leaf CRM to incorporate content of this kind on its pages.

  Personal Data processed: Tracker and Usage Data.

  Place of processing: United States – Privacy Policy.

• LinkedIn account access (LinkedIn Corporation)

  This service allows Leaf CRM to connect with the User's account on LinkedIn, provided by LinkedIn Corporation.

  Personal Data processed: Tracker and Usage Data.

  Place of processing: United States – Privacy Policy – Opt Out.

• Meta lead ads (Meta Platforms, Inc.)

  Meta lead ads is an advertising and data collection service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing, that allows form-based ads to be shown to Users pre-populated with Personal Data from their Facebook profiles, such as names and email addresses. Depending on the type of advertisement, Users may be requested to provide further information.

  Form submission results in the collection and processing of these Data by the Owner under this privacy policy, and only for the specific purpose outlined on the form and/or inside this privacy policy, where provided.

  Users may exercise their rights, at any time, including the right to withdraw their consent to the processing of their Data, as specified in the section containing information about User rights in this privacy policy.

  Personal Data processed: city, company name, country, Data communicated while using the service, date of birth, email address, first name, gender, last name, marital status, phone number, physical address, profession, state, Tracker and ZIP/Postal code.

  Place of processing: United States – Privacy Policy – Opt out; Ireland – Privacy Policy – Opt out.

• Typeform (TYPEFORM S.L)

  Typeform is a form builder and data collection platform provided by TYPEFORM S.L.

  Personal Data processed: company name, country, Data communicated while using the service, date of birth, email address, first name, gender, geographic position, last name, number of employees, password, phone number, physical address, profession, state, Tax ID, Tracker, username, various types of Data as specified in the privacy policy of the service, VAT Number and website.

  Place of processing: Spain – Privacy Policy.

Measurement

Leaf CRM uses Trackers to measure traffic and analyze User behavior to improve the Service.

Trackers managed by third parties

• Google Analytics (Universal Analytics) (Google LLC)

  Google Analytics (Universal Analytics) is a web analysis service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, (“Google”). Google utilizes the Data collected to track and examine the use of Leaf CRM, to prepare reports on its activities and share them with other Google services. Google may use the Data collected to contextualize and personalize the ads of its own advertising network.

  In order to understand Google's use of Data, consult their partner policy and their Business Data page.

  Personal Data processed: Tracker and Usage Data.

  Place of processing: United States – Privacy Policy – Opt Out; Ireland – Privacy Policy – Opt Out.

• Google Analytics 4 (Google LLC)

  Google Analytics 4 is a web analysis service provided by Google LLC (“Google”). Google utilizes the Data collected to track and examine the use of Leaf CRM, to prepare reports on its activities and share them with other Google services. Google may use the Data collected to contextualize and personalize the ads of its own advertising network. In Google Analytics 4, IP addresses are used at collection time and then discarded before Data is logged in any data center or server. Users can learn more by consulting Google’s official documentation.

  In order to understand Google's use of Data, consult their partner policy and their Business Data page.

  Personal Data processed: number of Users, session statistics, Trackers and Usage Data.

  Place of processing: United States – Privacy Policy – Opt out.

  Trackers duration:

  • _ga: 2 years
  • _ga_*: 2 years

Marketing

Leaf CRM uses Trackers to deliver personalized ads or marketing content, and to measure their performance.

Some of the advertising services used by the Owner adhere to the IAB Transparency and Consent Framework, an initiative that facilitates responsible privacy practices across the digital advertising industry - providing Users with enhanced transparency and control over how their data are used for advertising tracking purposes. Users can customize their advertising preferences at any time by accessing the advertising preferences panel from within the cookie notice or via the relevant link on Leaf CRM.

Leaf CRM participates in the IAB Europe Transparency & Consent Framework and complies with its Specifications and Policies. Leaf CRM uses iubenda (identification number 123) as a Consent Management Platform.

Trackers managed by third parties

• Firebase Cloud Messaging (Google LLC)

  Firebase Cloud Messaging is a message sending service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing. Firebase Cloud Messaging allows the Owner to send messages and notifications to Users across platforms such as Android, iOS, and the web. Messages can be sent to single devices, groups of devices, or specific topics or User segments.

  Personal Data processed: Trackers and various types of Data as specified in the privacy policy of the service.

  Place of processing: United States – Privacy Policy; Ireland – Privacy Policy; United States – Privacy Policy; Ireland – Privacy Policy; Canada – Privacy Policy; Canada – Privacy Policy; Brazil – Privacy Policy; Brazil – Privacy Policy; United Kingdom – Privacy Policy; United Kingdom – Privacy Policy; Belgium – Privacy Policy; Belgium – Privacy Policy; Switzerland – Privacy Policy; Switzerland – Privacy Policy; Germany – Privacy Policy; Germany – Privacy Policy; India – Privacy Policy; India – Privacy Policy; Singapore – Privacy Policy; Singapore – Privacy Policy; Indonesia – Privacy Policy; Indonesia – Privacy Policy; Hong Kong – Privacy Policy; Hong Kong – Privacy Policy; Taiwan – Privacy Policy; Taiwan – Privacy Policy; Japan – Privacy Policy; Japan – Privacy Policy; Australia – Privacy Policy; Australia – Privacy Policy; Korea, Republic of – Privacy Policy; Korea, Republic of – Privacy Policy.

• OneSignal (Lilomi, Inc.)

  OneSignal is a message sending service provided by Lilomi, Inc.

  OneSignal allows the Owner to send messages and notifications to Users across platforms such as Android, iOS, and the web. Messages can be sent to single devices, groups of devices, or specific topics or User segments. Depending on the permissions granted to Leaf CRM, the Data collected may also include precise location (i.e. GPS-level data) or WiFi information, apps installed and enabled on the User's device. Leaf CRM uses identifiers for mobile devices (including Android Advertising ID or Advertising Identifier for iOS, respectively) and technologies similar to cookies to run the OneSignal service.

  The Data collected may be used by the service provider for interest-based advertising, analytics and market research. In order to understand OneSignal's use of Data, consult OneSignal's privacy policy.

  Push notifications opt-out Users may in most cases opt-out of receiving push notifications by visiting their device settings, such as the notification settings for mobile phones, and then changing those settings for some or all of the apps on the particular device.

  Interest-based advertising opt-out Users may opt-out of OneSignal advertising features through applicable device settings, such as the device advertising settings for mobile phones. Different device configurations, or updates to devices, may affect or change how these indicated settings work.

  Personal Data processed: email address, geographic position, language, Tracker, unique device identifiers for advertising (Google Advertiser ID or IDFA, for example), Usage Data and various types of Data as specified in the privacy policy of the service.

  Place of processing: United States – Privacy Policy – Opt out.

  Trackers duration:

  • ONESIGNAL_HTTP_PROMPT_SHOWN: indefinite
  • ONE_SIGNAL_SDK_DB:Ids: duration of the session
  • ONE_SIGNAL_SDK_DB:Options: duration of the session
  • isPushNotificationsEnabled: duration of the session
  • onesignal-pageview-count: indefinite
  • os_pageViews: duration of the session

• Brevo email (SendinBlue SAS)

  Brevo email is an email address management and message-sending service provided by SendinBlue SAS.

  Personal Data processed: email address, Trackers and Usage Data.

  Place of processing: France – Privacy Policy.

• Google Ad Manager (Google LLC)

  Google Ad Manager is an advertising service provided by Google LLC that allows the Owner to run advertising campaigns in conjunction with external advertising networks that the Owner, unless otherwise specified in this document, has no direct relationship with.

  This service uses Cookies and similar identifiers, including information transmitted automatically such as Users' IP addresses, to identify Users' devices and to track use of Leaf CRM and User behavior concerning ads, products and services offered.

  Users may manage their advertising preferences and disable advertising Cookies via Google Ad Settings. Please note that this may not prevent Users' devices from being identified on the basis of information transmitted automatically, such as their IP address.

  In order to understand Google's use of Data, consult their partner policy and their Business Data page.

  Personal Data processed: Trackers and Usage Data.

  Place of processing: United States – Privacy Policy.

  Trackers duration:

  • Conversion: 3 months
  • DSID: 14 days
  • FCNEC: 1 year
  • FLC: 10 seconds
  • FPAU: 3 months
  • FPGCLAW: 3 months
  • FPGCLDC: 3 months
  • FPGCLGB: 3 months
  • GCL_AW_P: 3 months
  • GED_PLAYLIST_ACTIVITY: duration of the session
  • IDE: 2 years
  • NID: 6 months
  • RUL: 1 year
  • __gads: 2 years
  • __gpi: 2 years
  • __gpi_optout: 2 years
  • __gsas: 2 years
  • _gac_: 3 months
  • _gac_gb_: 3 months
  • _gcl_ag: 3 months
  • _gcl_au: 3 months
  • _gcl_aw: 3 months
  • _gcl_dc: 3 months
  • _gcl_gb: 3 months
  • _gcl_gf: 3 months
  • _gcl_gs: 3 months
  • _gcl_ha: 3 months
  • ar_debug: 3 months
  • id: 2 years
  • receive-cookie-deprecation: 6 months
  • test_cookie: 15 minutes

How to manage preferences on Leaf CRM

Users can set or update their preferences via the relevant privacy choices panel available on Leaf CRM.

With regard to any third-party Trackers, Users can manage their preferences via the related opt-out link (where provided), by using the means indicated in the third party's privacy policy, or by contacting the third party.

How to control or delete Cookies and similar technologies via your device settings

Users may use their own browser settings to:

• See what Cookies or other similar technologies have been set on the device;
• Block Cookies or similar technologies;
• Clear Cookies or similar technologies from the browser.

The browser settings, however, do not allow granular control of consent by category.

Users can, for example, find information about how to manage Cookies in the most commonly used browsers at the following addresses:

• Google Chrome
• Mozilla Firefox
• Apple Safari
• Microsoft Internet Explorer
• Microsoft Edge
• Brave
• Opera

Users may also manage certain categories of Trackers used on mobile apps by opting out through relevant device settings such as the device advertising settings for mobile devices, or tracking settings in general (Users may open the device settings and look for the relevant setting).

How to opt out of interest-based advertising

Notwithstanding the above, Users may follow the instructions provided by YourOnlineChoices (EU and UK), the Network Advertising Initiative (US) and the Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan) or other similar services. Such initiatives allow Users to select their tracking preferences for most of the advertising tools. The Owner thus recommends that Users make use of these resources in addition to the information provided in this document.

The Digital Advertising Alliance offers an application called AppChoices that helps Users to control interest-based advertising on mobile apps.

Consequences of denying the use of Trackers

Users are free to decide whether or not to allow the use of Trackers. However, please note that Trackers help Leaf CRM to provide a better experience and advanced functionalities to Users (in line with the purposes outlined in this document). Therefore, if the User chooses to block the use of Trackers, the Owner may be unable to provide related features.

Owner and Data Controller

Red Ant Technology Sdn Bhd
E-10-08, Block E, Oasis Ara Damansara,
2, Jalan PJU1A/7A, Ara Damansara,
PJU 1A, 47301 Petaling Jaya, Selangor,
Malaysia

Owner contact email: legal@leafcrm.com

Since the use of third-party Trackers through Leaf CRM cannot be fully controlled by the Owner, any specific references to third-party Trackers are to be considered indicative. In order to obtain complete information, Users are kindly requested to consult the privacy policies of the respective third-party services listed in this document.

Given the objective complexity surrounding tracking technologies, Users are encouraged to contact the Owner should they wish to receive any further information on the use of such technologies by Leaf CRM.