Privacy Policy

Effective Date: 2026-02-01

This Privacy Policy explains how furuCRM Inc. ("furuCRM", "we", "us") collects, uses, discloses, and protects personal information when you (i) visit our website/landing pages, (ii) contact us, or (iii) use our Agent Orchestration Framework provided as a Salesforce unmanaged package (the "Package").

1. SCOPE

This Policy applies to:

• Website/landing page visitors (including contact forms)
• Prospective customers and business contacts
• Customers and authorized users of the Package and related support services

This Policy does not govern third-party services you may use (e.g., Salesforce/Agentforce, reCAPTCHA, analytics providers, web search providers, external APIs). Their practices are governed by their own policies and terms.

2. WHO WE ARE (CONTROLLER / BUSINESS OPERATOR)

Company: furuCRM Inc.
Address: Room 602, Oizumi Shinbashi 2nd Building, 3-11-8 Shinbashi, Minato-ku, Tokyo 105-0004, Japan
Email: sales@furucrm.com
Website: https://www.furucrm.com

Role clarification:

• For website/contact form data, furuCRM acts as the controller (or business operator handling personal information under Japan's APPI).
• For customer business data processed inside your Salesforce org via the Package ("Customer Data"), you (the customer) are typically the controller. furuCRM acts as a service provider/processor only to the extent we receive limited data for support at your request (see Section 5).

3. INFORMATION WE COLLECT

(3.1) Website / Contact Form

We may collect:

• Contact information (e.g., name, company, email, phone)
• Inquiry details (subject, message content, attachments you choose to provide)
• Technical data (IP address, device and browser information, timestamps, referring URLs, pages visited)
• Cookies and similar technologies (see Section 10)

(3.2) Support Communications

If you request support, we may receive:

• Configuration details (metadata settings, package version, environment details)
• Logs or exports you provide (error messages, execution logs, screenshots)
• Limited identifiers needed to troubleshoot (case/ticket identifiers, timestamps)

4. HOW WE USE INFORMATION

We use personal information to:

• Respond to inquiries, schedule consultations, and provide requested information
• Provide support, maintenance, and troubleshooting during the support period
• Manage customer relationships and communications
• Improve our website, materials, and service quality
• Protect security, prevent fraud, and investigate incidents
• Comply with legal obligations and enforce agreements

5. PACKAGE DATA (SALESFORCE UNMANAGED PACKAGE)

(5.1) Customer Data generally stays in your Salesforce org

The Package is deployed into your Salesforce environment. By default, runtime state, stage state, and audit logs are stored in objects within your Salesforce org. Customer business records (e.g., Leads, Contacts, Accounts, Cases, custom objects) remain under your control.

(5.2) What furuCRM does (and does not) store

• By default, we do not collect or store your Salesforce Customer Data on our own servers.
• We access or receive limited information only if you request support and provide it to us (e.g., exported logs, screenshots, configuration details) or grant access for troubleshooting under your instructions.
• We use such information solely to deliver support, troubleshoot issues, and improve service quality.

(5.3) Integrations, callouts, and AI processing

If your workflows call Salesforce services (including Agentforce) or external systems (e.g., web search, enrichment APIs, messaging tools), data may be processed by those providers under their own terms. You control what data is sent and how integrations are configured.

6. LEGAL BASES (WHERE APPLICABLE)

Depending on your jurisdiction, we process personal information under one or more of the following bases:

• Contract / pre-contract steps (e.g., responding to requests, delivering support)
• Legitimate interests (e.g., running our business, improving services, ensuring security)
• Consent (e.g., optional cookies or marketing where required)
• Legal obligations (e.g., compliance, responding to lawful requests)

7. SHARING AND DISCLOSURE

We may share personal information with:

• Service providers (hosting, email delivery, analytics, security) under confidentiality and appropriate safeguards
• Professional advisors (legal, accounting) where necessary
• Authorities or regulators when required by law or to protect rights and safety
• Successors in the event of a merger, acquisition, or asset transfer (with appropriate protections)

We do not sell personal information.

8. INTERNATIONAL DATA TRANSFERS

Your information may be processed in countries other than where you reside (e.g., Japan, Vietnam, Korea or other locations where our teams or service providers operate). Where required, we implement appropriate safeguards for cross-border transfers consistent with applicable laws (e.g., contractual protections and recognized transfer mechanisms).

9. DATA RETENTION

We retain personal information only as long as necessary for the purposes described:

• Website/contact inquiries: for follow-up and relationship management
• Support materials: during the support period and a reasonable time thereafter for troubleshooting, quality assurance, and audit needs
• Security logs: for a limited period to detect and respond to incidents

Retention may be extended where required by law or to resolve disputes.

10. COOKIES, ANALYTICS, AND RECAPTCHA

We may use cookies and similar technologies for:

• Essential website functionality
• Performance and analytics (to understand how the site is used)

We may also use anti-abuse tools such as Google reCAPTCHA on contact forms. These tools may collect technical signals (e.g., IP address, device/browser info) to assess risk.

You can control cookies through browser settings and, where available, cookie controls on our site.

11. SECURITY

We implement reasonable administrative, technical, and organizational measures to protect personal information. No method of transmission or storage is completely secure, but we maintain safeguards appropriate to the risk and our service context.

12. YOUR RIGHTS (WHERE APPLICABLE)

Depending on your jurisdiction, you may have rights such as:

• Access to your personal information
• Correction/rectification
• Deletion/erasure
• Restriction of processing
• Data portability
• Objection to certain processing
• Withdrawal of consent (where processing is based on consent)

13. CHILDREN

Our websites and services are not directed to children under the age of 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children.

14. CONTACT US

For privacy inquiries or requests:

15. CHANGES TO THIS POLICY

We may update this Policy from time to time. Updates will be posted on this page with a revised "Effective Date".