Privacy
Effective October 30, 2026 · updated November 7, 2026 · Applies to Zymbio CRM (crm.zymbiotech.com) · Español
Who is responsible
Zymbio CRM is a product of Zymbiotech, the trade name of Erika Herrmann Carrasco (Mexico). Contact: core@zymbiotech.com.
Who it is for
Companies use it to follow up on their sales prospects. The client company decides who is added; we process that data on its behalf and only to provide the service.
What we store
- Each user (salesperson or manager): name, work email and team. Sign-in is a link sent by email that is valid for 20 minutes; there are no passwords.
- Each prospect: name, company, industry, email, WhatsApp number and, if given, website; plus the notes the salesperson writes.
- Activity: what happened and when (email sent or received, meeting scheduled, proposal sent), not the content. From a received message we keep an excerpt of at most 280 characters so the system knows the prospect's stage and the salesperson can see why.
- Proposals: description, terms, price, discount and version. The email text that goes with a proposal is kept only while it awaits approval and is deleted when it is sent or rejected.
When a company connects its WhatsApp Business account, the CRM receives, through Meta's official platform, notifications of messages to and from its prospects. The same rule as email applies: we keep what happened and when, and from a received message only an excerpt of at most 280 characters. To connect, the salesperson signs in with Meta; we keep their WhatsApp Business account ID and phone number, and the access Meta grants is used at that moment to subscribe the CRM to the notifications and is not stored. We do not import their history or contacts. We do not use this data for advertising, we do not sell it and we do not share it outside the service.
Web form
When a company puts the CRM's form on its website or shares its link, what you write there (name, company, email or WhatsApp and, if you give it, a message of at most 500 characters) reaches a salesperson of that company as a prospect so they can contact you. The message is kept as a note on the prospect, and an excerpt of at most 280 characters as activity: it is what you wrote to the company asking to be contacted. To stop abuse we keep, for 24 hours, a one-way fingerprint (hash) of your IP address, never the address itself, and then delete it. That page sets no cookies.
Who else processes it
- Cloudflare: hosts the CRM, its database and email delivery.
- Workers AI (Cloudflare): turns a salesperson's dictated audio into text (the audio is not stored) and, in test mode, reads the 280-character excerpt to compare its decision with the system's; it decides nothing.
- Meta: carries the WhatsApp messages of companies that connect it.
How long
For as long as the client company keeps its account. When it ends, we delete the data within 30 days, unless the company first asks for a copy.
Deleting your data
If you are a prospect of a company that uses the CRM, or a user, write to core@zymbiotech.com from your email and tell us what you want to see, correct or delete. We answer within 10 business days and notify the company that added you.
Cookies
Only one, to keep you signed in. No advertising or tracking.