Privacy Policy
This policy describes how mSquare Data, LLC processes personal data uploaded by our business customers (data controllers). Last updated: July 28, 2026.
Overview
mSquare Data, LLC ("mSquare," "we," "us") provides business software used by our customers to manage leads, sales, and related workflows. For personal data that our customers upload or sync into the platform, our customers are the data controllers and mSquare acts as a data processor. This Privacy Policy explains how we process that data on their behalf. It does not replace your organization's own privacy notice to your end customers.
Controller and processor roles
Your organization decides why and how personal data about your prospects and clients is collected. You are responsible for lawful collection, transparency to data subjects, and responding to privacy rights requests. mSquare hosts and processes that data only to deliver the service you configure—including storage, search, export, automation, and support—and in accordance with our Data Processing Agreement accepted in the product.
What data is processed
Depending on how you use the platform, we may process: names, email addresses, phone numbers, company names, postal or event locations, dates, free-text notes, tags, pipeline status, communication preferences, file attachments you upload, and technical metadata (such as import timestamps and user IDs of your staff who performed an action). We do not require you to submit special categories of personal data (e.g., health or biometric data); if you do, you must have a lawful basis and appropriate safeguards.
How we use the data
We use customer-uploaded personal data solely to operate, secure, and improve the contracted service: hosting your tenant database, running features you enable, generating exports you request, sending messages you initiate through integrated channels, detecting abuse, and providing customer support. We do not use your end-customer data for our own unrelated marketing. Aggregated or de-identified analytics, if any, will not identify individuals in your tenant.
Storage and security
Data is stored in professionally managed cloud environments with access restricted by role, organization tenancy, and authentication. We use encryption in transit (TLS) for data moving between your browser or integrations and our systems. Encryption at rest is provided by our infrastructure providers using industry-standard methods. Administrative access is logged and limited to personnel who need it for support, security, or legal compliance.
Who has access
Access within your organization is controlled by the accounts and roles you assign. mSquare personnel may access tenant data only when necessary for support, incident response, or legal obligation, under confidentiality duties. We use vetted sub-processors for infrastructure, identity, email delivery, and similar functions; they may access data only to perform services for us and are contractually required to protect it.
Retention and deletion
Each customer organization may configure a data retention period for lead records. We flag records approaching expiry and support deletion workflows you initiate, including organization-wide purge controls in settings. After termination of service, we delete or return data within a reasonable period unless law requires longer retention. Backups may persist for a limited technical window before being overwritten.
Privacy rights
Individuals who want to access, correct, delete, or restrict processing of their personal data should contact the business that collected their information (your organization). We will assist our customers in fulfilling those requests when they instruct us through the platform or support channels. Where applicable law grants you rights against us as processor (e.g., information about sub-processors or safeguards), contact us using the details below.
Security incidents
We maintain procedures to detect, respond to, and notify customers of personal data breaches affecting tenant data without undue delay, including information needed for you to meet regulatory notification requirements. You agree to notify us promptly if you suspect unauthorized access to your account.
International transfers
If personal data is processed in or transferred to countries without an adequacy decision, we implement appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms, consistent with applicable data protection law.
Children
The service is intended for business use and is not directed to children under 16 (or the age required in your jurisdiction). Customers must not upload children's personal data except where lawful and with appropriate consent.
Changes to this policy
We may update this policy to reflect legal, technical, or product changes. We will post the revised version with an updated date. Material changes that affect how we process data on your behalf may also be communicated through the product or to your account administrators.
Contact
Privacy inquiries about mSquare's processing on behalf of customers: privacy@msquaresolutions.co. For data subject requests about information your organization holds, contact that organization directly. We aim to acknowledge privacy requests within ten (10) business days.
Questions? Contact us.