DHDigi Hook CRM

Privacy policy

Last updated: 15 September 2026

This policy explains how Digi Hook (“we”, “us”) handles personal data in the Digi Hook CRM at crm.digihookrealty.com (the “CRM”). The CRM is used by real-estate businesses (our “clients”) to receive and follow up enquiries from people interested in their projects.

1. Who is responsible for what

When a person submits an enquiry to one of our clients — for example through a Facebook or Instagram lead form, or the client’s website — that client decides how the enquiry is used. We process it on the client’s behalf, to run the CRM for them. For the accounts of people who use the CRM (client admins and their staff), and for our own website and business, we are responsible.

2. What we collect

People who enquire about a property (leads)

  • Name, phone number, email address and city, as entered in the enquiry form.
  • Answers to the form’s questions, such as budget, preferred project, unit type and when they plan to buy.
  • Which ad, ad set, campaign and form the enquiry came from, and when it was submitted.
  • Follow-up records added by the client’s team: call outcomes and times, notes, site visits, the lead’s stage and messages sent.

People who use the CRM

  • Name, phone number, email address (optional), role and Login ID.
  • A scrambled (hashed) copy of the password — never the password itself.
  • Activity in the CRM: sign-in times, calls dialled from the app and how long the dialler was open, and changes made to leads. Password resets and certain admin actions are kept in an audit log.
  • If they allow notifications, a push-notification address for their browser or phone.

When a client connects Facebook

  • An access token from Meta, the IDs and names of the Facebook Page, ad account and business they choose to share, and the ad spend and performance figures for that ad account. Access tokens are stored encrypted.

3. How we use it

  • To deliver each enquiry to the client and assign it to a member of their team.
  • To let the client’s team call, message and track their leads.
  • To show the client reports: how many leads came from each ad, what each lead, site visit and booking cost, and how quickly their team responded.
  • To sign people in, keep accounts secure, and investigate misuse.
  • To send notifications about new leads, missed follow-ups and weekly summaries.

We do not sell personal data, and we do not use leads for our own marketing.

4. Who we share it with

  • The client whose form or page the enquiry came from. One client never sees another client’s data.
  • Meta Platforms, when a client has connected Facebook and switched on the Conversions API: we tell Meta when a lead moves to a stage such as contacted, site visit or booked, so the client’s ads can reach similar people. Contact details sent for this are hashed (scrambled one-way) before they leave our servers.
  • Service providers who run parts of the CRM for us: our server hosting provider, browser push-notification services (for example from Google, Apple or Mozilla) to deliver notifications, and — only if a client sets one up — a WhatsApp or SMS provider to send messages.
  • Authorities, where the law requires it.

5. How long we keep it

We keep a client’s data for as long as their CRM account is active, so their history of leads and follow-ups stays available to them. When a client closes their account, or asks us to, we delete their leads and related records, except anything we must keep by law. Database backups are overwritten on a rolling basis.

6. How we protect it

  • All connections to the CRM use HTTPS.
  • Each client’s data is kept separate, and staff see only the leads assigned to them.
  • Passwords are hashed; Meta access tokens are encrypted.
  • Only an admin can issue or reset a password, and a reset signs out every session that used the old one.

7. Your rights

Under India’s Digital Personal Data Protection Act, 2023 and other applicable laws, you can ask to see the personal data held about you, have it corrected or deleted, and withdraw consent you have given. If you enquired with one of our clients, you can contact them directly, or write to us and we will pass your request on and help them act on it.

To delete your data, see data deletion instructions.

8. Contact and grievances

For questions or complaints about this policy or your data, write to our grievance contact at contact@digihook.in with the subject “Privacy”. We acknowledge requests within 72 hours and respond within 30 days.

9. Changes

If we change this policy, we will update the date at the top of this page. Significant changes will also be shown to CRM users when they sign in.