Privacy Policy

CRM.LIMO (“CRM.LIMO”, “we”, “us”) provides marketing software for the limousine, black car and chauffeur industry. Our public website is crm.limo and our partner portal is portal.crm.limo.

This policy covers both. Where we process information on behalf of a customer — for example the contacts, rankings and content belonging to a limo company that subscribes to our platform — that customer is the data controller and we act as their processor.

Our registered address is 1222 SE 47th St., Cape Coral, FL 33904, USA.

Account information

Name, email address, password (stored only as a salted hash), role and permissions, and the activity record of actions taken in the portal, including administrator impersonation events.

Customer business data

When you use the platform we store the business data you or your integrations put into it:

• Client records: business name, website, address, city, phone, email and service subscriptions.
• SEO data: tracked keywords, ranking positions, map ranking results and competitor analysis.
• Content: blog posts, landing pages, generated images, and the pages published to your WordPress site.
• Social media: connected accounts, scheduled posts and their publication status.
• Advertising: Google Ads campaign settings, budgets and performance reports.
• Leads and reservations received through connected integrations.

Technical information

IP address, browser type and version, device and operating system, pages viewed, and timestamps. We use this for security, abuse prevention and diagnosing errors.

What we do not collect

We do not ask for or store full payment card numbers. Billing is handled by our payment processor, and we receive only the transaction result and the last four digits of the card.

• To provide, operate and maintain the platform and the partner portal.
• To authenticate you and enforce the permissions attached to your role.
• To generate the content, landing pages, rankings and reports that you request.
• To publish content to the destinations you connect, such as your WordPress site or social accounts.
• To send service messages: account notices, security alerts and support replies.
• To detect, investigate and prevent fraud, abuse and security incidents.
• To meet legal, tax and accounting obligations.

We do not sell your personal information, and we do not share it with third parties for their own advertising purposes.

Several features generate text and images using third-party AI providers. When you use them, the prompt and the relevant context — for example a business name, city, service list or website URL — is sent to the provider so it can produce the result.

• Do not paste passenger details, payment data or other sensitive personal information into AI prompts.
• AI output can be inaccurate. Review generated content before you publish it.
• Generated content is delivered to you for your own use. You are responsible for checking that it is accurate and does not infringe anyone's rights before publication.

We rely on the following categories of providers to deliver the platform. They receive only the data needed for their function, and only when you use the corresponding feature.

• AI content and images: OpenAI, Google Gemini, Perplexity, Stability AI, Fal.ai.
• Search and ranking data: Serpstat.
• Social media publishing: Postly, LATE, and the networks you connect (Facebook, Instagram, LinkedIn, TikTok, X).
• Google services: Google Ads, Google Analytics, Google Business Profile, Google Maps, PageSpeed Insights.
• CRM and reservations: HighLevel, Limo Anywhere, Zapier.
• Messaging and email: Twilio, Amazon SES, Mailgun, Postmark.
• Infrastructure: Amazon Web Services, Pusher (real-time notifications).
• Flight and airport data: stored airport, airline, and city lists used for trip requests.

When you connect a third-party account, that provider's own privacy policy governs what it does with the data on its side. Disconnecting an integration stops any further transfer.

We disclose information only in these situations:

• To the sub-processors above, to run the features you use.
• To destinations you choose, such as publishing a landing page to your own website.
• For legal reasons, when required by law, subpoena or a valid government request, or to protect our rights, safety or property.
• In a business transfer, if CRM.LIMO is involved in a merger, acquisition or sale of assets. You will be notified before your data becomes subject to a different privacy policy.

We keep account and business data for as long as your account is active. After an account is closed we delete or anonymize the data within 90 days, except where we must retain records longer to meet legal, tax or accounting obligations, or to resolve a dispute.

Application logs and security records are kept for a shorter period and then rotated out.

• All traffic to the portal is encrypted with TLS.
• Passwords are stored as salted hashes and are never recoverable in plain text.
• Access is limited by role-based permissions, and administrator impersonation is logged.
• API credentials for integrations are stored server-side and are never exposed in the browser.

No system is completely secure. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.

Subject to your local law, you can ask us to:

• Access the personal information we hold about you, or receive a copy of it.
• Correct information that is inaccurate or incomplete.
• Delete your personal information.
• Restrict or object to certain processing.
• Withdraw consent where processing is based on consent.

If you are in California, the CCPA/CPRA gives you the right to know what we collect, to request deletion, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by the CCPA.

If you are in the EEA or the UK, the GDPR gives you the rights above plus the right to lodge a complaint with your supervisory authority.

To exercise any of these rights, contact us using the details below. We will respond within the period required by applicable law.

We use a small number of cookies, all of them necessary for the portal to work:

• Session cookie — keeps you signed in while you use the portal.
• CSRF token — protects forms against cross-site request forgery.
• “Remember me” — set only if you tick that box at sign-in.

The public website crm.limo also uses Google Analytics to measure traffic. You can block cookies in your browser, but the portal will not function correctly without the session and CSRF cookies.

The platform is a business tool and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us and we will delete it.

We may update this policy as the platform evolves. The “last updated” date at the top of this page always reflects the current version. If a change materially affects how we handle your personal information, we will notify you by email or through the portal before it takes effect.

For any privacy question or to exercise your rights:

• Address: CRM.LIMO, 1222 SE 47th St., Cape Coral, FL 33904, USA
• Contact form: crm.limo/contact
• Support: available 24/7 through the portal