Privacy & data

Know where your information lives.

How Reo CRM handles information, shared access and privacy requests.

Version 2026-10-07 · Effective October 7, 2026

Reo CRM is the service at reocrm.com, independently operated by an individual under the Reo CRM name. “Reo,” “we” and “us” refer to that operator. Contact support@reocrm.com for general, privacy and workspace matters, or billing@reocrm.com for billing matters.

Information we handle

You and workspace members provide account details, requests, invitations, CRM records and support messages. These may include names, email addresses, contact details, business records, notes and history about people who do not have Reo accounts. Authentication, hosting and security providers also process technical information such as connection, device/browser and request signals. Billing adds subscription and payment references/status for enrolled workspaces.

We use information to provide the CRM, manage access, send transactional emails, handle support and authorized billing, protect the service, maintain recovery copies and meet applicable legal requirements. Restricted declaration and agreement records contain user identifiers, versions, server timestamps and relevant snapshots or links. Those evidence tables do not collect passwords, tokens, IP addresses, fingerprints or payment details.

Billing is available to newly created workspaces. Existing workspaces keep their current billing status. Payment details go through Stripe’s hosted flow; paid subscriptions require explicit authorization. Reo’s application forms do not collect full card details.

Access and sharing

Active workspace members can read shared records. Owners administer membership and assignments; changes follow permissions. Removed members lose access but contributed records remain. Invitation recipients can see the invited workspace’s name, declaration summary and access notice before joining, without CRM records or other members’ emails.

The operator and service providers may access information as needed to operate, support, secure or recover Reo and meet applicable requirements. Current providers include Cloudflare for hosting, anti-abuse, website analytics and recovery storage; Supabase for authentication/database services; Resend for transactional email; and GitHub Actions for restricted temporary backup processing. Stripe processes payments for enrolled workspaces. US availability does not guarantee US-only processing or storage.

We do not use workspace records for advertising. We may disclose information when required by law or necessary to address fraud, security incidents or disputed access, subject to applicable requirements. A claimant does not automatically receive workspace access or records.

Cookies, browser signals and security

Account/session/security functions use cookies; the display preference uses local storage. The marketing site uses cookieless Cloudflare Web Analytics. Turnstile and hosting security processing are separate from analytics and may process technical signals. These providers can receive information when you use Reo. Reo’s application does not currently change its collection in response to a browser’s “Do Not Track” signal.

Access controls, workspace permissions, restricted evidence and encrypted recovery archives help protect information; perfect security and recovery are not guaranteed. Acknowledging this notice records receipt, not consent to advertising or unrestricted processing.

Retention, choices and requests

Information is kept as needed for the service, including retained workspace history, authorized requests, security, disputes and legal obligations. Cancellation and member removal do not automatically delete shared records. Information need not be kept permanently; removal from active use and erasure from recovery copies are separate steps. We do not promise immediate deletion from every backup.

Self-service export, retention settings, workspace deletion and account deletion are unavailable. Request access, correction, deletion or information about applicable privacy rights at support@reocrm.com. We review identity, scope, authority, other people’s rights and applicable requirements; product limits do not remove legal rights. We may ask for limited verification information. Never send credentials or unnecessary customer records.

Reo is intended for account holders aged 18 or older. Report an apparent underage account to support; the review must also protect other people’s workspace records.

Changes are posted with an updated version and effective date, with additional notice where law requires. General/privacy/workspace contact: support@reocrm.com. Billing and charge-review contact: billing@reocrm.com.

Document handling

Document uploads are available on Accounts and Opportunities. Uploaded files and their filename, size, uploader, and timing belong to the company workspace. Active workspace members can list and download ready documents; the account’s responsible salesperson or an Owner can upload, rename, and remove them, subject to workspace access and billing permissions. Renaming changes the displayed filename, not the file contents or original upload record.

Only supported document formats are accepted, with limits of 25 MiB per file and 250 MiB per workspace, including in-progress uploads and removals awaiting cleanup. Downloads are delivered as attachments. Reo does not provide malware scanning.

Removal hides a file from ordinary workspace access while cleanup proceeds. Encrypted recovery copies may remain under the 90-day recovery retention policy, which starts when a copy is retired from active recovery storage, not necessarily when you remove the file. Processing delays can extend the time after removal; no fixed removal-to-erasure deadline or immediate permanent erasure of every recovery copy is promised. Document metadata and audit history are retained.