APROS CRM Privacy Policy

This policy explains how APROS CRM ("APROS") handles the data it receives through its integrations with Meta platforms: Facebook Messenger and Instagram. It covers APROS only. The separate website Privacy Policy explains how we handle data about visitors to apri-code.com.

Who is responsible for the data

APROS is developed and operated by ТОВ «АПРИКОД» (APRICODE LLC, Apricode). Apricode is responsible for the data received through Meta platforms.

• ТОВ «АПРИКОД» (APRICODE LLC), EDRPOU code 41644485
• 9 Rustaveli St., Kharkiv 61001, Ukraine
• email: hello@apri-code.com
• APROS: https://apricode.apros.app

How the integration works

A company that uses APROS chooses which Facebook Page or Instagram account to connect to its APROS workspace. From then on, messages people send to that Page or account arrive in APROS, and the company's team replies to them from the CRM.

We are currently setting up the WhatsApp integration. Once it is enabled for a workspace, this policy will apply to WhatsApp messages in the same way.

What data we receive

• identifiers of the connected Page or account, and identifiers of the people who message it;
• the name and profile photo of the person in the conversation, when Meta provides them;
• message text and attachments sent in the conversation;
• message-related events that Meta sends;
• integration authorization data: the access tokens Meta issues when a company connects its Page or account.

Why we use this data

Only to make the integration work:

• to connect the Pages and accounts the company has chosen;
• to receive messages and send replies on behalf of the connected Page or account;
• to show in the CRM who the conversation is with: their name and profile photo;
• to keep the conversation history in the CRM so the team can see the whole conversation.

AI services

APROS uses Anthropic and OpenAI services for some other features. We do not send conversations received through Meta (messages and attachments), names or profile photos to these services.

Who can see the data

• authorized users in the workspace of the company that connected the Page or account, within the permissions they have been given in APROS;
• the people and systems that maintain the APROS infrastructure, only as far as their tasks require: support, fixing faults and carrying out deletion requests.

Where the data is stored

APROS is hosted by Hetzner Online GmbH (Germany). The data is stored in a PostgreSQL database and in MinIO file storage. Both are part of our own infrastructure, not separate external services.

The data we receive is kept in APROS as conversation history. Disconnecting the integration stops new messages from arriving, but it does not delete the history already stored. We delete it on request, as described on the APROS CRM Data Deletion page.

How we protect the data

• APROS is accessible only over HTTPS, so data between the browser and the server travels over an encrypted connection;
• only authorized users can open a workspace;
• only people who need it for their work have access to the infrastructure.

No method of transmitting or storing data is completely secure, so we cannot guarantee absolute security.

Requests from public authorities

We check every request for data from a public authority to make sure it is lawful, challenge unlawful requests, disclose only the minimum necessary and record every request in a log. In the past 12 months (as of 17 October 2026), we have not disclosed any user data received from Meta to public authorities.

Your rights

You can contact us to:

• find out whether APROS holds data about you and get a copy of it;
• correct inaccurate data;
• delete data;
• revoke APROS's access to your Page or account.

Write to hello@apri-code.com. Emails are read by Apricode's owner and team, and we handle requests manually. You can also lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights.

Data deletion

The APROS CRM Data Deletion page explains how to send a deletion request, what to include in it and how disconnecting the integration differs from deleting data.

Changes to this policy

We may update this policy. The current version is always available on this page, with its effective date at the top.