Privacy Policy

Who we are and what this covers

Data&Migration Managment is provided by UAB “EMCSOFT” (company code 305705679), Žirmūnų g. 57-50, LT-09110 Vilnius, Lithuania (“EMCsoft”, “we”). This policy covers the application, its billing connection, the product landing page and related support.

Your organisation decides what spreadsheet and CRM data to use in the application. For personal data contained in those records, your organisation is generally the controller and EMCsoft processes the data to provide the service. EMCsoft is the controller for its own business contacts, support correspondence and service administration. Your organisation is responsible for informing the people whose information it uploads and for having a lawful basis to process it.

Data we process

• Portal and user information: Bitrix24 portal identifier and domain, administrator or user identifiers, authorisation tokens, and the names of employees returned when a CRM field needs a responsible person.
• Files and workspace data: CSV/XLSX files you upload, detected headers, sample values, imported rows, field mappings, saved filters, views, exports, CRM operation history and errors. Files may contain personal data if you put it in them.
• CRM information: available entity types, fields, pipelines, statuses and currency options. The app reads records needed to check an operation and sends selected, reviewed values to Bitrix24 when you confirm creation.
• Billing and support: portal billing identifier, credit balance and transaction status through EMC Billing; messages and contact details you provide when requesting help.
• Technical information: connection details such as IP address, browser information, timestamps and diagnostic records needed to operate and secure the service. The landing page does not add advertising trackers.

How we use data

We process this information to install and authenticate the application, import and organise files, show previews and search results, create the CRM items you approve, display operation history, calculate and charge import credits, provide support, prevent misuse and comply with legal obligations. We do not use uploaded CRM content for advertising or sell it.

Where EMCsoft acts as a controller, the relevant legal basis may be performance of a contract, compliance with a legal obligation or legitimate interests in operating and securing the service. Where we process your organisation’s records on its instructions, your organisation determines the legal basis for that processing.

Optional AI features

If AI search or AI-assisted mapping is enabled for the deployment, the application may send a search query, field names and settings, or limited sample values from candidate columns to OpenAI to suggest a filter or mapping. It does not send the entire uploaded file for these requests. If the AI provider is disabled or unavailable, the app uses its non-AI fallback where supported. Avoid including sensitive personal data in queries or sample columns unless your organisation has approved that use.

Service providers and transfers

We use hosting, database and object storage infrastructure to operate the application; EMC Billing to process credits and show payment history; and OpenAI only when the optional AI provider is enabled. Bitrix24 remains the platform where CRM items are created. These providers receive the information needed for their function. Hosting and optional AI processing may involve transfers outside your country or the European Economic Area, subject to applicable transfer safeguards. Contact us for details relevant to your deployment.

We may also disclose information when required by law or when necessary to protect the service and its users. We do not disclose uploaded records for unrelated marketing.

Retention, security and deletion

Workspace records and uploaded files are kept while the app is installed and needed for the service. When Bitrix24 sends a valid uninstall event, the application deletes the portal’s active workspace records, uploaded file objects and stored portal authorisation. CRM items already created in Bitrix24 remain in your portal and must be managed there. Billing and support records may be retained separately where needed for accounting, legal obligations or dispute handling. Backup copies, if any, follow the infrastructure provider’s backup cycle.

We use HTTPS for service connections, restrict access by portal, and store Bitrix24 access and refresh tokens in encrypted form. No internet service can guarantee absolute security. Portal administrators should limit access to the app and avoid uploading data they are not authorised to process.

Your rights and choices

Depending on applicable law, you may ask to access, correct, erase or export your personal data, restrict or object to processing, or withdraw consent where consent is the basis. If your information is in a customer’s spreadsheet or CRM, first contact that organisation because it controls the content. You may also complain to your local data protection authority, including the Lithuanian State Data Protection Inspectorate where applicable.

We may update this policy as the service changes. The current version and effective date will be published on this page. Material changes will be communicated where required by law.

Contact

For privacy questions or requests, write to emin.m@emcsoft.io or use the EMCsoft contact page. Postal address: UAB “EMCSOFT”, Žirmūnų g. 57-50, LT-09110 Vilnius, Lithuania.

Please include the Bitrix24 portal domain and the nature of your request. Do not send passwords, tokens or complete customer files by email.