Privacy Policy

1. Who we are

Oxford Intelligence Limited is the provider of OXIQ CRM. For account, service and product administration data, we act as controller. For CRM data entered or connected by a customer organisation, the customer normally determines the purposes of processing and we act as its processor.

2. Data we process

• Account and identity data, including name, work email, organisation, role and authentication identifiers.
• Customer-provided CRM data, including contacts, companies, opportunities, tasks, communications, documents and support records.
• Service and security data, including device, browser, IP address, session, audit, diagnostic and access-control events.
• Optional integration data when an authorised user connects email, calendar or another service.
• Support communications and governed privacy or deletion requests.

3. Why we process data

We process data to provide and secure the service, authenticate authorised users, maintain tenant isolation, deliver requested features, prevent abuse, provide support, meet legal obligations and improve reliability. Where customers enable AI-assisted features, processing is limited to authorised workspace data and governed by the customer’s configuration and user permissions.

4. Legal bases

Depending on the context, processing is necessary to perform a contract, pursue legitimate interests in operating and securing OXIQ, comply with law, or act on consent. Customer organisations are responsible for establishing an appropriate lawful basis for personal data they place in OXIQ.

5. Sharing and international processing

We use vetted infrastructure, authentication, storage, communications and support providers only as needed to operate OXIQ. Data may be processed outside the United Kingdom; where required, we use appropriate contractual and legal safeguards. We do not sell personal data.

6. Retention and security

Data is retained for the customer relationship, configured retention periods and applicable legal requirements. OXIQ uses tenant-scoped access, encryption in transit, role controls and audit records. No online service can guarantee absolute security; suspected incidents should be reported promptly.

7. Your choices and rights

Depending on applicable law, individuals may request access, correction, export, restriction, objection or deletion. Authorised users can submit a governed request from Settings → Privacy & account. Public deletion instructions are available on the account deletion page.

8. Mobile permissions

The mobile apps use network access to connect to OXIQ. Notifications are optional and require device permission. File or camera access is requested only when a user chooses an upload or capture action supported by the device. OXIQ does not use precise location for advertising or tracking.

9. Contact

Privacy and data protection enquiries can be sent to support@oxiq.app. Include the relevant organisation name, but do not email passwords, authentication codes or sensitive CRM exports.