Privacy Policy

CRM is operated by Hudumika, a Tanzania-based platform of business tools (Sign, Tasks, Ondi, Tuma, and others). This policy covers only this site — crm.hudumika.tz — and reflects what it actually does today, not what the finished product will eventually do. Contact us at crm@hudumika.tz.

CRM is early — a landing page, real sign-in and onboarding, and a first version of the portal (a leads list you can create and update). It does not yet have workflows, deals, or the broader retention/reporting features planned for later. What exists today stores real data in a database, not just a browser cookie. Specifically:

• Signing in with Ondi gives us your name, email address, and profile photo (if your Ondi identity has one). This is read from a signed token issued by Ondi, Hudumika's own identity provider — we never see or handle your password.
• Your account record — name, email, profile photo, and the role/industry you choose during onboarding — is stored in our database, keyed to your Ondi identity, so it persists across sign-ins rather than disappearing when a session ends.
• Leads you create in the portal (name, company, email, phone, value, and stage) are stored in that same database, linked to your account. Only you can see or change leads you own — we scope every query to your account.
• Your session itself — proof that you're signed in — lives in an encrypted, HTTP-only cookie on your device, valid for 30 minutes of inactivity or 12 hours total. The cookie only carries your identity reference; your profile and leads live in the database, not in the cookie. Signing out, or letting the session expire, deletes the cookie; it does not delete your stored data.
• If you email us (via a mailto link on this site, to request early access or ask a question), that message goes to our inbox the same as any email you send — we read it to follow up with you.

One essential cookie: the session cookie described above. No analytics cookies, no advertising cookies, no third-party trackers.

Ondi (Hudumika's own identity provider) for authentication, and our own database infrastructure to store your account and leads. We don't share your information with anyone outside Hudumika.

Under Tanzania's Personal Data Protection Act (Cap. 44), you can ask us what we hold about you, ask us to correct or delete it, or withdraw consent. Signing out ends your session immediately; to have your stored account and lead data corrected or deleted, email crm@hudumika.tz.

As CRM adds workflows, deals, and other features, this policy will be updated to describe what's actually being collected and stored, before each change goes live, not after. Early-access sign-ups will be notified.