Tenant isolation

Each OnPointCRM workspace lives in a separate logical tenant with an always-on database filter. Records stamped with your TenantId are only returned to users authenticated into your workspace. Super-admin access is explicit, time-boxed, and audit-logged on entry and exit.

What we store

• Account + contact records you enter.
• Deal history, pipeline activity, tasks, notes.
• User identities — email, full name, BCrypt-hashed password, last login.
• Audit log — who changed what, with redacted JSON diffs (password hashes, tokens, and card fields stripped automatically).
• Billable-seat snapshots taken daily at 00:00 UTC.
• Invoices — immutable after issue.

What we don't store

• Card numbers — payments flow through Datacap Pay v2 with tokenised references.
• Plaintext passwords.
• Analytics or tracking cookies on the marketing site.

Data residency

OnPointCRM runs on infrastructure located in South Africa. Backups are kept for 30 days rolling.

Your rights

Request an export, correction, or deletion at any time by emailing info@onpointcrm.app. We respond within five business days.