ILA CRMLog in

Privacy policy

Last updated 28 October 2026

ILA CRM is a customer relationship management (CRM) service for real estate agencies, run by ila crm. This policy explains what information ILA CRM handles, why, and the choices you have. Contact support@ilacrm.com with any question about it.

Who is responsible for which data

Agencies sign up to ILA CRM and bring their own leads into it. For those leads, the agency decides what is collected and how it is used, and ILA CRM processes the information on the agency's behalf. For the accounts of people who use ILA CRM (agency admins, marketing managers and agents), ila crm is responsible.

What we collect

  • Account information: name, work email, role, company name and the settings you choose.
  • Lead information: details people submit through an agency's Facebook or Instagram lead forms, CSV files the agency uploads, or leads the agency adds by hand. Typically name, phone number, email and property requirements.
  • Activity: status changes, notes, follow-ups, and taps on Call or WhatsApp, so the agency can see how each lead was handled.
  • Device information: a push notification token for each phone where the mobile app is signed in.

Information from Meta (Facebook and Instagram)

When an agency admin connects their Meta account, ILA CRM uses Meta's APIs with the permissions they grant to:

  • list the Facebook Pages and lead forms the admin manages, so they can choose which ones send leads to ILA CRM;
  • receive and read new leads from those forms, and save them in the agency's ILA CRM account;
  • list the agency's ad accounts, campaigns, ad sets and ads (names and status only), so the agency can choose which ads feed which ILA CRM campaign.

Meta access tokens are encrypted before they are stored and are only used for the purposes above. ILA CRM does not use Meta data for advertising, does not sell it, and does not share it with anyone except the service providers listed below. Our use of information received from Meta APIs follows the Meta Platform Terms.

How we use information

  • to deliver leads to the right agent quickly, and to reassign them when nobody follows up in time;
  • to send notifications and reminders by push, in-app message and email;
  • to show the agency dashboards about its own leads and team;
  • to keep the service secure, fix problems and provide support.

Who can see it

Each agency's data is kept separate from every other agency's, enforced in the database. Inside an agency, admins and marketing managers see all of its leads; agents see only the leads assigned to them.

Service providers

We use these providers to run ILA CRM. They process data only on our instructions:

  • Supabase (database and sign-in)
  • Vercel (web hosting)
  • Inngest (background jobs)
  • Resend (email)
  • Expo (mobile push notifications)
  • Meta (receiving lead ads, at the agency's request)

How long we keep it

We keep an agency's data while its account is open. When an agency closes its account, we delete its data within 30 days, apart from anything we must keep by law. Disconnecting Meta removes the stored Meta tokens straight away.

Your choices and rights

  • You can ask to see, correct or delete your personal information by contacting support@ilacrm.com.
  • If you submitted a lead form, the agency that ran the ad is responsible for your lead. Contact them first; we will help them handle your request.
  • You can remove ILA CRM's access to your Facebook account at any time. See data deletion.

Security

Data is encrypted in transit. Meta tokens are encrypted at rest. Access inside each agency follows the roles above, and passwords are never stored in readable form.

Children

ILA CRM is a business tool and is not meant for anyone under 18.

Changes

If we change this policy we will update the date above, and tell agency admins about important changes by email.