Privacy policy

What we keep#

• Your account: your name, email address and how you sign in.
• What a workspace adds: people, companies and accounts, their fields, notes, tasks, lists, views and workflows.
• What a workspace connects, only once a member connects it:
  • Gmail and Google Calendar: the emails and events with the people in the workspace (senders, recipients, subjects, text, times), so they appear on each person’s timeline; Google Meet transcripts and notes from Google Drive, when allowed.
  • Meta: lead form answers, and the ad they came from.
  • Instagram direct messages (through our provider Zernio).
  • Calendly bookings, Stripe payment events, Slack and Linear, as set up.
• Enrichment: public professional details about a person (job title, LinkedIn, location, photo) found on the web, when the workspace switches it on.
• Basic logs of requests and errors, to keep the service running and secure.

How we use it#

• To run the CRM for the workspace: show, search, sync and send what its members ask.
• AI features (summaries, research, drafts, the in-app AI assistant) send the relevant records to an AI model to produce their answer. That data isn’t used to train models.
• We don’t sell personal data, and we don’t use a workspace’s data for our own marketing.
• Data from Google APIs is used only to provide these features, in line with the Google API Services User Data Policy, including its Limited Use requirements.

Who processes it for us#

Your Company Inc runs the CRM. For the people and conversations a workspace keeps in it, the workspace’s owner decides what is kept and why (they are the controller) and we process it on their behalf. For your own account, we are the controller.

• Supabase (database, sign-in and file storage) and Vercel (hosting).
• Google (Gmail, Calendar, Drive, and Gemini for AI features).
• Stripe (billing) and Resend (email delivery).
• The services a workspace connects: Meta, Calendly, Slack, Linear and Zernio (Instagram).

Some of them process data outside your country, including in the United States, under their standard contractual safeguards.

How long we keep it#

As long as the workspace exists. When an owner deletes a workspace, its data is deleted with it; backups held by our providers expire on their own schedule.

Your choices and rights#

• An owner can export everything in a workspace, or delete it, from Settings › Workspace.
• A member can disconnect their mailbox at any time, from Settings › Mailboxes.
• Anyone emailed from the CRM can unsubscribe with the link in the email, and is never emailed in bulk again.
• If you are in a workspace’s records and want to see, correct or delete what it keeps about you, ask that workspace’s owner, or write to us and we’ll pass it on. You can also complain to your data protection authority.

Security#

Data is encrypted in transit and at rest; connected accounts’ tokens are encrypted separately; each workspace can only see its own data, enforced by the database itself.

Changes#

If we change this policy in a way that matters, we’ll say so in the app before the change applies.