Privacy Policy

The security of your data is important to us, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

5.1 Google Data

5.1.1 Use of Google User Data

We access Google user data only for the purpose of providing core CRM functionality. When a user connects their Gmail account, we retrieve email metadata and message content solely to support features such as email parsing, contact management, communication tracking, and sending emails on behalf of the user. We do not use Gmail data for advertising, marketing, or any unrelated purposes.

5.1.2 Gmail API Scopes and Purpose

Our application uses Gmail API scopes exclusively to:

• Read email messages for CRM parsing and workflow automation
• Send emails from the user’s connected Gmail account
• Maintain synchronization between the CRM and the user’s inbox.

We request only the minimum scopes required to perform these functions.

5.1.3 No Selling or Sharing of Data

We do not sell, rent, or share Gmail data with third‑party companies. Gmail data is never used for marketing, lead generation, advertising, or outreach. All data remains strictly within the CRM environment and is used only to provide services the user has explicitly requested.

5.1.4 Limited Internal Access

Access to Gmail data within our organization is strictly limited. Only authorized personnel who require access to maintain or improve the service may view user data, and all such access is logged and monitored. We enforce strict internal policies to prevent unauthorized access or misuse.

5.1.5 Data Storage and Security

Email data retrieved through the Gmail API is stored securely using industry‑standard encryption both in transit and at rest. We implement technical and organizational measures to protect user data from unauthorized access, disclosure, alteration, or destruction.

5.1.6 User Control and Revocation

Users may disconnect their Gmail account at any time. Upon revocation, we immediately stop accessing Gmail data and delete any stored tokens. Users may also request deletion of synced email data from our system, and we will comply promptly.

5.1.7 Compliance with Google API Services User Data Policy

We comply fully with the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to provide or improve user‑facing features within the CRM and is never transferred to external systems except as necessary to operate the service.

5.2 Microsoft Data

5.2.1 Use of Microsoft User Data

We access Microsoft user data only to provide core CRM functionality. When a user connects their Outlook or Microsoft 365 mailbox, we retrieve email metadata and message content solely to support features such as email parsing, communication tracking, workflow automation, and sending emails on behalf of the user. We do not use Outlook data for advertising, marketing, or any unrelated purposes.

5.2.2 Microsoft Graph API Permissions and Purpose

Our application uses Microsoft Graph API permissions exclusively to:

• Read email messages for CRM parsing and workflow automation
• Send emails from the user’s connected Outlook or Microsoft 365 account
• Maintain synchronization between the CRM and the user’s mailbox

We request only the minimum permissions required to perform these functions.

5.2.3 No Selling or Sharing of Data

We do not sell, rent, or share Outlook or Microsoft 365 email data with third‑party companies. Email data is never used for marketing, outreach, lead generation, or advertising. All data remains strictly within the CRM environment and is used only to provide services the user has explicitly requested.

5.2.4 Limited Internal Access

Access to Microsoft user data within our organization is strictly limited. Only authorized personnel who require access to maintain or improve the service may view user data, and all such access is logged and monitored. We enforce strict internal policies to prevent unauthorized access or misuse.

5.2.5 Data Storage and Security

Email data retrieved through the Microsoft Graph API is stored securely using industry‑standard encryption both in transit and at rest. We implement technical and organizational measures to protect user data from unauthorized access, disclosure, alteration, or destruction.

5.2.6 User Control and Revocation

Users may disconnect their Outlook or Microsoft 365 account at any time. Upon revocation, we immediately stop accessing mailbox data and delete any stored tokens. Users may also request deletion of synced email data from our system, and we will comply promptly.

5.2.7 Compliance with Microsoft API Terms and Data Handling Requirements

We comply fully with Microsoft’s API Terms of Use and data‑handling requirements. Outlook and Microsoft 365 data is used only to provide or improve user‑facing features within the CRM and is never transferred to external systems except as necessary to operate the service.