Privacy Policy

Overview

Authentic CRM ("we," "us," or "the Service") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding your data.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and organization name. We also store a securely hashed version of your password.

Content You Provide

The Service stores data you enter, including contacts, companies, interactions, notes, tasks, and uploaded files. This content is yours and you control what you enter.

Automatically Collected Information

We collect standard log data (IP address, browser type, pages visited) to operate and improve the Service. We use cookies for authentication and to remember your preferences.

2. How We Use Your Information

• Provide the Service: Store and display your CRM data, authenticate your sessions, and enable features you use.
• AI Features: When you use AI features (like touch suggestions), your relevant notes and context are sent to our AI provider to generate responses. We do not train AI models on your data.
• Data Enrichment: When you request enrichment for a contact or company, we send limited information (name, LinkedIn URL) to enrichment providers to retrieve publicly available data.
• Communications: Send transactional emails (password resets, invites) and occasional product updates. You can opt out of non-essential emails.
• Improve the Service: Analyze usage patterns in aggregate to fix bugs and improve features.

3. Third-Party Services

We use trusted third-party services to operate the platform:

• Database Hosting: Your data is stored on secure cloud infrastructure (Neon/PostgreSQL).
• File Storage: Uploaded files are stored via UploadThing.
• Payment Processing: Stripe handles payments. We do not store your full credit card number.
• Email: Resend delivers transactional emails on our behalf.
• AI Processing: Anthropic processes AI feature requests.
• Data Enrichment: EnrichLayer provides contact and company data enrichment.
• Address Autocomplete: Mapbox provides address suggestions.
• Gift Sending: Goody facilitates gift orders you initiate.

These providers have their own privacy policies and are contractually obligated to protect your data.

4. Data Sharing

We do not sell your personal data. We share information only:

• With third-party services as described above
• With your team members within your organization
• When required by law or to protect rights and safety
• In connection with a merger or acquisition (with notice to you)

5. Data Security

We implement industry-standard security measures including encryption in transit (HTTPS), secure password hashing, and access controls. Our database provider maintains SOC 2 compliance. While we strive to protect your data, no system is completely secure.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).

7. Your Rights

Depending on your location, you may have the right to:

• Access and export your data
• Correct inaccurate information
• Delete your data
• Object to certain processing
• Withdraw consent where applicable

To exercise these rights, contact us at the email below. We will respond within 30 days.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies. You can disable cookies in your browser, but some features may not work properly.

9. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect information from children.

10. International Transfers

Your data may be processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or through the Service. Continued use after changes constitutes acceptance.

12. Contact Us

For privacy questions or to exercise your rights, contact us at privacy@authentic-crm.com.