Privacy Policy

GripCRM is a customer relationship management (CRM) system used by businesses ("workspaces") to manage their own leads, contacts, deals, phone calls, and WhatsApp and Facebook Messenger conversations. Each workspace's data is private to that workspace.

Account information: name, email address, and login credentials for people who use GripCRM on behalf of a workspace.

Business data entered by a workspace: contact names, phone numbers, emails, deal/lead details, and notes. This is the workspace's own customer data, entered or imported by that workspace.

Phone call data: call recordings, AI-generated transcripts, and AI-generated call summaries, for workspaces that use our calling integration.

WhatsApp messages: sent and received through a workspace's connected WhatsApp number, for workspaces that use that integration.

Facebook Messenger messages: when a workspace connects its Facebook Page, we receive the messages people send to that Page and the replies sent from GripCRM, together with the sender's Page-scoped ID, name and profile picture as provided by Meta, and the Page's ID and name.

Device information: a push-notification token when you install our mobile app and enable notifications, so we can deliver alerts to your device.

Uploaded files: profile avatars and file attachments you or your workspace add to records.

To operate the CRM: storing and displaying your workspace's contacts, deals, calls, and messages; sending in-app and push notifications you or your workspace configured (e.g. follow-up reminders, mentions).

Facebook Messenger data is used only to show a workspace its own Page conversations and to send the replies its users write. We do not use it for advertising and do not share it with other workspaces.

To generate AI summaries and transcripts of calls, for workspaces that enable this feature, using third-party AI providers under contract with us.

To keep the service secure and reliable, including basic activity logging for troubleshooting.

A business, or a member of its team, may connect a Google Calendar to GripCRM. Connecting is optional and is done by that person, through Google's own consent screen.

What we access. With the person's permission, GripCRM accesses: the list of their calendars, so they can choose which ones GripCRM checks; their free and busy times, so GripCRM and its scheduling assistant only offer times when they are available; events on the calendars they chose (for events whose guests include a customer already in that business's GripCRM account, the title, time, place, video-call link and guest list; for all other events, only the start time, end time and whether the time is busy, unless the person chooses, for a calendar they connected, to share its events' details with their team, in which case the title, place, notes, video-call link and guest list of those events are kept too; events marked private in Google stay busy time only); and the e-mail address of the connected Google account, to show which calendar is connected. Private events are only ever read as busy time, never their content.

How we use it. Only to provide the scheduling features the person sees in GripCRM: showing their meetings with customers on the customer's record and on GripCRM's calendar page, preventing double bookings, booking new meetings into their calendar (including meetings booked by the business's scheduling assistant, under that business's approval settings), and moving or cancelling meetings that were booked through GripCRM. GripCRM never edits or deletes events that were created directly in Google Calendar.

What we do not do. We do not use Google Calendar data for advertising, we do not sell it, we do not use it to build profiles for any other purpose, and we do not let people read it except the business's own team inside its own GripCRM account (and our staff when needed for security, support the business asked for, or the law). We do not use it to develop, improve or train generalized artificial-intelligence or machine-learning models. When a scheduling assistant prepares a reply, the minimum needed (for example the free times to offer) may be sent to our AI providers, who process it on our instructions and do not use it to train their models.

Limited Use. GripCRM's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and security. Calendar data is stored with the rest of the business's GripCRM data, encrypted in transit. The access key Google issues is stored encrypted and is used only by our servers.

Disconnecting and deletion. The person can disconnect at any time in GripCRM, or remove GripCRM's access in their Google Account settings. When they disconnect in GripCRM, we revoke the access key at Google and delete from GripCRM everything that came from their Google Calendar (busy times and meetings created in Google). Meetings booked through GripCRM remain in GripCRM as part of the business's own records; nothing is deleted from their Google Calendar. If access is removed in Google and not restored within 30 days, the same deletion happens automatically.

We use a small number of infrastructure and service providers to operate GripCRM, each processing only what's needed to provide their specific function: cloud hosting and file storage, push notification delivery, AI transcription and summarization for call data, and message delivery through Meta (WhatsApp and Facebook Messenger) for workspaces using those integrations. We do not sell your data to anyone.

We keep account activity logs and record-change history for a limited period to support troubleshooting and account security, after which they are automatically deleted. Your workspace's core business data (contacts, deals, calls) is kept for as long as your workspace is active, or until you delete it.

You can request deletion of your personal account at any time. See our account deletion page, reachable in-app under Settings, or directly at /delete-account. Deleting your personal account removes your login and profile; it does not delete your workspace's shared business data, which belongs to the workspace, not to any one individual.

If you messaged a business's Facebook Page and want that data deleted, ask that business, or write to [email protected] and we will delete it.

Questions about this policy or your data can be sent to [email protected].