Privacy for a CRM for contractors

We never store Sheet data on our servers. Names, phones, emails, notes, and follow-up history stay in your Google Sheet and, on your device, in browser storage you can clear.

We do store:

• An encrypted Google refresh token, keyed by an HttpOnly session cookie, so you do not have to reconnect after closing the screen.
• Your Google account email, used only to count free-lead usage and subscription status.
• A count of unique leads you have moved through pipeline stages.
• Active or inactive subscription status from Stripe, when payments are configured.

Google sign-in uses the Sheets, OpenID, and email scopes. Stripe, when enabled, receives the same email so we can match a subscription to your account. We do not sell contact lists.

To stop server-side storage, disconnect Google in Settings. That deletes the session token and leaves your Sheet untouched.