CrucialCRM Privacy Policy

Learn how CrucialCRM collects, uses, and safeguards personal and business data across our CRM platform and API services.

Scope and Accountability

This Privacy Policy explains how Phenomena Technologies Inc., operating CrucialCRM, collects, uses, discloses, stores, and protects personal information in connection with the CrucialCRM platform, websites, customer support, billing, communications, and related business operations.

  • Data retention and user privacy protection
  • Google and YouTube API services data compliance
  • Enterprise tenant data isolation and security

Google API Services and Workspace Data Limited Use Compliance

CrucialCRM integrates with Google API Services (Gmail, Google Calendar, Google Drive, and YouTube) to provide CRM email management, calendar synchronization, and digital media publishing. The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

  • Google Workspace APIs are not used to develop, improve, or train generalized AI and/or ML models.
  • Raw, derived, or aggregated Google user data is never transferred to third-party services that use that data to train AI/ML models.
  • Third-party AI integrations (including OpenAI, Anthropic, and Google Gemini API) operate on paid commercial tiers with Zero Data Retention and no-training guarantees.
  • Self-hosted or offline models (such as local Ollama instances) process data strictly within the local, isolated infrastructure and never transmit data to external providers for training.
  • OAuth tokens are encrypted at rest using AES-256 and can be revoked at any time from CrucialCRM Settings or Google Security Settings.