Security and privacy
Your customers’ data stays yours
A CRM holds other people’s names, emails and phone numbers. Here is how we look after them.
Hosted in the EU
- Everything is stored on our own servers at Hetzner in Falkenstein, Germany.
- Under the GDPR, we are the processor of the data you keep in your CRM. Our data processing agreement is part of our terms.
Each workspace is separate
- Every request is checked against your membership of the workspace, on the server.
- Automated tests try to read and change one workspace’s records from another, and must fail, on every change we make.
- When someone leaves your team and you remove them, their access ends within seconds, on every device.
No passwords to leak
- Sign in with a one-time link sent to your email, or with your Google account (we keep only your name and email address from it).
- Sessions use secure, HTTP-only cookies, scoped to the app’s own address, and everything goes over HTTPS.
- Sign-ins and member changes are recorded in an audit log.
No tracking
- No advertising, no tracking cookies, no selling or sharing your data.
- Our logs never contain your records or full email addresses. The request log keeps IP addresses for 14 days, to find attacks.
Leaving is easy
- Export every record as CSV files in one zip, whenever you like. Any member can.
- Deleted records can be restored for 30 days.
- Deleting a workspace offers you an export first.
Who else touches your data
| Company | What for | Where |
|---|---|---|
| Hetzner Online GmbH | Servers and storage | Germany |
| Mailjet | Sign-in and invitation emails (email address only) | EU |
| Google (Gmail) | Emails you send from the CRM, through your own Gmail, only if you connect it. We can only send, never read your mailbox | USA |
| The AI app you connect (ChatGPT, Claude) | Only if you connect one: the records it reads for you, under your own account with that company. It can’t delete anything or send email | Depends on the app |
| Paddle | Payments and invoices, as merchant of record (billing details only, never your CRM data) | UK |
| Namecheap and Google | Support email, if you write to us | USA |
Questions about security or a data request? Contact us. Our privacy notice: Privacy.
Feel it for yourself
Start your free trial today, or try the live demo first.
Start free trial Try the live demo
7 days free, no card. Then $5 per user a month, billed yearly.