Application Privacy Policy

Effective November 6, 2026.

This Application Privacy Policy explains how CRMCopilot.Ai (“CRMCoPilot”, “we”, “us”) collects, uses, shares and protects information when you use the CRMCoPilot application, including the web app, its integrations with other services, and any version of CRMCoPilot installed from a marketplace (together, the “Application”). It supplements our general Privacy Policy, which covers visits to our website. If the two differ, this policy applies to the Application.

CRMCoPilot is provided by CRMCopilot.Ai, 145 Beach Street, Staten Island, NY 10305, USA. Contact: [email protected].

1. Summary

We use the data you give us, and the data in the services you connect, only to provide and improve the features you use.
We do not sell your personal information or the data from your connected accounts.
We do not use data from your connected accounts (for example your CRM or Gmail) for advertising.
You can disconnect any integration at any time, and you can ask us to delete your account data.

2. Information we collect

Account information. Your name, email address, company name, phone number (optional), password or sign-in details, plan and seat information, and the settings you choose.

Billing information. Payments are processed by our payment processor (Stripe). We receive your billing name, billing address, the type and last four digits of your card, and your transaction history. We do not store full card numbers.

Information from services you connect. When you connect a service, you authorize CRMCoPilot through that service’s sign-in and consent screen (OAuth) or by entering an API key. We receive an access token and only the data needed for the features you turn on:

CRMs (GoHighLevel, Zoho CRM, Pipedrive, HubSpot, Salesforce): user and owner names and emails, and records such as contacts, leads, companies or accounts, deals, campaigns, products and activity. We use these to check for existing records before exporting, create the records you send, assign owners, run your agents, show who to contact on your Today page, and show replies and lead activity.
Zoho SalesIQ (optional): if you have it, we read website visitor data through your Zoho sign-in to show live visitors and visit activity.
Gmail: if you connect Gmail, we send the emails you or your sequences send, and we read messages in the threads we sent so we can detect replies and bounces and stop sequences when a prospect replies.
Meet Alfred: if you connect your own Meet Alfred account, we send leads you choose to your LinkedIn campaigns there.
Webhooks and API: data you send to us, or ask us to send to an endpoint you configure.

Content you create. Searches, saved lists, your products and services (Buyer Map), agent and Autopilot settings, sequences, email drafts, video recordings and scripts, notes, and files you import (for example CSV files).

Usage and device information. Pages and features used, credit usage, log data, IP address, browser and device type, and error reports. We use cookies and similar technologies to keep you signed in, secure your account and understand how the Application is used.

Email and video engagement. When you send email or video outreach through the Application, we record opens, replies, bounces, unsubscribes and video views so you can see results and so we can honor opt-outs.

3. Business contact data in our database

CRMCoPilot includes a licensed company and contact database. It contains business information about companies and professionals, such as names, job titles, employer, work email, business phone, company location and company details. We obtain it from licensed data partners and publicly available sources. We provide it to customers for business-to-business sales, marketing and recruiting.

If you are listed and want to see, correct or remove your information, or opt out, email [email protected] with the subject “Data removal”. We will act on your request as required by law, and we will suppress your details so they are not provided to customers again.

4. How we use information

To provide the Application: run searches, score leads, verify emails, run agents and Autopilot, export leads to your CRM, send your outreach and show results.
To manage your account, seats, credits, subscriptions and payments.
To provide support and send service messages, such as receipts, security notices and changes to these terms.
To keep the Application secure, prevent abuse and enforce our terms.
To fix problems and improve the Application, using usage information and, where possible, aggregated or de-identified data.
To send product news and offers, which you can opt out of at any time. We never use data from your connected accounts for this.
To comply with the law.

5. AI features

Some features use AI models, such as AI search, fit scoring, research for emails and video scripts, the sequence builder, Agent Studio and the AI assistant. To produce results, we send the relevant inputs (for example your search, your products and services, and the prospect or company you are researching) to AI model providers that process them on our behalf. AI output can be wrong, so please review it before you rely on it or send it.

6. Google user data

CRMCoPilot’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

We use Gmail data only to send the emails you ask us to send and to detect replies and bounces in those threads, which are features you can see in the Application.
We do not transfer Gmail data to others except as needed to provide or improve those features, to comply with the law, or as part of a merger or acquisition with notice to you.
We do not use Gmail data for advertising, and we do not sell it.
No person at CRMCoPilot reads your Gmail data unless you give us permission (for example for support), it is needed for security or to comply with the law, or it has been aggregated and anonymized for internal operations.

7. How we share information

We do not sell personal information. We share it only as follows:

Services you connect. When you export leads, run an Autopilot agent or send outreach, we send data to the CRM, email account or other service you chose.
Service providers. Companies that help us run the Application, such as hosting and infrastructure, sign-in and authentication, payment processing, email delivery and verification, AI model providers, customer support and analytics. They may use the data only to provide their services to us.
Your team. On team plans, people on your account can see shared catalogs, credits, queues and hand-offs.
Legal and safety. When required by law or legal process, or to protect the rights, safety or property of our users, the public or us.
Business transfers. As part of a merger, acquisition or sale of assets, with notice to you.

8. Your CRM data: our role

For data in your connected accounts and the leads you store with us, you decide what is collected and how it is used, and we process it on your behalf to provide the Application. You are responsible for having a lawful basis to use and contact the people in your data. If you need a data processing agreement, email [email protected].

9. Data retention and deletion

Disconnecting an integration. You can disconnect a service in Settings → Integrations, or revoke access from that service’s own settings (for Google, at myaccount.google.com/permissions). When you disconnect, we delete the access tokens and stop reading data from that service. Records already created in your CRM stay there, because they belong to you.
Deleting your account. Email [email protected] from your account email to ask us to delete your account. We will delete or anonymize your account data, including data copied from your connected services, except where we must keep it to comply with the law, resolve disputes, prevent fraud or keep billing records. Copies in backups are deleted as the backups expire.
Otherwise, we keep information for as long as your account is active and as needed to provide the Application.

10. Security

We use reasonable administrative, technical and organizational measures designed to protect information, including limiting staff access to what they need for their work. Data in transit to and from the Application is sent over HTTPS. No system is completely secure, so we cannot guarantee the security of information. If we learn of a breach that affects your personal information, we will notify you as required by law.

11. Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, to withdraw consent, and to opt out of the sale or sharing of personal information (we do not sell or share it for cross-context advertising). To make a request, email [email protected]. We may need to verify your identity. We will not treat you differently for exercising your rights. If you are in the EU, UK or another region with a data protection authority, you can complain to that authority.

12. International transfers

We are based in the United States, and we and our service providers may process information in the United States and other countries. Where the law requires it, we use appropriate safeguards for these transfers.

13. Children

The Application is for businesses and is not intended for anyone under 18. We do not knowingly collect personal information from children.

14. Changes to this policy

We may update this policy. We will post the new version on this page with a new effective date, and if the changes are significant we will tell you by email or in the Application before they take effect.

15. Contact

Questions or requests about privacy: [email protected], or CRMCopilot.Ai, 145 Beach Street, Staten Island, NY 10305, USA.