Privacy Policy & Data Protection Disclosure
Graphic Surge CRM ("we", "our", "us") is committed to protecting your privacy and ensuring transparent handling of your personal and business data. This Privacy Policy details how we collect, use, store, and safeguard your data when you use our platform at https://crm.graphic-surge.com.
1Overview of Graphic Surge CRM
Graphic Surge CRM is a multi-tenant client relationship management (CRM) and agency operations platform designed for marketing agencies, sales teams, and service businesses. Our platform provides features including lead management, deal pipeline tracking, automated client communications, service booking management, and financial invoicing.
2Information We Collect
We collect information necessary to provide and improve our CRM services, including:
- Account & Registration Details: Name, business email address, profile avatar, company name, workspace role, and security credentials provided during sign-up or OAuth single sign-on.
- CRM & Pipeline Records: Customer contact profiles, pipeline deal values, interaction notes, tasks, uploaded files, proposals, and invoice records created within your workspace.
- Connected Communications & Integrations: Email threads, calendar appointment events, and message metadata synchronized when you connect third-party accounts (such as Google Workspace or Microsoft 365).
- Technical & Usage Information: IP address, device type, browser specifications, session timestamps, and security audit logs recorded automatically to protect workspace security.
Google API User Data Policy & Limited Use Disclosure
Strict Compliance Declaration
How We Use Google Data:
- User Authentication: Using basic profile scopes (
openid,email,profile) to securely authenticate your account without storing raw passwords. - Google Ads Integration: Accessing ad performance metrics (
https://www.googleapis.com/auth/adwords) to fetch ad campaign names, impressions, clicks, advertising spend, and conversion performance into your CRM Marketing Hub dashboard for Return on Ad Spend (ROAS) tracking. - Email Inbox Synchronization: Accessing read-only Gmail data (
gmail.readonly) to display relevant client email conversations directly within your CRM contact timelines. - Calendar Meeting Sync: Reading calendar schedules (
calendar.readonly) to prevent double-booking when clients schedule meetings through your booking pages.
Data Protection Safeguards:
No Advertising or Data Sales
Google user data is NEVER sold, rented, shared with ad brokers, or used for serving advertisements.
No AI Model Training
Google user data is NEVER used to train generalized artificial intelligence or machine learning models.
4How We Use Information
We process collected data exclusively to operate, maintain, and secure the Graphic Surge CRM platform:
- Providing core CRM features: contact management, lead pipeline tracking, service billing, and appointment scheduling.
- Enforcing workspace access permissions and role-based security boundaries (`ADMIN`, `EMPLOYEE`, `FINANCE_MANAGER`).
- Sending transactional notifications: workspace invitations, invoice receipts, and password resets.
- Maintaining service availability, fraud prevention, and system health monitoring.
Data Storage, Encryption & Security
We implement industry-standard administrative, physical, and technical safeguards to protect your data. All communication between your browser and our servers is encrypted using 256-bit TLS/SSL protocols. Data at rest is encrypted using AES-256 standard encryption within enterprise-grade ISO 27001 certified data infrastructure.
6Data Retention & Deletion Rights
We retain your data for as long as your workspace remains active. You maintain full control over your data:
- Revoking Access: You can disconnect Google integration at any time via Settings or directly through your Google Security Permissions page.
- Account Deletion: Workspace Owners can request full data export or schedule complete workspace deletion from Workspace Settings. Scheduled deletions undergo a 30-day grace period before permanent purge.
Contact & Data Protection Inquiries
If you have questions regarding this Privacy Policy or wish to exercise data access/deletion rights, please contact our privacy compliance team:
Application: Graphic Surge CRM
Website Domain: https://crm.graphic-surge.com
Privacy Contact Email: support@graphic-surge.com