Privacy Policy

Last updated: 01/07/2025

1. Introduction

Welcome to Northlightcrm (“we,” “our,” or “us”), operated by a380, inc. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our CRM platform and related services available at northlightcrm.com.

2. Information We Collect

We collect several types of information, including:

  • Account information (name, email, business details)
  • Email metadata (sender/recipient names, subjects, timestamps)
  • Contact and prospect information you input
  • Referrals, Notes, and other CRM data you input
  • Usage data and analytics
  • Communication preferences

3. Google Integration and Data Access

When you connect your Google account, we:

  • Only request minimal necessary permissions:
    • gmail.readonly - to read your email metadata
    • gmail.send - to send emails on your behalf

    We do not store your email body content, attachments, or other sensitive data. We also do not have the ability to EDIT or DELETE emails.

  • Store only essential email metadata:
    • Email subjects
    • Sender and recipient information
    • Timestamps
    • We do NOT store email body content
  • Automatically sync deletions - when you delete emails from your inbox, corresponding metadata is removed from our system
  • Never sell your data to third parties
  • Only share data with AI providers (Google Gemini/OpenAI/Anthropic) for CRM enrichment purposes.

3.1 Important Notice Regarding AI/ML Models and Google Workspace Data

We explicitly affirm that we DO NOT use any data obtained through Google Workspace APIs to develop, improve, or train generalized AI or machine learning models.

  • All Google Workspace API data (including Gmail data) is strictly used for providing our direct services to you and is never used for AI/ML model training purposes
  • While we do use AI services (like Google's Gemini/OpenAI/Anthropic) to enhance your CRM experience, we:
    • Only process specific user-initiated requests
    • Never use Google Workspace data to train or improve AI models
    • Maintain strict data separation between Google Workspace data and AI processing
  • This policy is absolute: under no circumstances will we ever use Google Workspace API data to develop, improve, or train AI/ML models

4. How We Use Your Information

We use the collected information for:

  • Providing and improving our CRM services
  • AI enrichment of email data for enhanced user experience
  • Analytics and performance monitoring
  • Communication about service updates
  • Customer support

5. Data Protection and Security

We implement robust security measures to protect your data:

  • End-to-end encryption for all data in transit and at rest
  • Data stored in HIPAA/SOC2 Type 2 compliant databases
  • Regular security audits and monitoring
  • Strict access controls and authentication
  • Secure OAuth 2.0 implementation for Google integration

6. Your Data Control Rights

You have complete control over your data:

  • Request immediate deletion of all your data at any time
  • Revoke Google integration access whenever you choose
  • Update or correct your stored information

7. Data Sharing and Third Parties

We may share your information with trusted third parties for specific purposes such as:

  • Service providers and technology partners
  • Analytics and performance monitoring services
  • As required by law or to protect our rights

8. Your Rights and Choices

You have certain rights regarding your personal information:

  • Access and update your information
  • Request deletion of your data
  • Opt-out of marketing communications
  • Export your data

9. Changes to This Policy

We will notify users of any material changes to this privacy policy. Continued use of our service after such modifications constitutes acceptance of the updated policy. For significant changes to data processing or additional data collection, we will seek explicit consent before implementing such changes.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: founders@northlightcrm.com

Address: 548 Market Street, PMB 56995, San Francisco, CA 94105