Privacy Policy — Lead CRM

Last updated: 23 July 2026. This policy applies to the Lead CRM web application at https://leadcrm.nrtn.pl. Canonical URL: https://leadcrm.nrtn.pl/privacy

Operator

Lead CRM is operated by Damian Gąska. Privacy contact: prawdziwyek.damian@gmail.com.

Google user data we access

Google account id (sub), email, name, and profile image — to sign you in and identify your Lead CRM workspace.
OAuth access and refresh tokens — stored only on the server, encrypted — to send mail and sync replies on your behalf.
Gmail message content and metadata related to contacts and threads you manage in Lead CRM (outbound mail, replies, bounces).

Why we access this data

Lead CRM uses Google user data solely to provide the product features: authentication, sending outreach email from your mailbox, and detecting replies and delivery failures for leads stored in the app.

Storage and retention

Data is stored in PostgreSQL hosted by self-hosted VPS (nrtn.pl) in region EU. Google tokens are encrypted with AES-256-GCM. We keep data until you delete your account, or longer when required by law.

Sharing and sale

We do not sell user data. We do not share Gmail content with third parties for advertising.

Limited Use — Google API Services User Data Policy

Lead CRM's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide or improve user-facing features. It is not used for serving advertisements, and not used for independent AI/ML model training unrelated to Lead CRM features.

Disconnect and deletion

You can disconnect Gmail or permanently delete your Lead CRM account in Settings. See also Data deletion.

Contact

Privacy questions: prawdziwyek.damian@gmail.com.