Privacy Policy

1. Introduction & Scope

This Privacy Policy explains how Crump Tech ("we," "us," or "our"), based in Verona, Wisconsin, collects, uses, and protects information when you use CrumpCRM and our marketing website at crumpcrm.com.

We're a small, founder-led company. We built CrumpCRM to help businesses run better — not to harvest data. This policy is written in plain language because we believe you deserve to know exactly what happens with your information.

The short version: We don't sell your data. Ever. Your business data lives in your own isolated database. You own it.

2. Information We Collect

Account Information — When you sign up for CrumpCRM, we collect:

• Name, email address, phone number
• Company name and business details
• Login credentials (passwords are hashed and never stored in plain text)

Business Data — The data you and your team enter into CrumpCRM, including:

• Contacts, accounts, and deals
• Invoices and financial records
• Projects, tasks, and helpdesk tickets
• Documents and file attachments
• Notes, custom fields, and checklist data

This data is stored in your own isolated database — not commingled with other clients' data.

Usage Data — We collect basic usage information such as login timestamps, browser type, and pages visited within the application to maintain security and improve the product.

Cookies — We use session cookies to keep you logged into the application. On our marketing site, we use Google Analytics cookies for aggregate traffic analysis. See Section 6 for details.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve CrumpCRM
• Set up and manage your account
• Process integrations you've enabled (email sending, SMS, invoicing, etc.)
• Communicate with you about your account, support requests, and product updates
• Monitor for security threats and prevent abuse
• Comply with legal obligations

We do not sell, rent, or trade your personal information or business data to third parties. Period.

4. Data Storage & Security

We take the security of your data seriously:

• Isolated databases — Each client gets their own dedicated database. Your data is never mixed with another client's data.
• Encryption at rest — Data is encrypted on disk.
• Encryption in transit — All connections use HTTPS/TLS encryption.
• Cloud hosting — CrumpCRM is hosted on Google Cloud infrastructure with enterprise-grade physical and network security.
• Access controls — Only authorized Crump Tech personnel can access client databases, and only for support and maintenance purposes.

5. Third-Party Services & Integrations

CrumpCRM integrates with third-party services to provide functionality. Data is only shared with these services when you enable the integration:

• Mailgun — Email sending and delivery tracking (opens, clicks, bounces)
• Twilio — SMS messaging
• RingCentral — Phone call integration
• Xero / QuickBooks — Invoice synchronization and accounting
• Kinde — Single sign-on (SSO) authentication
• LinkedIn — Social media posting (OAuth tokens stored securely)
• Meta (Facebook/Instagram) — Social media posting (OAuth tokens stored securely)
• Google Business Profile — Social media posting (OAuth tokens stored securely)
• Google Analytics (GA4) — Used only on our marketing website (crumpcrm.com) for aggregate traffic analysis, not within the CRM application

Each third-party service has its own privacy policy. We encourage you to review them. We only send these services the minimum data required for the integration to function.

6. Cookies & Tracking

CrumpCRM Application — We use a session cookie to keep you authenticated while using the application. This is a functional cookie required for the app to work. No third-party tracking cookies are used within the application.

Marketing Website (crumpcrm.com) — We use Google Analytics (GA4) to understand how visitors find and use our marketing site. GA4 uses cookies to collect aggregate, anonymized data such as page views and traffic sources. This data helps us improve our website — it is not connected to your CRM account in any way.

7. Data Retention

We retain your account information and business data for as long as your account is active. If you cancel your subscription, we retain your data for 30 days to allow for reactivation or data export requests. After that period, your database and all associated data are permanently deleted.

We may retain certain records longer if required by law (such as invoicing or financial records).

8. Data Export & Deletion

Your data is yours. You can:

• Request a full data export — We'll provide your complete dataset in a standard format (CSV/SQL) at any time.
• Request data deletion — Upon account termination, all your data is deleted from our servers within 30 days.
• Request specific record deletion — Contact us to have specific records removed from your database.

To make any data request, email info@crumpcrm.com or call (888) 811-3380.

9. Your Rights

You have the right to:

• Access — Request a copy of the personal information we hold about you.
• Correction — Ask us to correct inaccurate or incomplete information.
• Deletion — Request that we delete your personal information.
• Portability — Receive your data in a structured, commonly used format so you can transfer it to another service.

We respond to all data rights requests within 30 days. Contact us at info@crumpcrm.com.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, and disclose.
• The right to request deletion of your personal information.
• The right to opt out of the sale of personal information — though we do not sell personal information, so there is nothing to opt out of.
• The right to non-discrimination for exercising your privacy rights.

To exercise any of these rights, contact us using the information in Section 14.

11. Children's Privacy

CrumpCRM is a business-to-business platform and is not directed at children under the age of 13. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 13, we will delete it promptly.

12. International Data

CrumpCRM is operated from the United States. If you access our services from outside the US, your information will be transferred to and processed in the United States. By using CrumpCRM, you consent to this transfer and processing.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we'll update the "Effective" date at the top of this page. For significant changes, we'll notify you by email or through a notice in the application.

We encourage you to review this page periodically to stay informed about how we protect your data.

14. Contact Information

If you have questions about this Privacy Policy or how we handle your data, we'd genuinely like to hear from you:

Crump Tech
Verona, Wisconsin
info@crumpcrm.com
(888) 811-3380

Data Protection Contact:
Brad Crump, CEO
info@crumpcrm.com