Privacy Policy

This Privacy Policy explains how Lucrum Industries handles information for Lucrum CRM, including optional Google Workspace integrations.

Last updated: May 23, 2026. Lucrum CRM is intended for authorized business users. Google Workspace access is optional and only occurs after a user grants consent.

1. Overview

Lucrum CRM is a customer relationship management platform used to manage business relationship workflows such as accounts, contacts, leads, opportunities, tasks, meetings, calls, cases, calendar activity, and email-related CRM work.

Some Lucrum CRM deployments are private customer environments. Google OAuth and Google API access are handled through a central integration broker/token vault so customer CRM stacks do not store Google refresh tokens.

2. Information we collect

  • Account and profile information: name, business email, role, organization, login/account identifiers, and administrator settings.
  • CRM data: accounts, contacts, leads, opportunities, meetings, calls, tasks, cases, notes, files uploaded by authorized users, and related metadata.
  • Authentication and security information: login events, session/audit logs, IP address, device/browser metadata, access records, and security events.
  • Support information: messages, screenshots, diagnostics, and other details users provide when requesting help.

3. Google user data we may access

Google access is optional. If a user chooses to connect Google, Lucrum CRM may request only the scopes needed for enabled features.

Google areaData categoriesPurpose
Google sign-inGoogle account identifier, email address, basic profile information if granted.Authenticate or identify the connected Google account.
GmailMailbox metadata, labels, headers, snippets, message bodies, attachments if opened/downloaded by the user, send/reply payloads, and explicit message action metadata.Show user-visible email workflows inside CRM and perform user-requested send/reply or mailbox actions.
Google ContactsNames, email addresses, phone numbers, organization/title fields, and other contact fields returned by the People API using requested field masks.Allow users to review, match, link, or create CRM contacts from their Google Contacts.
Google CalendarCalendar event titles, times, attendees, locations, descriptions, conference/link metadata, and sync metadata.Display relevant calendar events in CRM context and support scheduling/relationship workflows.

Lucrum CRM does not automatically create CRM records from Google Contacts, Gmail, or Calendar without user review/selection. Reading email in Lucrum CRM does not automatically change Gmail state.

4. How we use information

  • Provide, operate, maintain, and improve Lucrum CRM features requested by users.
  • Authenticate users, enforce permissions, and protect account security.
  • Display Google Workspace data inside user-visible CRM workflows when a user has connected Google.
  • Perform explicit user-requested actions such as sending email when those features are enabled and the user confirms the action.
  • Provide support, troubleshoot issues, audit system activity, and comply with legal/security obligations.

Google user data is not used for advertising, is not sold, and is not used to train generalized AI or machine learning models.

5. How we share, transfer, or disclose Google user data

Lucrum CRM does not sell Google user data, transfer Google user data to data brokers or advertising platforms, use Google user data for advertising or retargeting, or disclose Google user data for unrelated third-party purposes.

Google user data may be disclosed only in these limited circumstances:

  • Service providers: infrastructure, hosting, security, email delivery, logging, backup, and support vendors may process limited Google user data only as needed to operate Lucrum CRM and the Google integration. These providers are not permitted to use Google user data for their own purposes.
  • Customer-authorized users: data may be visible to the authorized CRM user who connected Google and, where the customer's CRM permissions allow it, to other authorized users in that same customer CRM environment for user-facing CRM workflows.
  • Support and security: Lucrum Industries personnel may access limited Google user data only when needed for customer-requested support, troubleshooting, abuse prevention, security investigation, or service integrity.
  • Legal compliance: data may be disclosed when required to comply with applicable law, regulation, legal process, or enforceable government request.

Lucrum CRM's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Security

We use administrative, technical, and organizational safeguards intended to protect CRM and Google user data. These include access controls, encrypted transport, audit logging, token encryption in the central broker/token vault, separation between customer CRM stacks, and restricted human access.

No system can be guaranteed 100% secure, but we design the Google integration around least privilege, narrow scopes, explicit user actions, and deletion/disconnect support.

7. Google user data retention and deletion

Lucrum CRM keeps Google user data only for as long as needed to provide the connected Google Workspace features, maintain security/audit records, comply with legal obligations, or preserve customer-authorized CRM records.

  • OAuth tokens: Google refresh tokens are stored in the central integration broker/token vault while the Google connection remains active. Tokens are revoked, deleted, or marked inactive when a user disconnects Google, an administrator removes the connection, Google access is revoked, or deletion is requested and verified.
  • Gmail data: Gmail message lists, snippets, headers, message detail, and send/reply payloads are retrieved for user-visible CRM workflows. Lucrum CRM does not make permanent mailbox copies for unrelated use. CRM audit records may retain send metadata, user-selected CRM links, and action history needed to show what the user did in CRM.
  • Contacts and Calendar data: Google Contacts and Calendar data are shown for review and may be retained only when a user chooses to create or link a CRM record, or when retention is needed for audit/security records.
  • Logs and audit records: security, access, OAuth, token-use, revocation, deletion, and explicit user-action logs may be retained to protect the service, investigate abuse, prove compliance, and support customers.
  • Backups: deleted Google tokens and Google-derived active records are removed from active systems after verified deletion. Encrypted backups may retain older copies until normal backup rotation expires. Deletion markers may be retained so removed Google data is not restored into active systems from backup.

Users may disconnect Google in Lucrum CRM, revoke Lucrum CRM from their Google Account permissions page, or request deletion through the instructions at Disconnect and deletion.

8. Your choices and controls

  • Do not connect Google Workspace unless you want Google data available in Lucrum CRM.
  • Disconnect Google from Lucrum CRM or revoke access from your Google Account permissions page.
  • Request access, correction, export, or deletion of personal data where applicable.
  • Contact your organization administrator for account-level CRM data questions.

9. Contact us

Privacy questions: privacy@lucrumindustries.com
Support: support@lucrumindustries.com
Security reports: security@lucrumindustries.com