Privacy Policy
This Privacy Policy explains how Lucrum Industries handles information for Lucrum CRM, including optional Google Workspace integrations.
Last updated: May 9, 2026. Lucrum CRM is intended for authorized business users. Google Workspace access is optional and only occurs after a user grants consent.
1. Overview
Lucrum CRM is a customer relationship management platform used to manage business relationship workflows such as accounts, contacts, leads, opportunities, tasks, meetings, calls, cases, calendar activity, and email-related CRM work.
Some Lucrum CRM deployments are private customer environments. Google OAuth and Google API access are handled through a central integration broker/token vault so customer CRM stacks do not store Google refresh tokens.
2. Information we collect
- Account and profile information: name, business email, role, organization, login/account identifiers, and administrator settings.
- CRM data: accounts, contacts, leads, opportunities, meetings, calls, tasks, cases, notes, files uploaded by authorized users, and related metadata.
- Authentication and security information: login events, session/audit logs, IP address, device/browser metadata, access records, and security events.
- Support information: messages, screenshots, diagnostics, and other details users provide when requesting help.
3. Google user data we may access
Google access is optional. If a user chooses to connect Google, Lucrum CRM may request only the scopes needed for enabled features.
| Google area | Data categories | Purpose |
|---|---|---|
| Google sign-in | Google account identifier, email address, basic profile information if granted. | Authenticate or identify the connected Google account. |
| Gmail | Mailbox metadata, labels, headers, snippets, message bodies, attachments if opened/downloaded by the user, send/reply payloads, and explicit message action metadata. | Show user-visible email workflows inside CRM and perform user-requested send/reply or mailbox actions. |
| Google Contacts | Names, email addresses, phone numbers, organization/title fields, and other contact fields returned by the People API using requested field masks. | Allow users to review, match, link, or create CRM contacts from their Google Contacts. |
| Google Calendar | Calendar event titles, times, attendees, locations, descriptions, conference/link metadata, and sync metadata. | Display relevant calendar events in CRM context and support scheduling/relationship workflows. |
Lucrum CRM does not automatically create CRM records from Google Contacts, Gmail, or Calendar without user review/selection. Reading email in Lucrum CRM does not automatically change Gmail state.
4. How we use information
- Provide, operate, maintain, and improve Lucrum CRM features requested by users.
- Authenticate users, enforce permissions, and protect account security.
- Display Google Workspace data inside user-visible CRM workflows when a user has connected Google.
- Perform explicit user-requested actions such as sending email or changing Gmail message state if those features are enabled.
- Provide support, troubleshoot issues, audit system activity, and comply with legal/security obligations.
Google user data is not used for advertising, is not sold, and is not used to train generalized AI or machine learning models.
6. Security
We use administrative, technical, and organizational safeguards intended to protect CRM and Google user data. These include access controls, encrypted transport, audit logging, token encryption in the central broker/token vault, separation between customer CRM stacks, and restricted human access.
No system can be guaranteed 100% secure, but we design the Google integration around least privilege, narrow scopes, explicit user actions, and deletion/disconnect support.
7. Retention and deletion
CRM records are retained according to customer account needs and contractual/legal requirements. Google OAuth tokens and Google-derived data held by the integration broker are deleted or deactivated when a user disconnects Google, an administrator removes the connection, or deletion is requested and verified.
Some deletion effects may take additional time to age out of encrypted backups. Where backup deletion replay is required, deletion markers are retained so removed data is not restored into active systems from backup.
8. Your choices and controls
- Do not connect Google Workspace unless you want Google data available in Lucrum CRM.
- Disconnect Google from Lucrum CRM or revoke access from your Google Account permissions page.
- Request access, correction, export, or deletion of personal data where applicable.
- Contact your organization administrator for account-level CRM data questions.
9. Contact us
Privacy questions: privacy@lucrumindustries.com
Support: support@lucrumindustries.com
Security reports: security@lucrumindustries.com