Privacy Policy

• Account Information: When you create an account, we collect your name, email address, and password (stored in hashed form only — we never store plaintext passwords).
• Billing Information: When you purchase a subscription or credits, payment processing is handled entirely by Stripe, Inc. We do not store your credit card number, CVV, or full card details on our servers. We receive and store a Stripe Customer ID, subscription status, and transaction history.
• Business Information: If you use the AI configuration features, you may provide business descriptions, knowledge base content, rules of engagement, and other business context. This information is stored to power the AI assistant features you configure.
• Support Communications: If you contact us for support, we collect the information you provide in your communications.

When you connect your CRM account to PrimeOverview, we access and cache data from your CRM to power the dashboard. This may include:

• Contact records (names, email addresses, phone numbers, tags, custom fields)
• Conversation and message history
• Pipeline opportunities and deal information
• Calendar appointments and scheduling data
• Invoice and payment transaction records
• Campaign and marketing data
• Form and survey submissions
• Workflow configurations

This CRM data is accessed via authenticated OAuth 2.0 connections that you explicitly authorize. You can revoke this access at any time by disconnecting your CRM from the Settings page. Upon disconnection, cached CRM data is removed from our systems within 30 days.

• Usage Data: Pages visited, features used, clicks, session duration, and interaction patterns within the application.
• Device Information: Browser type and version, operating system, device type, screen resolution.
• Log Data: IP address, access timestamps, referring URLs, and server logs for security and debugging purposes.
• Cookies: We use essential cookies for authentication (session tokens) and preference storage (sidebar state, active location). We do not use third-party advertising or tracking cookies.

When you use PrimeOverview's AI assistant features, the text you type into the AI chat and the CRM context provided to the AI (contact details, conversation history, pipeline data) are sent to our AI provider (Anthropic) for processing. Anthropic processes this data solely to generate responses and does not use it to train their models. See Section 5 for details on AI data handling.

We use third-party service providers who process data on our behalf:

Each provider is bound by their own privacy policies and data processing agreements. We select providers that maintain industry-standard security practices.

When you use PrimeOverview to take actions (send messages, update contacts, create appointments, etc.), those actions are executed through your CRM's API using the OAuth credentials you authorized. The data flows back to your CRM account, which is governed by your CRM provider's own privacy policy.

We may disclose your information if required by law, subpoena, court order, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

If Prime Business Systems is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

We may share information with third parties when you explicitly authorize us to do so.

• The messages you type into the AI chat
• Business context from your AI configuration (knowledge base, rules of engagement, tone preferences)
• Relevant CRM data needed to fulfill your request (e.g. contact details when you ask "send a follow-up to John Smith")
• Your AI permission settings (so the AI knows what actions it can and cannot take)

• Your password or authentication credentials
• Your payment information or Stripe details
• Other users' data or other businesses' data
• Data from disconnected or inactive CRM connections

Anthropic, our AI provider, processes data submitted through their API under the following terms:

• API inputs and outputs are not used to train Anthropic's models
• Data is processed in transit and not stored beyond the duration needed to generate a response
• Anthropic maintains SOC 2 Type II compliance

All actions the AI takes or proposes are logged in your account's activity history, including the action type, target, timestamp, and whether it was auto-executed, approved, or rejected. This log is accessible to you in the application and retained for 12 months.

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• The right to know what personal information is collected, used, and shared
• The right to delete personal information
• The right to opt out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your rights

If you are located in the European Economic Area, the legal bases for processing your information are: contract performance (providing the Service), legitimate interest (improving and securing the Service), and consent (where explicitly obtained). Our Data Protection Officer can be reached at [email protected].