Privacy Policy

Last updated: February 25, 2026

Hitwell Engineering Corporation ("we," "our," or "us"), the creator of Auto-CRM, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your data when you use the Auto-CRM application and services.

1. Information We Collect

1.1 Account Information

When you sign up for AutoCRM via Auth0, we collect basic profile information, including:

  • Name (First and Last)
  • Email address
  • Profile picture (if available)

1.2 Communication Data

If you choose to integrate your email (Gmail or IMAP) or messaging (WhatsApp) accounts, we process communication data to provide our AI-driven CRM features:

  • Email Data: Metadata (sender, recipient, timestamp) and message content.
  • WhatsApp Data: Chat messages and session metadata.
  • Privacy Filtering: Our filtering layer automatically attempts to filter and ignore personal, sensitive, or non-business communications (e.g., banking alerts, personal notes) before they are processed by our AI.

1.3 CRM Data

We store and manage data you or our AI agents create within the platform:

  • Contact records and deal details.
  • Tasks, reminders, and follow-up items.
  • "Memories" (contextual information about relationships).

1.4 Payment Information

Subscription payments are processed via Dodo Payments. We do not store full credit card details on our servers. We receive and store customer IDs and subscription status provided by the payment processor.

2. How We Use Your Information

We use the collected information to:

  • Provide AI-Native CRM Features: Automatically extract contacts, update deals, and suggest tasks based on your communications.
  • Contextual Intelligence: Use relationship history to provide better insights and agent reasoning.
  • Service Improvements: Debug and enhance the performance of our AI agents and orchestrators.
  • Authentication and Security: Verify your identity and secure your account integrations.

3. Data Processing and AI

3.1 AI Analysis (Gemini)

We use Google's Gemini AI to analyze communication data. Data sent to the AI is used solely for generating insights, intent analysis, and proposed actions for your specific account.

3.2 Human-in-the-Loop (Overseer)

Every action proposed by our AI is logged in an audit trail and can be reviewed. By default, critical CRM updates may require your approval or are supervised by an "Overseer" layer to ensure accuracy.

4. Data Sharing and Third Parties

We only share data with third parties necessary to provide our services:

  • Authentication: Auth0 (Identity management).
  • AI Services: Our providers have zero data retention policy.
  • Communication Platforms: Google (Gmail API), WhatsApp (pairing).
  • Payment Processing: Dodo Payments (Subscription management).
  • Infrastructure: Hosted on secure VPS environments with storage via Cloudflare R2 (for backups and static assets).

We do not sell your personal information or communication data to third parties.

5. Security

We implement industry-standard security measures:

  • Encryption: Sensitive integration credentials (e.g., IMAP passwords) are encrypted at rest using AES-256.
  • HTTPS: All data in transit is protected by TLS/SSL encryption.
  • Access Control: Strict internal protocols for data access.

6. Your Choices and Controls

  • Integration Control: You can connect or disconnect any email or WhatsApp integration at any time.
  • Sync Toggling: You can manually enable or disable syncing for specific contacts.
  • Data Deletion: You may request the deletion of your account and all associated data. Contact at hello@auto-crm.com for the same.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page or via in-app notifications.

8. Contact Us

If you have any questions about this Privacy Policy, please contact us at support@auto-crm.com.