Privacy Policy
How we collect, use, and protect your information.
1. Information We Collect
Account Information
When you create an account, we collect your name, email address, and company name. If you subscribe to a paid plan, our payment processor (Stripe) handles billing details — we never store credit card numbers.
Usage Data
We collect product usage data to run and improve Conduyt: pages visited, features used, errors, and performance. We use PostHog for product analytics; these events are linked to your Conduyt user ID and workspace, never to the contents of your CRM. We use Sentry to record application errors, with personal data scrubbed before anything is sent.
Product analytics and session recordings. Inside the Conduyt app we use PostHog to understand how the product is used and where people get stuck. For trial accounts, we may record sessions: the pages viewed, clicks, and on-screen messages, so we can find and fix confusing steps. Recordings never capture what you type into forms, passwords, or the content of network requests, and areas of the screen that show your contacts, messages, or other CRM data are hidden before anything leaves your browser. Recordings are used only by Conduyt to improve the product, are never sold or shared, and are deleted automatically after 30 days. To opt out, email privacy@conduyt.app.
CRM Data
The contacts, deals, messages, and other business data you store in Conduyt belong to you. We process this data solely to provide the service. Booking pages and forms you publish with Conduyt can load tracking tags you add yourself (for example Hyros). Those tags are yours, and your own privacy policy covers them.
Sign-up attribution and advertising measurement
When you sign up, we record how you found us: campaign tags in the link (utm parameters), the first page you landed on, the referring website (host only), and ad click identifiers such as Google's gclid or Microsoft's msclkid. They're stored on your account. If you arrived from a Google or Microsoft ad, we send that ad platform its own click identifier together with the time of up to three milestones:
- your trial was created;
- your trial became active (you added contacts and used a core feature in your first week);
- your first paid subscription, with the amount paid. If that payment is refunded within 7 days, we send a correction.
This lets us measure which ads lead to real customers. We never send your name, email, phone, company, or any CRM data. If you didn't arrive from an ad, nothing is sent. To have the identifier removed, email privacy@conduyt.app.
2. How We Use Your Information
- To provide, maintain, and improve the Conduyt platform
- To communicate with you about your account, updates, and support requests
- To process payments and manage subscriptions
- To detect and prevent fraud, abuse, and security incidents
- To comply with legal obligations
3. Support Access
To provide customer support, troubleshoot technical issues, investigate abuse, or respond to legal requests, Conduyt support staff may access your account data. This access includes:
- Logging into your account in a read and write capacity
- Viewing your contacts, deals, messages, and other CRM data
- Making changes on your behalf when you request support assistance
All support access is:
- Logged and auditable — every session is recorded with the staff member's identity, the account accessed, the time, and duration
- Time-limited — support sessions automatically expire after 4 hours
- Attributed — any changes made during a support session are logged with the support staff member as the actor, not falsified as your own actions
You may request an audit log of support access to your account at any time by contacting info@conduyt.app.
In the future, Conduyt will offer the ability to disable support access entirely or require explicit consent per session. Until then, support access is enabled by default for all accounts to ensure we can help you when issues arise.
4. Data Sharing
We do not sell, rent, or trade your personal information. We share data only with:
- Service providers who help us operate (hosting, payment processing, email delivery, product analytics and error monitoring such as PostHog and Sentry, the AI services described in section 12, and Google Ads and Microsoft Advertising conversion measurement limited to the click identifier, milestone times and the first payment amount), bound by data processing agreements
- Legal authorities when required by law or to protect our rights
5. Data Retention
We retain your data for as long as your account is active. When you delete your account, we permanently remove your data within 30 days, except where retention is required by law.
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data
- Export your data in a portable format
- Object to or restrict certain processing
- Withdraw consent
7. Security
We implement industry-standard security measures including encryption at rest (AES-256), encryption in transit (TLS 1.3), row-level security for tenant isolation, and automated backups. See our Security page for details.
8. Cookies
We use essential cookies for authentication and session management, and a PostHog analytics cookie to understand how the product is used (and, for trial accounts, session recordings as described above). The app itself does not use third-party advertising cookies. Ad click identifiers from our website are kept on your account only as described in 'Sign-up attribution and advertising measurement'. If you open the Zapier integration in Settings, Zapier's own embedded tool loads from Zapier and is governed by Zapier's privacy policy.
9. International Transfers
Your data is primarily stored in the United States. For EU/EEA users, we rely on Standard Contractual Clauses for lawful international data transfers.
10. Children's Privacy
Conduyt is not directed to individuals under 16. We do not knowingly collect data from children.
11. Google & Microsoft Calendar Data
If you connect a Google Calendar or Microsoft 365 calendar, Conduyt accesses your calendar data solely to provide two-way appointment synchronization: reading events to show availability and avoid double-booking, and creating or updating events for appointments scheduled in Conduyt. We also access your account email address to identify the connected calendar.
Calendar data is stored encrypted, is never sold, is never used for advertising, and is never shared with third parties except as required to provide the synchronization service. You can disconnect a calendar at any time from Settings, which stops all access; we delete the associated tokens immediately and synced event data upon request.
Conduyt's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
12. Artificial Intelligence Features
Conduyt offers optional AI features such as contact summaries, email drafting, conversation insights, and the copilot. These features process only the CRM records you create in Conduyt: contacts, deals, messages, notes, tasks, call recordings, and appointments booked through Conduyt. To provide them, Conduyt sends that data to AI services from Anthropic (Claude language models) and OpenAI (call transcription and document embeddings) under commercial API terms that do not permit the use of your data to train their models. Conduyt does not operate self-hosted AI models.
Information received from Google APIs, including Google Calendar events and your Google account email address, is never sent to any AI service and is never used to create, train, or improve any artificial intelligence or machine learning model, by Conduyt or by any third party.
If you configure your own AI provider API key in Conduyt, data processed through that key is governed by your own agreement with that provider.
13. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes via email or an in-app notification at least 30 days before they take effect.
14. Contact
For privacy-related inquiries, contact us at privacy@conduyt.app or visit our Contact page.