Privacy Policy

1. Who we are

SPIKE CRM is a desktop customer relationship management application for sales teams. This policy covers the application and the public website at svedi.space.

Questions about privacy or Google account data: meganfiton@gmail.com

2. What we collect

Website: we store your display theme preference in your browser storage. We do not use tracking cookies, analytics, or advertising pixels. The website loads typefaces and icons from Google Fonts. Google may receive your IP address and basic browser request information when your browser requests those files.

Licenses: when you buy a license we receive your email address so we can deliver the key. We store the license key and, when you activate it, a hashed hardware identifier to limit the license to one device.

App data: your CRM data (contacts, deals, notes, and interviews) is stored in a local SQLite database on your device. SPIKE CRM does not receive it on its own servers. If you enable a CRM integration, webhook, or remote sync, the app sends the CRM data needed for that connection to the service or address you configure. Those providers handle the data under their own privacy policies.

3. Google account data and Gmail

When you connect Gmail, SPIKE CRM requests the gmail.send permission to send messages that you create or select in the app. It also requests the OpenID Connect openid and email permissions to identify the connected account. These identity permissions do not provide access to Gmail messages. The app does not request permission to read, search, modify, or delete messages.

The connected Google account address identifies the Gmail mailbox. When you ask the app to send a message, Google receives the sender address, recipient address, subject, and message content. We do not sell Google account data or use it for ads or profiling. We do not use Google user data to train or improve general-purpose AI or machine learning models. We do not send Google user data to generative AI services.

SPIKE CRM does not use Google APIs to create, edit, or distribute intimate imagery, including non-consensual intimate imagery.

The app uses your operating system secure storage to encrypt the OAuth refresh token. The encrypted token stays in app data on your device. Disconnecting Gmail asks Google to revoke the token and removes it from the device. If Google does not confirm revocation, the app tells you to revoke access at https://myaccount.google.com/permissions.

The use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. SMTP credentials

If you connect a mailbox via SMTP, your email password or app password is stored on your device and is used to sign in to the mail provider. When you send a message, the sender, recipient, subject, and content are sent to that provider. SPIKE CRM does not receive your password or message content on its servers.

5. Third-party services

Google (OAuth and Gmail), payment processors (YooKassa, Stripe, and Robokassa), Resend (license key delivery), and Vercel (website hosting). If you enable an integration, the CRM provider or webhook address you configure receives the data needed for that integration. Each service handles data under its own privacy policy.

6. P2P sync

Optional synchronization transfers data directly between your own devices over your local network or the internet. Your data does not pass through our servers, and we cannot read it.

7. Your rights

You may request access to, correction or deletion of the email address we hold for your license by writing to meganfiton@gmail.com. You may revoke Google access at any time as described above. All app data is deleted together with the application when you uninstall it and remove its data folder.

8. Changes to this policy

We may update this policy occasionally. The current version is always published on this page with the date shown above.

9. Contact

Email: meganfiton@gmail.com