Privacy policy

What the CRM is

Each brokerage has its own copy of the CRM on its own domain. Its owner applies, Projekt Studio approves the brokerage, and the owner and their agents sign in with Google.

What we collect

When you sign in, we receive from Google your name, your email address and your profile photo. We use them to confirm you belong to the brokerage (by your email address's domain), to show who you are in the app, and to contact you about your account.

When an owner applies, we collect the brokerage's name and legal name, its broker license number, its office address and phone, and how many agents are joining. We use them to decide whether to approve the brokerage and to bill it.

Inside the CRM, a brokerage and its agents enter their own records: leads, contacts, deals, appointments, notes and documents. Those records belong to the brokerage. We store them to run the service and do not use them for anything else.

Google user data

Connecting Google Calendar is optional, and each person connects their own account. With your permission, Projekt Studio CRM reads the events on your primary Google Calendar, so they show beside your CRM appointments, and adds and moves the appointments you make in the CRM, so they appear in both places (scope: calendar.events). It does not create, share or delete calendars, and it asks for nothing else from your Google account.

How we use and protect Google user data

We use Google user data only to provide those features to the person who connected their account, inside the CRM. We do not sell it, use it for advertising, use it to train or improve artificial intelligence or machine learning models, or transfer it to anyone except as needed to provide the features, to comply with the law, or as part of a merger or acquisition with notice to you. People at Projekt Studio do not read it unless you ask us to for support, it is needed for security, or the law requires it.

Projekt Studio CRM's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

The access Google grants is kept encrypted, in a cookie only our server can read. You can disconnect in the CRM (Settings, Google account) or at myaccount.google.com/permissions; either way we delete the access we hold and stop reading your account.

Who else handles data

We use a small number of providers to run the service. Each handles data only to do its job for us:

• — Vercel, which hosts the CRM;
• — Supabase, which holds the database and handles sign-in;
• — Google, for sign-in and, if you connect it, Google Calendar.

Keeping it, and deleting it

We keep account and brokerage data for as long as the brokerage uses the CRM. Data travels over encrypted connections and is stored with providers that encrypt it at rest.

You can ask to see, correct, export or delete what we hold about you by writing to dev.projektstudio@gmail.com. A brokerage owner can ask us to delete the brokerage and all of its records. We answer within 30 days.

Children

Projekt Studio's products are for businesses and are not directed to children under 13. We do not knowingly collect their information.

Changes and contact

If this policy changes, the new version is posted here with a new date. Questions go to dev.projektstudio@gmail.com.