Legal
Privacy Policy
Last updated: July 14, 2026
1. Who we are
AgentOn CRM (“AgentOn”, “we”, “us”) is a customer relationship platform for real estate teams to manage leads, tasks, documents, commissions, finances, email, and calendar activity. This Privacy Policy explains how we collect, use, store, share, and protect personal data — including Google user data accessed through Google APIs when you connect Google services to your workspace.
Website: https://agentoncrm.com — Contact: info@agentoncrm.com / admin@agentoncrm.com
2. Data we collect
We may collect account and profile information (name, email, role), CRM records you create (leads, notes, tasks, documents, commissions, finance entries), and technical/security data needed to operate the service (authentication tokens, IP address, device/browser metadata, logs).
3. Google user data we access
When you choose to connect Google to AgentOn, we access only the Google user data needed for the connected feature. Depending on what you enable, that may include:
- Google Sign-In: basic profile identifiers (name, email, profile photo) via openid / email / profile scopes to authenticate you into your AgentOn account.
- Google Calendar: calendar event data (titles, times, attendees, descriptions, Meet links, and related metadata) via the calendar.events scope so AgentOn can create, read, update, and delete events synchronized with your CRM calendar.
- Gmail: mailbox content needed to provide in-app email (message metadata, bodies, labels, drafts, and send/trash actions) via the gmail.modify scope, plus email/profile for identifying the connected mailbox.
We do not use Google user data for advertising, credit scoring, or training generalized AI/ML models. Use is limited to providing and improving the user-facing AgentOn features you enable, consistent with Google’s API Services User Data Policy and Limited Use requirements.
4. How we use Google user data
We use Google user data solely to: (a) sign you into AgentOn; (b) sync and display calendar events inside AgentOn; (c) let you read, compose, send, and manage email from the AgentOn mailbox UI; (d) maintain reliable connectivity (token refresh, error handling); and (e) provide security, abuse prevention, and support for those features.
5. With whom we share, transfer, or disclose Google user data
We do not sell Google user data. We do not share Google user data with third parties for advertising or unrelated commercial purposes. We share or disclose Google user data only in these limited cases:
- Within your AgentOn workspace: teammates and roles you authorize may see synchronized calendar events, related CRM records, and (where your admin enables shared workflows) mail-linked activity needed to operate the team product. Access is permission-scoped by workspace roles.
- Infrastructure / subprocessors that host or operate AgentOn on our behalf (for example cloud hosting, database, object storage, email delivery, monitoring). These providers process data only to run AgentOn under our instructions and contractual protections; they are not authorized to use Google user data for their own purposes.
- Legal and safety disclosures: when required by law, regulation, legal process, or to protect the rights, safety, or security of AgentOn, our users, or the public.
- Business transfers: if AgentOn is involved in a merger, acquisition, or asset sale, Google user data may transfer as part of that transaction under continued confidentiality commitments and this policy’s purpose limitations.
We do not transfer Google user data to other apps or unrelated third parties except as stated above. Google itself remains the provider of Calendar/Gmail/Sign-In APIs when you connect those services.
6. Data protection mechanisms for Google and other sensitive data
We apply technical and organizational safeguards to protect Google user data and other sensitive CRM data, including:
- Encryption in transit: AgentOn is served over HTTPS/TLS so data exchanged between your browser/app and our servers is encrypted.
- Encryption at rest for credentials: OAuth access and refresh tokens for Google connections are stored encrypted (or otherwise protected) in our systems and used only to maintain the integrations you authorized.
- Access controls: authenticated sessions, role-based permissions inside each workspace, and administrative least-privilege practices limit who can access user data.
- Secure development and operations: monitoring, logging for security/reliability, dependency and infrastructure controls, and periodic review of integration configurations.
- Incident response: we investigate suspected unauthorized access and take steps to contain, remediate, and notify affected customers when legally required.
7. Retention and deletion
We retain Google user data and related sync copies only as long as needed to provide the connected feature, keep your account/workspace active, resolve disputes, or comply with law. You may disconnect Google Calendar and/or Gmail at any time in Settings → Integrations. Disconnecting revokes AgentOn’s API access for that integration and we delete or invalidate stored OAuth tokens. You may request account or personal-data deletion by contacting admin@agentoncrm.com or using our data deletion instructions at https://agentoncrm.com/en/data-deletion.
8. How we use non-Google CRM data
We use CRM and account data to provide product features, keep your workspace reliable and secure, communicate service updates, and meet legal obligations. The sharing and protection practices in sections 5–6 also apply to this data, except where a specific integration’s provider terms apply.
9. Your rights
Depending on applicable law, you may request access, correction, export, or deletion of personal data, object to certain processing, or withdraw consent for optional Google connections. You can also revoke AgentOn’s Google access from your Google Account permissions page. To exercise rights, contact info@agentoncrm.com or admin@agentoncrm.com.
10. Changes
We may update this Privacy Policy when our practices change. We will update the “Last updated” date on this page and, for material changes affecting Google user data, provide additional notice where appropriate.
11. Contact
Privacy questions: info@agentoncrm.com — Account / deletion: admin@agentoncrm.com