Privacy policy
Effective October 18, 2026.
UndoCRM ("we") is a hosted CRM for AI agents at https://undocrm.com. This policy explains what we collect, why, and the choices you have. Questions: hello@undocrm.com.
What we collect
- Your account. Your name and email address, and how you sign in: with Google, or with an email address and a password (stored only as a secure hash). If you sign in with Google, we receive your name, email address and profile picture from Google.
- What you store in UndoCRM. The contacts, companies, deals, conversations, tasks and other records that you, your team and your agents save. You decide what goes in; we keep it to provide the service to you.
- Billing. Payments are handled by Dodo Payments, our merchant of record. We receive your plan and subscription status; we never see or store your card details.
- Usage. How many API requests your organization makes (to apply plan limits), and short-lived server logs (IP addresses, times, errors) for security and debugging.
- Your browser keeps your sign-in session and a few preferences, such as your current workspace and light or dark mode. We use no advertising or analytics cookies, and no third-party trackers.
How we use it
To run UndoCRM for you: sign you in, store and show your data, apply your plan, send the emails the service needs (sign-up codes and team invites), keep the service secure, and answer support requests. We don't sell your data, we don't use it to advertise to you, and we don't use it to train AI models. UndoCRM runs no AI model on your data.
Who we share it with
Only the service providers that run UndoCRM on our behalf (hosting, data storage and email delivery), Dodo Payments for billing, and Google if you choose to sign in with Google. Each gets only what it needs to do that job. We disclose data to authorities only when the law requires it.
Your data is stored on servers in the United States.
How long we keep it
As long as your account or organization exists. If an organization's subscription lapses, its data is kept, not deleted, until it's paid again or you ask us to delete it. You can archive records yourself at any time, and you can ask us to delete your account or an organization's data entirely by emailing hello@undocrm.com.
Your choices
You can see and change your data in the app. You can ask us for a copy of your data, to correct it, or to delete it, by emailing hello@undocrm.com. We reply within 30 days.
Security
Connections are encrypted (HTTPS), API keys and passwords are stored only as hashes, and every change in a workspace is recorded in its audit log. No system is perfectly secure, but we work to protect your data and will tell you promptly if a breach affects it.
Children
UndoCRM is for businesses, not for anyone under 16.
Changes
If we change this policy we'll update it here and change the date above. For significant changes we'll also tell account owners by email.