leadspine.io ("we", "us") connects your AI assistant (such as Claude or ChatGPT) to your own your CRM account so the AI can build and manage your CRM workflows on your behalf. This policy explains what data we collect, how we use it, how we store it, and how we share it.
1. Data We Collect
To connect your AI assistant to the CRM sub-accounts you choose, leadspine.io establishes an authorized connection that you approve from inside your own CRM. We process only the connection data needed to carry out the actions you or your connected AI request, such as building, auditing or editing workflows, and to keep that connection working while it remains active. We do not collect your CRM password. Connection data is sent over HTTPS, encrypted at rest, used only to operate your leadspine.io connection, and removed when you disconnect from your dashboard. Full details are on the Security page.
- Account identifiers: your CRM sub-account (location) ID and a pairing key you provide, used to link the connection to the correct leadspine.io account.
- We do NOT collect your CRM password or login credentials. We do not collect browsing history, and we never access anything outside the CRM sub-accounts you connect.
2. How We Use the Data
We use your connection solely to carry out the CRM requests you initiate through your AI assistant (for example, listing, creating, editing, or auditing your workflows). We do not use your data for advertising, profiling, or any purpose unrelated to operating your leadspine.io connection.
We also collect internal product analytics inside the signed-in dashboard: pages visited, buttons used, errors encountered, and a technical recording of the dashboard interface so we can diagnose problems and improve the product. Form inputs, credentials and payment fields are masked and never recorded. This data is used only by our own team and is never sold or shared with advertisers. Screen recordings are deleted automatically after 48 hours, and usage events after 30 days.
3. How We Store and Secure the Data
- Connection data and account identifiers are transmitted only over encrypted HTTPS to your own leadspine.io account endpoint.
- They are stored securely (encrypted at rest) on leadspine.io's servers and used only to operate your your CRM connection.
- Access stays scoped to the sub-accounts you paired, and every action records which one it ran in.
4. Data Retention and Deletion
- We retain connection data only while your connection is active. When you disconnect from your leadspine.io dashboard, syncing stops immediately and the stored connection data is deleted.
- You may request deletion of all associated data at any time by contacting us at the address below.
5. How We Share the Data
- We do NOT sell, rent, or trade your data.
- We do NOT share your data with third parties for their own purposes.
- Your data is sent only to your own leadspine.io account endpoint to operate the service you requested. We may use standard infrastructure providers (e.g., hosting) solely to run the service, under confidentiality obligations.
6. Your Choices and Controls
You can disconnect at any time, which stops all data collection and deletes the stored connection data. You control which your CRM sub-account is connected.
7. Children's Privacy
The service is intended for business users and is not directed to children under 13.
8. Changes to This Policy
We may update this policy; the effective date above reflects the latest version.
9. Contact
Questions or data-deletion requests: support@leadspine.io