Privacy Policy

Last updated: August 31, 2026

This Privacy Policy explains how Planes (“Planes,” “we,” “us,” or “our”) collects, uses, shares, and protects information in connection with the Planes CRM platform and related services (the “Service”), available at planescrm.com. By using the Service, you agree to this Policy.

1. Information We Collect

2. How We Use Information

We use information to:

We do not sell your personal information, and we do not use your business data for advertising.

3. Third-Party Integrations

When you connect a third-party service such as QuickBooks Online, you authorize Planes to access and exchange data with that service on your behalf to provide the features you enable — for example, syncing customers and invoices. We access only the data needed for those features, use it solely to provide the Service to you, store it securely, and never sell it. Access tokens for connected services are encrypted at rest. You may disconnect an integration at any time from within the Service, which revokes our ongoing access. Each provider’s handling of data on their side is governed by their own privacy policy.

4. Google User Data

If you connect a Google account, Planes accesses only the data needed for the features you enable. For the Google Calendar integration, Planes creates a dedicated “Planes” calendar in your Google account and performs two-way synchronization of your CRM appointments with that calendar only — it does not read, modify, share, or delete your other calendars. If you enable the Gmail integration, Planes sends email from your Gmail address only when you or your team explicitly direct a send (including via an AI assistant you instruct); the integration is send-only — Planes cannot read your mailbox. Google OAuth tokens are encrypted at rest, and you can disconnect your Google account at any time from within the Service, which revokes our access.

Planes’ use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Workspace APIs adheres to the Google User Data Policy, including the Limited Use requirements. Specifically, we do not transfer or sell Google user data to third parties; we do not use it for advertising; we do not allow humans to read it except with your affirmative consent, for security purposes, to comply with applicable law, or as necessary to maintain the Service; and we do not use or transfer Google user data — raw, aggregated, anonymized, or derived — to develop, improve, or train generalized or foundational artificial intelligence (AI) and/or machine learning (ML) models. Data received from Google Workspace APIs is not used to develop, improve, or train generalized AI and/or ML models.

5. Artificial Intelligence Features

Some optional features of the Service use large language models provided by Anthropic (Claude), accessed directly through Anthropic’s commercial API. Your data — which may include records synced from connected integrations such as Google Calendar — is transmitted to Anthropic only when you or your team actively use an AI feature, and only the data relevant to that request. Under Anthropic’s Commercial Terms of Service, content submitted through its API is not used to train or improve Anthropic’s models. Planes does not use your data — including any data received from Google Workspace APIs — to develop, improve, or train generalized AI and/or ML models, and does not transfer it to any service that would.

6. How We Share Information

We do not sell your information. We share it only with service providers who help us operate the Service (such as hosting, infrastructure, and payment processors) under contractual confidentiality obligations, when required by law or legal process, or to protect the rights, safety, and security of Planes, our users, and the public. If Planes is involved in a merger or acquisition, information may be transferred subject to this Policy.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. After account closure, we retain data for a reasonable period to allow export and to meet legal, accounting, or security obligations, after which it is deleted or anonymized.

8. Your Rights and Choices

Your data is yours. At any time you may access and export your data from within the Service, correct inaccurate information, or request that your data be deleted. To request export or deletion, contact us at privacy@planescrm.com, and we will respond within a reasonable period and as required by applicable law. Deleting your data may end your ability to use parts of the Service.

9. Security

We use technical and organizational measures designed to protect your information, including encryption of sensitive data such as integration access tokens, tenant isolation, and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children’s Privacy

The Service is intended for businesses and is not directed to children under 13. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will provide notice through the Service or by other reasonable means. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

12. Contact

Questions about this Policy or your data? Contact us at privacy@planescrm.com.