Privacy Policy — Persona CRM

Effective date: April 30, 2025

Last updated: July 10, 2026

At Persona ("we", "us", or "our"), your privacy is very important to us. This Privacy Policy explains how we collect, use, store, and protect your information when you use our CRM platform, mobile application, and browser extensions.

By using Persona, you agree to the terms described in this Privacy Policy.

Browser Extensions (Upwork / LinkedIn / Djinni)

Persona may provide optional browser extensions that help users transfer information from supported third-party websites into Persona CRM. The extensions process data only when the user explicitly initiates an action (e.g., clicks “Clip”, “Create”, “Update”, or submits a form).

Data processed by the extensions may include: name, profile link, location, headline/skills, and notes entered by the user (depending on the form and page content).

How data is used: the data is transmitted over HTTPS to Persona servers (or a user‑configured Persona backend) to create, update, or check existence of CRM records. We do not sell this data.

Sharing: data is shared only with Persona services or a user‑configured backend to fulfill the requested CRM action. We do not share extension data with unrelated third parties for marketing.

User control: you can stop all data processing by disabling or uninstalling the extension.

Google User Data

Persona CRM integrates with Google services (e.g., Google Calendar, Gmail) solely to provide core CRM functionality to our users. Our use of data received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

What Google data we collect:

Google account email address and basic profile information (name, profile photo) — used to authenticate and identify you within Persona CRM
Google Calendar events — read and created only when you explicitly connect Google Calendar to sync meetings and interviews
Gmail message metadata and content — accessed only when you explicitly authorise Gmail integration to log email communications in the CRM

How we use Google data: Google user data is used exclusively to provide and improve the features you have requested within Persona CRM (authentication, calendar sync, email logging). We do not use Google data for advertising, profiling, or any purpose unrelated to operating Persona CRM for you.

Sharing of Google data: We do not sell, rent, or share Google user data with third parties, except with sub-processors strictly necessary to operate the service (e.g., our hosting infrastructure). All sub-processors are contractually bound to protect your data and may not use it for any independent purpose.

Data protection: All data — including Google user data — is transmitted exclusively over HTTPS/TLS. Access is restricted to authenticated users and authorised personnel only. We apply the principle of least privilege: we request only the OAuth scopes necessary for the feature you enable.

Retention and deletion: Google user data is retained only as long as your account is active or as needed to deliver the requested service. When you disconnect a Google integration or delete your account, all associated Google data is permanently removed from our systems within 30 days. You can revoke Google access at any time via Google Account Permissions or from within Persona CRM settings.

Limited Use disclosure: Notwithstanding anything else in this Privacy Policy, our use of data received from Google APIs is limited to providing or improving user-facing features that are prominent in Persona CRM's user interface and to complying with applicable law. We do not use Google data to develop, improve, or train generalised AI/ML models.

1. Information We Collect

a. Information you provide to us:

Name, email address, and profile information (via sign-up)
Team or company affiliation
Billing information (for paid subscriptions via Stripe)
Communication logs, notes, comments, and uploaded files

b. Information collected automatically:

App usage data (pages visited, clicks, interactions)
Device type, OS version, IP address
Crash logs and performance data

c. Information from third parties:

Integrations with Upwork, LinkedIn, Gmail (only if authorized)
AI service interactions (e.g., when using ChatGPT-powered features)

2. How We Use Your Data

We use your data to:

Provide and maintain your access to the CRM features
Sync your activity across web and mobile platforms
Improve user experience and app performance
Communicate updates and support-related information
Process payments and manage subscriptions
Power AI and automation tools (only within your workspace)

3. Data Sharing

We do not sell your data to third parties.

We may share your data only with:

Service providers (e.g. Stripe for billing, OpenAI for AI features)
Legal authorities (only when required by law)

All third-party vendors are required to comply with relevant data protection laws (e.g., GDPR, CCPA).

4. Your Rights

You have the right to:

Access, update, or delete your personal data
Export your data upon request
Withdraw consent or deactivate your account

To request these actions, contact us at: [email protected]

5. Data Retention

We retain user data for as long as your account is active, or as needed to provide services. Upon deletion, your data will be permanently removed within 30 days.

6. Security

We implement industry-standard encryption and access controls to keep your data secure. Your credentials are never stored in plaintext and are handled securely by Clerk.dev.

7. Children’s Privacy

Persona is intended for use by individuals 16 years and older. We do not knowingly collect personal data from children under 16.

8. Changes to this Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page and effective immediately upon publication.

9. Contact Us

If you have any questions or concerns about this Privacy Policy, contact us at:

CML Team[email protected]Kyiv, Ukraine