Privacy Policy

1. Data Controller

MOP International Ltd.
61 Bridge Street
HR5 3DJ Kington
United Kingdom

Company Number: 16807244
Registered in England and Wales

Email: info@am-crm.com
Website: https://am-crm.com

Our terms of service are available at https://am-crm.com/agb.

2. Scope

This privacy policy applies to the website am-crm.com, the AM CRM web application, the associated mobile applications for iOS and Android, and the macOS desktop application (together, "the Service").

3. Two Roles — Please Note

AM CRM is software our customers use to manage their own business contacts. Under data protection law, we act in two distinct roles:

a) As controller for the data of our own customers — i.e. the registration, contract, billing, and usage data of the people who create an account with us.

b) As processor for all content our customers store in their workspace — in particular the data of their own contacts, prospects, and customers. For this data, the respective customer is the controller. We process it strictly on their instructions, on the basis of a data processing agreement under Art. 28 DSGVO. Data subjects should direct access or deletion requests to the respective customer; should you mistakenly send such a request to us, we will forward it.

4. What Data We Process

4.1 Account and contract data (role a)

Name, email address, phone number, company name, billing address, chosen plan, payment status, login timestamps.

4.2 Content data in the workspace (role b)

Contact data, notes, appointments, tasks, message histories, call data, call recordings and their transcripts, meeting recordings from connected services, and files the customer creates, imports, or uploads.

4.3 Technical access data

IP address, timestamp, resource requested, status code, user agent. This data is generated server-side during operation and serves security and troubleshooting purposes.

4.4 Data in the mobile and desktop applications

Device identifier for push notifications, app version, operating system version. The applications access the microphone or camera only when you use a feature that requires it, and only after your explicit approval through the operating system.

5. Purposes and Legal Bases

6. Use of Google APIs and Limited Use

AM CRM offers optional connections to Google services. These are only activated if you connect them yourself, and can be disconnected at any time in Settings.

Permissions requested and their purpose:

Separate mailbox module: If you want to display your Gmail inbox within the CRM, this happens through a technically separate, second connection with its own permission to read your emails. You must establish this connection separately; it is not part of the standard connection above.

Use and disclosure: Data from Google APIs is used exclusively to provide the features you have requested. It is not sold, not used for advertising, not evaluated to build profiles for advertising purposes, and not used to train AI models. Disclosure only occurs to the extent necessary to provide these specific features, or if you consent, or where a legal obligation exists.

Limited Use Statement:

The use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access: You can disconnect access at any time in AM CRM under Settings → Integrations, or directly at myaccount.google.com/permissions.

7. Use of AI Systems

AM CRM uses AI models for individual features, such as summaries, reply suggestions, and transcription of voice recordings. In doing so:

• We use exclusively the commercial APIs of Anthropic (Claude) and OpenAI. Under their published terms of service, both providers do not use data submitted through the API to train their models. We have not agreed to any deviating data use.
• No private consumer accounts and no intermediary services are used.
• Content from your Gmail inbox and the titles, descriptions, notes, or attendees of your Google Calendar entries are not transmitted to any AI provider.
• Master data imported from Google Contacts (first and last name, email, phone number) may be included in the "Lead Summary" and "AI Assistant" features when you explicitly invoke them.
• If you have connected the optional third-party meeting recording feature, the transcripts generated there are stored as a note on the respective contact and may likewise be included in the lead summary. This content originates from your own connection to that provider, not from any Google permission granted to AM CRM.
• We do not operate our own or self-hosted models.

8. Recipients and Processors

We use carefully selected service providers, each bound by a data processing agreement. Services marked "optional" are only activated if you connect them yourself.

Google Fonts: In the main application (app and dashboard), Google Fonts are served from our own servers — no connection to Google is made when you visit. On individual marketing landing pages of membership areas, however, Google Fonts are loaded directly from Google's servers, which transmits your IP address to Google.

9. Transfers to Third Countries

Some of the service providers listed process data outside the European Economic Area.

The application is currently executed in the Tokyo, Japan region. An adequacy decision by the European Commission under Art. 45 DSGVO exists for Japan.

The database is likewise operated in the Tokyo, Japan region.

For transfers to the United States, we rely on the European Commission's Standard Contractual Clauses under Art. 46(2)(c) DSGVO, unless the provider has already self-certified under the EU-US Data Privacy Framework. Copies of the safeguards are available on request.

10. Retention Period

We store account data for the duration of the contractual relationship. Upon termination, we delete the workspace, including all content data, without undue delay, unless a statutory retention obligation applies or you explicitly ask us to handle it differently. We retain invoicing records for the statutory periods. Technical access data is deleted after 30 days.

11. Cookies and Audience Measurement

Strictly necessary cookies are used for sign-in and session management. The legal basis is Art. 6(1)(f) DSGVO in conjunction with Section 25(2) TDDDG (German Telecommunications and Telemedia Data Protection Act). No consent is required for these.

Microsoft Clarity is used for audience measurement on our website. The service captures interactions such as mouse movements, clicks, and scroll behaviour. It is used only with your consent under Art. 6(1)(a) DSGVO and Section 25(1) TDDDG; without consent, the service is not loaded. You may withdraw your consent at any time with future effect. No recording takes place within the logged-in area of AM CRM.

Embedded videos (YouTube): We embed videos exclusively via youtube-nocookie.com. This privacy-friendly mode ensures YouTube does not set cookies unless you play the video. Google's privacy policy applies once you start playback.

12. Security

Access to the application is exclusively encrypted via TLS. The database is tenant-separated; access to another workspace's data is excluded at the database level. Passwords are stored only as hashes. Our staff only access customer data to the extent required for support or troubleshooting.

13. Your Rights

You have the right to access (Art. 15 DSGVO), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and the right to object to processing based on legitimate interests (Art. 21). Consent given may be withdrawn at any time with future effect.

Please contact info@am-crm.com to exercise these rights.

14. Right to Complain

You may lodge a complaint with a data protection supervisory authority, such as the Information Commissioner's Office (ICO) in the United Kingdom, or the authority responsible for your place of residence.

15. Changes

We update this privacy policy when the Service or the legal situation changes. The current version is always available at https://am-crm.com/privacy.