Privacy Policy

Effective October 6, 2026. This policy explains what personal data CRM Digest collects, why, who we share it with, and how to have it deleted.

Who we are

CRM Digest (crmdigest.io) is operated by ComSolve LLC ("we", "us"). We email AI-written summaries of a customer's Salesforce pipeline on a schedule they choose.

For anything in this policy, including access or deletion requests, email [email protected].

What we collect

Account details: your email address, plan, subscription status and the date you signed up.
Digest settings: schedules, report types, time zone, recipient email addresses you add, and any white-label settings (brand name, logo URL, colour).
Salesforce connection: an OAuth token for your org (encrypted at rest), your Salesforce user and org IDs, the org name, and whether your user can view all data.
Slack connection (Pro plan, optional): an access token (encrypted at rest) and your workspace name.
Billing: your Stripe customer and subscription IDs. Card details go directly to Stripe and never reach us.
Logs: when digests were sent and to whom, AI usage per digest, and security events, which can include an IP address.
Website analytics: on our public pages only, the pages you view, clicks, browser and device details, and approximate location. See "Cookies and analytics" below.

Your Salesforce data

CRM Digest only reads from Salesforce. It never creates, updates or deletes records. When a digest is generated, we read the opportunities and tasks the connected user can see. Those records can include names of accounts, deals and sales reps.

We do not keep copies of your Salesforce records in our database. The data is read when a digest is built, sent to our AI provider to write the summary, and delivered in the email or Slack message. It is never used to train AI models or for advertising.

How we use it

To run the service: sign you in, build and deliver your digests, and keep your connections working.
To bill you and manage your subscription.
To send service emails, such as sign-in links and alerts when a connection needs attention.
To keep the service secure, investigate problems and prevent abuse.
To understand how visitors find us and which pages lead to sign-ups, so we can improve the site.

We do not sell personal data or share it for advertising.

Services we share data with

We rely on these providers. Each receives only what it needs to do its job.

Provider	Purpose	Data it receives
Salesforce	Source of your CRM data	Read requests made with your authorised connection
Anthropic	Writes the digest summary	The pipeline data for that digest
Resend	Sends email	Recipient addresses and email content
Slack	Optional digest delivery	Digest content for the channel you choose
Stripe	Billing	Email address and subscription details
Railway	Hosting and database	All data we store
Cloudflare	Network security and delivery	Web traffic, including IP addresses
Google Analytics	Website analytics	Public-page visits, browser and device details
HeyCatch	Website and sign-up analytics	Public-page visits and clicks (clicked text is masked), plus sign-up and subscription events tagged with an internal user ID and plan, never your email

We may also disclose data if the law requires it, or to a buyer if the business is sold, under this same policy.

Cookies and analytics

We use one essential cookie to keep you signed in. It lasts up to 30 days and can't be read by scripts on the page.

Google Analytics and HeyCatch set cookies or browser storage to recognise returning visitors, for up to two years. They run only on our public pages: home, sample report, sign-up, sign-in, the Salesforce package details and this page. They are not loaded on signed-in pages, so they never see your dashboard, settings or Salesforce data.

You can block or clear these cookies in your browser settings, and the service will still work.

Keeping and deleting your data

We keep your account data while your account exists. To delete it, email [email protected] from the address on your account. Within 30 days, we will delete your account, Salesforce and Slack connections, schedules and settings.

Stripe keeps billing records as the law requires. Copies of digests already delivered stay in the recipients' inboxes or Slack channels.

You can also disconnect Salesforce from your org at any time. Uninstall the package or revoke the connected app, and we can no longer read your data.

Your rights

Depending on where you live, you can ask us to:

tell you what data we hold about you and give you a copy,
correct it,
delete it,
stop or restrict how we use it.

Email [email protected] and we will respond within 30 days. We won't treat you differently for using these rights. If you are in the EU or UK, you can also complain to your local data protection authority.

Security

All traffic uses HTTPS. Salesforce and Slack tokens are encrypted at rest with AES-256-GCM, and access to every account's data is checked on each request. Read more in our security overview, available on request.

International transfers

We and our providers are based mainly in the United States, so your data is processed there.

Children

CRM Digest is a business tool and is not meant for anyone under 16.

Changes to this policy

If we change this policy, we will update the date at the top. If a change is significant, we will email account holders before it takes effect.