Privacy Policy

1. About ZentryCRM

ZentryCRM ("we," "our," or "us") is a Google Workspace Add-on developed and operated by ZentryCRM (zentrycrm.com). The add-on runs entirely within Google Sheets and uses Google Workspace APIs to provide cold outreach and CRM functionality.

This Privacy Policy explains how ZentryCRM accesses, uses, and protects information when you install and use the add-on. By installing ZentryCRM, you agree to the terms of this policy.

2. What Data We Access

ZentryCRM requests the following Google Workspace permissions in order to function. We access only what is necessary for the features you use.

Data you enter directly

When you use ZentryCRM you may enter the following information into your Google Sheet or sidebar settings:

• Contact information (names, email addresses, phone numbers, company names)
• Your sender information (name, title, company, reply-to email, meeting link)
• Email templates and campaign content
• Deal values and pipeline notes

This data is stored directly in your Google Spreadsheet — not on ZentryCRM servers.

Open tracking data

When you send emails through ZentryCRM, each email contains a small invisible tracking pixel (a 1×1 image). When a recipient opens the email, a request is made to our web app URL hosted on Google Apps Script servers. This request logs:

• The recipient's email address (which you provided)
• The campaign name
• The date and time of the open

This data is written back to your Google Spreadsheet. It is not stored on our servers.

3. How We Use Your Data

We use the data we access exclusively to provide ZentryCRM features:

• Sending emails: We use your Gmail access to send personalized outreach emails when you click Send in the sidebar
• Detecting replies: We scan your Gmail inbox for replies from contacts in your campaigns to update campaign status and stop follow-up sequences automatically
• Tracking opens: We log email opens to your spreadsheet via our web app so you can see who opened your emails
• Scheduling meetings: We create Google Calendar events with Google Meet links on your behalf when you use the Schedule Meeting feature
• Managing your spreadsheet: We read and write to your active Google Sheet to build campaign sheets, the Sales Channel dashboard, and the zDashboard

We do not use your data for advertising, analytics, training machine learning models, or any purpose other than providing the ZentryCRM service to you.

4. Where Data Is Stored

ZentryCRM is architected so that your data stays in your Google account:

• All contact data, campaign data, pipeline data, templates, settings, and activity logs are stored in your Google Spreadsheet — not on ZentryCRM servers
• Open tracking events are processed by a Google Apps Script web app and written directly to your spreadsheet
• Sequence schedules are stored in a hidden sheet within your spreadsheet
• Unsubscribe requests are stored in a hidden sheet within your spreadsheet

ZentryCRM does not operate a backend database

We do not maintain a server, database, or data warehouse that stores your contacts, emails, pipeline deals, or any personal information about your contacts. The Google Apps Script project that powers ZentryCRM runs on Google's servers under your Google account authorization.

Lemon Squeezy (payment processor)

If you purchase a ZentryCRM subscription, payment is processed by Lemon Squeezy. Your billing information is subject to Lemon Squeezy's privacy policy. We receive confirmation of your subscription status but do not store your payment card details.

5. Google API Usage

ZentryCRM's use of Google APIs is subject to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we confirm the following:

• We do not allow humans to read your Gmail data unless you explicitly grant permission or it is required for security purposes or to comply with applicable law
• We do not use your Gmail data to serve advertisements
• We do not sell your Gmail or Google data to third parties
• We do not use your Gmail data for any purpose other than providing and improving ZentryCRM features
• We do not transfer your Gmail data to third parties except as necessary to provide ZentryCRM features with your explicit consent

6. Data Sharing

We do not sell, rent, or share your personal data or your contacts' data with third parties, except in the following limited circumstances:

• Google Workspace APIs: Data flows through Google's own infrastructure when you send emails via Gmail, create calendar events, or access your spreadsheet
• Lemon Squeezy: Billing and subscription information is processed by Lemon Squeezy as our payment provider
• Legal requirements: We may disclose information if required to do so by law or in response to valid legal process

No other third-party services receive your data.

7. Data Retention

Because ZentryCRM stores all data in your Google Spreadsheet, data retention is entirely within your control:

• You can delete any data from your spreadsheet at any time
• You can delete the entire spreadsheet to remove all ZentryCRM data
• Uninstalling ZentryCRM from your Google account revokes all permissions and our add-on can no longer access your data

If you cancel your subscription, you retain access to your spreadsheet and all data in it. We do not delete your data on our end because we do not store it on our end.

Open tracking pixels in previously sent emails will continue to log opens to your spreadsheet as long as those emails exist in recipients' inboxes and they open them. You can remove the tracking sheet (zTracking) from your spreadsheet to stop logging new opens.

8. Security

ZentryCRM is built on Google Apps Script, which runs on Google's infrastructure. Security measures include:

• All communication between the add-on and Google services uses HTTPS encryption
• OAuth 2.0 is used for all Google API access — we never see or store your Google password
• You can revoke ZentryCRM's access at any time from your Google Account permissions page
• The Apps Script web app URL (used for open tracking and unsubscribe links) accepts only GET requests and does not expose any spreadsheet data publicly

While we take security seriously, no internet transmission is 100% secure. We recommend keeping your Google account secure with a strong password and two-factor authentication.

9. Children's Privacy

ZentryCRM is a business productivity tool intended for use by adults (18 years or older). We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at cs@zentrycrm.com and we will take steps to delete such information.

10. Your Rights

Depending on your location, you may have the following rights regarding your data:

• Access: All data ZentryCRM uses is visible in your own Google Spreadsheet. You can view it at any time
• Deletion: Delete data from your spreadsheet at any time, or uninstall the add-on to revoke all access
• Portability: Your data is already in Google Sheets — you can export it in any format Google Sheets supports
• Objection: You can stop using ZentryCRM and uninstall it at any time from your Google Workspace account settings

To exercise any of these rights or for questions about your data, contact us at cs@zentrycrm.com.

California residents (CCPA)

California residents have the right to know what personal information we collect, the right to delete personal information, and the right to opt out of the sale of personal information. ZentryCRM does not sell personal information. Because we do not maintain a backend database of user data, the personal information ZentryCRM processes lives in your own Google account. Contact us at cs@zentrycrm.com for any California privacy requests.

European residents (GDPR)

If you are located in the European Economic Area, the legal basis for processing your data is your consent (provided when you authorize the Google Workspace permissions) and the performance of the contract to provide ZentryCRM services. You have the right to access, rectify, port, and erase your data, and to withdraw consent at any time by uninstalling the add-on. Contact cs@zentrycrm.com for any GDPR requests.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify users via email or a notice within the ZentryCRM sidebar.

Your continued use of ZentryCRM after changes to this policy constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or ZentryCRM's data practices, please contact us: