Privacy Policy

Who decides what

A company that uses TuberCRM has a book: its accounts, the people at them, and its history with them. That company decides who is on its book and what goes into it. We keep the book and run the service for that company. If you are on a company's book and have a question about what it holds, that company's owner is the first person to ask, and we will help them answer.

What we collect

When you sign in

Your name, your email address, and a record that you signed in. TuberCRM never sees or stores a password. Sign-in is handled by our identity provider, WorkOS.

When you sign in with Google

Google shares your name, your email address, your profile picture, and whether it has verified the address. That is all we ask Google for. We use the name and the address to confirm who you are and open your company's book for you, and we do not use the picture. Signing in with Google gives TuberCRM no access to your Gmail, your calendar, your files, or your contacts.

What your company puts in its book

Accounts, the people at them and how to reach them, notes on calls and meetings, deals, purchases, next steps, tickets, comments, files attached to tickets, time entries, and profile photos.

Mail and calendar, when your company connects them

A company's Google Workspace administrator can connect the mailboxes they name. TuberCRM then reads mail and calendar entries in those mailboxes, with read-only access, to file correspondence with customers to the right account.

• A message is kept only when it is with a company or a person in your book, or when one of your people sent it to a business address, which adds that company to the book.
• A calendar entry is kept only when somebody invited to it, other than the mailbox's owner, is a person or a company in your book.
• Everything else is discarded without being stored. That includes newsletters and bulk mail, and mail with an address at a public mail provider, such as gmail.com, unless that person is already in your book.
• TuberCRM sends mail from a connected mailbox only when its owner presses Send.

What your assistant asks for

If you connect an AI assistant, TuberCRM receives the requests it makes for you and answers them with records you are allowed to see. What the assistant then does with what it reads is governed by the terms of the company that provides it.

What it takes to run the service

The cookies the pages need to work, such as the one that keeps you signed in, records of requests and errors, and the reports you send with Report a problem, including the page you were on. None of it is used for advertising or tracking.

This website

tubercrm.com sets no cookies, runs no analytics, and has no forms.

What we do with it

• Provide TuberCRM to your company and to you.
• Keep it working and secure, and fix what breaks.
• Answer the problems you report.
• Send email about the service: invitations, notifications about your tickets, and notices about your account.

We do not sell this information, and we do not use it for advertising or to train AI models.

AI assistants

The product does not send your records to an AI model on its own. An assistant sees your records only when you connect it yourself, and then only what your sign-in is allowed to see. You can disconnect it at any time from the assistant's own settings. Separately, we use AI tools to operate the service, as described under Who handles it for us.

Who handles it for us

We use a small number of companies to run TuberCRM. Each handles this information only to provide its part of the service.

• Railway hosts the service and its databases, in the United States.
• WorkOS handles sign-in and sends invitations.
• Google, when you sign in with Google or when your company connects its Google Workspace.
• Cloudflare serves this website and stores backups and files attached to tickets.
• Resend delivers the email TuberCRM sends about the service.
• Anthropic provides the AI tools we use to operate and support TuberCRM. When we look into a problem or check that the service is healthy, the records involved may be processed by those tools.

We also disclose information when the law requires it, and we would tell the company concerned unless the law forbids that.

How it is kept

Each company's book is kept in its own database, apart from every other company's. Connections to TuberCRM are encrypted. A book opens only for people its company has added, and each person sees only what their role allows. We, and the AI tools we operate TuberCRM with, open a company's records only to fix a problem that company reported, to keep the service running and secure, or when the law requires it.

No system is perfectly secure. If we learn that somebody got at a company's records who should not have, we will tell that company without undue delay.

How long it is kept

We keep a company's book for as long as that company uses TuberCRM. When a company leaves, it can ask for a copy of its book for 30 days. After that, or sooner if the company asks, we delete the book and the backup copies we hold of it, unless the law requires us to keep something. Point-in-time backups kept by our host expire on the host's own schedule.

Your choices

• You can ask to see, correct, or delete information about you. If you are on a company's book, ask that company's owner; they can do most of it themselves, and we will help.
• If you are a person in a company's records, as a customer or a contact, ask that company. We will pass along any request that reaches us.
• You can write to us directly, and we will answer within 30 days.

Children

TuberCRM is a tool for businesses. It is not meant for anybody under 16, and we do not knowingly collect information from children.

Changes

If this policy changes, the new version is posted here with a new date. If a change is significant, we will tell each company's owners by email before it takes effect.

Contact

The Yummy Potato, LLC
P.O. Box 1136
Forest, VA 24551
United States

You can also reach us through typllc.com, and anybody signed in to TuberCRM can use Report a problem.