Privacy Policy

Prestige Tree CRM (the “Service”) is a customer relationship management application operated by Automation Invasion (“we”, “us”) for the business that uses it (the “Customer”) and that business’s authorized staff (“Users”). This policy explains what information the Service handles and how.

Information from Google Sign-In

Users sign in with Google. When you do, Google shares your name, email address, and profile picture with the Service (the openid, email, and profile scopes). We use this information only to:

• confirm your identity and keep you signed in;
• check that your email address is authorized to access the Service; and
• show your name and email to other Users in the same organization.

We do not request access to your Gmail, Google Drive, Calendar, contacts, or any other Google data. Prestige Tree CRM’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Business information entered into the Service

Users enter business records into the Service, such as customer names, contact details, service addresses, estimates, jobs, schedules, invoices, and payment records. This information belongs to the Customer. We process it on the Customer’s behalf and only to provide the Service. Card numbers and bank credentials are not collected or stored.

How we share information

We do not sell personal information, and we do not use it for advertising. We share information only:

• with service providers that host and run the Service: Supabase (database and authentication), Vercel (web hosting), and Google (sign-in);
• with the Customer and its authorized Users; and
• when required by law, or to protect the rights and safety of Users or others.

Security

Data is encrypted in transit (HTTPS) and at rest by our hosting providers. Access is limited to authorized Users. The database enforces row-level security, so each User sees only their own organization’s data. No system is perfectly secure, but we take reasonable steps to protect the information we hold.

Retention and deletion

We keep account information while your access is active. We keep business records for as long as the Customer uses the Service, or as the Customer directs. To have your account removed, contact your organization’s administrator or email us at admin@automationinvasion.com. You can also revoke the Service’s access to your Google account at any time from your Google Account permissions page.

Children

The Service is a business tool. It is not directed to children under 13, and we do not knowingly collect their information.

Changes

We may update this policy from time to time. When we do, we will change the “Last updated” date above.

Contact

If you have questions about this policy or your information, contact Automation Invasion at admin@automationinvasion.com.