Privacy Policy

Information We Collect

We collect information you provide directly: your name, email address, and phone number when you create an account or contact us; and the business data you store in the platform, such as contact records, leads, notes, and campaign content. We also collect basic usage and device information (such as IP address and browser type) to operate and secure the service.

Where you use our lead-generation features, we also obtain contact and property information about prospective customers from licensed third-party data providers, at your direction and on your behalf. That information becomes part of the business data in your account and is handled under this policy and your instructions. It can include owner names, mailing and property addresses, phone numbers (with the line type and whether the number is on the National Do Not Call Registry), and email addresses.

Where you use our skip-tracing feature on contacts you have added, such as an imported list, we send the names and addresses you choose to a licensed third-party data provider to look up current phone numbers and email addresses, at your direction and on your behalf. What comes back is added to those contacts in your account. It can include whether a number is on the National Do Not Call Registry or a state do-not-call list, or belongs to a known telephone-consumer litigant, and the platform blocks calls and texts to numbers so flagged.

Depending on the features you use, we also store:

• Messages and their records: the emails and texts sent through the Service, delivery status, replies, opt-outs, and consent records (the wording agreed to, when, and the IP address and browser used).
• Calls: who was called, when, the call outcome and length, and the notes the caller types. We do not record phone conversations. Pre-recorded voicemail messages that you upload are stored so they can be played.
• Connected mailboxes: if you connect a Gmail or Microsoft 365 mailbox, we get read-only access to it and store only the messages that relate to your CRM contacts and campaigns (for example, replies to your campaigns). We never send email from, or change anything in, a connected mailbox.
• Files you upload: signature logos, voicemail audio, and contact lists you import.

We use cookies only where they are necessary to operate the service — principally to keep you signed in and to protect your account. We do not use advertising cookies, and we do not use third-party analytics or tracking technologies. We do not ask for dates of birth or ages (only a confirmation that you are 18 or older), government identification numbers, or payment card details.

How We Use Information

We use your information to provide and improve the Creative CRM service, create and secure your account, send account and service notifications, respond to support requests, and — only where you have given separate, specific consent for marketing — send marketing communications about our services.

Text Messaging (SMS) Program

Sitting Pretty Creative LLC (Creative CRM) operates a text messaging program for users and prospective customers who opt in. We offer two separate categories of text message, and you consent to each one independently: (1) account and customer service texts — account notifications, service alerts, and replies to your support requests; and (2) marketing and promotional texts — offers, promotions, product announcements, and event invitations. Consenting to one category never enrolls you in the other.

You opt in at www.creativecrm.app/sms-opt-in by entering your phone number, checking the box for each category you want, and pressing "Sign me UP!". There are two standalone checkboxes, both unchecked by default, and neither depends on the other. That form is our only method of enrolling a number in the messaging program; you do not need an account, and creating an account does not enroll you. You must be at least 18 years old to opt in to the messaging program. Consent is not a condition of any purchase or of creating an account. Message frequency varies. Message and data rates may apply. You can opt out at any time by replying STOP to any message, or reply HELP for help. You may also contact us using the information below to opt out.

We do not share, sell, or otherwise provide your mobile phone number or messaging consent information to any third parties or affiliates for marketing or promotional purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.

How We Share Information

We do not sell your personal information. We share information only with service providers who help us operate the platform (such as hosting, authentication, and message delivery providers) solely so they can perform those services for us, when required by law, or to protect the rights and safety of our users and service. For clarity: this never includes sharing your mobile phone number, opt-in data, or messaging consent with any third party or affiliate for their marketing or promotional purposes.

The kinds of service providers that process personal information for us are:

• website hosting, application servers, databases, and file storage;
• sign-in and account authentication;
• email delivery, and the mailboxes used to send outreach email;
• email address verification, which checks that an address can receive mail before we send to it;
• text message, phone call, caller identification, and voicemail delivery;
• property and contact data providers, for lead generation and skip tracing;
• Google and Microsoft, only for mailboxes you choose to connect;
• domain name services; and
• an artificial intelligence provider, where the AI assistant is enabled (see below).

Each receives only what it needs to perform its service for us, and we will tell you which providers we use if you ask. Platform administrators at Sitting Pretty Creative LLC can access an account to provide support or investigate a problem; every such session, and every change made in it, is logged.

Artificial Intelligence

Creative CRM includes an optional AI assistant powered by Anthropic's Claude models. It is not currently enabled. When it is, the question you type and the CRM records needed to answer it (for example, the contacts or leads you ask about) are sent to Anthropic to generate a response. Under Anthropic's commercial terms, this data is not used to train its models. The assistant only answers questions; it does not make decisions about any person, and nothing it produces is sent to anyone unless you choose to send it.

Google and Microsoft Mailbox Data

Creative CRM's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data from a connected Gmail or Microsoft mailbox is used only to show your CRM conversations and to stop campaign messages to people who have replied. It is never used for advertising, never sold, and never read by people except with your permission, for security, or as required by law. Our support staff cannot see connected-mailbox messages, even when helping with your account. You can disconnect a mailbox at any time in Settings.

Data Retention & Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect your information — including encryption in transit and access controls — consistent with applicable law, including the New York SHIELD Act. Files you upload are not published or listed anywhere. A signature logo can be opened by anyone who has its link, because it has to display in the emails you send; voicemail recordings are available only through private links.

How long we keep information. We keep your account information and business data for as long as your account is active. Contacts and leads you delete can be restored on request and are kept until the account is deleted or you ask us to delete them. Opt-out and do-not-contact records are kept for as long as the account exists, so that people who asked not to be contacted are not contacted again.

Deleted accounts and files stay recoverable for 45 days. In case something is deleted by mistake, we keep deleted accounts and files for 45 days and then delete them permanently. Forty-five days is the time privacy laws such as the California Consumer Privacy Act give us to complete a deletion request.

• Your account. An account owner can request deletion in Settings, under Danger Zone, and can download a copy of the account's data first. The request can be cancelled for 45 days from the day it is made. After that, the account's data, its uploaded files, and its users' sign-in accounts are permanently deleted. A backup copy is kept for up to 45 more days, only to recover from errors, and is then deleted.
• Files. A deleted signature logo or retired voicemail recording is kept for 45 days and then permanently deleted. To get one back within that time, contact us. The record of which recording was played on a call (but not the audio) stays with that call's history.
• Records we keep after deletion. We keep a record that an account existed and was deleted, and logs of support access to it, for security and to meet our legal obligations.

If your information is in someone's account. If a Creative CRM customer contacted you and you want your information deleted, ask that business directly, or email us and we will pass your request on and help them act on it. We keep a minimal record (your email address or phone number) on our do-not-contact lists so you are not contacted again.

Your Choices and Privacy Rights

You may access, update, or request deletion of your personal information by contacting us. You can opt out of marketing emails via the unsubscribe link in any message, and out of text messages by replying STOP.

Depending on where you live, you may also have the right to know what personal information we hold about you, to request that we correct or delete it, and to be free from discrimination for exercising those rights. We do not sell or share personal information as those terms are defined by the California Consumer Privacy Act, and we have not done so in the preceding twelve months. To make a request, contact us using the details below; we will verify the request and respond within the time applicable law allows.

Children's Privacy and Age Requirement

Creative CRM is a business tool intended solely for adults. You must be at least 18 years old to create an account, to use the Service, or to opt in to our text messaging program, consistent with our Terms & Conditions. The Service is not directed to children, and we do not knowingly collect personal information from anyone under 18. In particular, we do not knowingly collect personal information from children under 13, and we do not sell or share the personal information of any individual we know to be under 16.

If you use Creative CRM to manage contacts, leads, or campaigns, you are responsible for the information you import, enter, or generate in your account. You must not store in the Service, or send email, text messages, or calls through the Service to, any individual you know or reasonably believe to be under 18 years of age.

If we learn that we have collected personal information from a child under 13, or that personal information about an individual under 18 is stored in the Service, we will delete it promptly. If you believe a minor has provided us with personal information or that a minor's information is stored in the Service, contact us at info@sittingprettycreative.com and we will remove it.

Where We Operate

Creative CRM is offered only in the United States, and its messaging and calling features may be used only to contact people in the United States. We store and process information in the United States.

Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised effective date.

Contact Us

Questions about this policy or your data? Contact us at info@sittingprettycreative.com.