Privacy Policy

What we collect

Your account

Name, email address, and role within your workspace — created when your workspace invites you, or when you sign in.

Contacts and leads

The records a workspace loads into the CRM: names, email addresses, phone numbers, notes, and the history of messages and activity logged against them. Whether an email we sent for the workspace was opened and which link was clicked, when the workspace has email tracking switched on. This data belongs to the tenant that entered it, not to us.

Inbox digest (optional, off until you turn it on)

If you turn on the inbox digest, BranchPage reads the sender, subject, date and message headers (used only to recognise mailing lists, and not kept) of messages in your connected Microsoft 365 or Gmail inbox from the last 7 days, and never moves, marks or deletes mail. It keeps one line per message (sender name, subject, time, link) for 7 days, visible only to you. Messages from your CRM contacts are not kept.

Summarize my inbox (only when you tap it)

When you tap "Summarize my inbox", BranchPage reads the text of up to 60 messages from the last 24 hours (never attachments) and sends it to our AI service provider, Anthropic, to write a short summary for you. Before anything is sent, the names we know — your CRM contacts, your colleagues and the people who wrote to you — are replaced with placeholders, and email addresses, phone numbers, street addresses, links and account-like numbers are removed. Messages involving your CRM contacts are sent only if they contain no sensitive identifiers or financial documents, and with dollar amounts and other names we can recognize removed. Other names mentioned in messages that don't involve your CRM contacts may be included. Anthropic doesn't use it for training and deletes it within 30 days (longer only for content flagged under its usage policies). The summary is kept for 7 days, visible only to you. Mailbox data is never used for advertising or read by people. BranchPage's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Documents

Files a workspace uploads to a contact's record. They are kept in private storage and scanned for malware before anyone can open them; a file that fails the check is deleted.

Loans

Loan details a workspace sends from its LOS, through its connection or through the API, or enters by hand, including the borrowers and other parties on the file.

Calls and texts

Text messages sent and received, call logs and notes, and the link to a call recording where one exists.

Website and form leads

What a person submits on a workspace's form or website.

Billing

Your workspace's plan and payment status, through Stripe. We don't store card numbers.

Performance data

Page-load measurements (Vercel Speed Insights), used to keep the product fast.

Usage metadata

Sign-ins, feature usage, and API activity, kept for security, billing, and the audit log described on our security page.

How AI is used

Several features send data to an AI provider to generate a result. In every case, content aimed at a client or lead is a draft a person reviews before anything is sent — the AI does not send on its own.

AI Companion

Answers questions about your book of business and drafts replies to leads and clients. Drafted replies are never sent automatically; a person reads, edits, and sends them.

AI Automation module

Plans and runs workflow steps a workspace configures, within limits your workspace sets.

AI Studio

Generates flyers and landing pages from a prompt, for a person to review and publish.

Image generation for Social

Generates images for social posts from a prompt; the resulting post is a draft until a person schedules or publishes it.

Which provider

These features run on third-party AI model providers — see the subprocessor table on /security for what each one receives. Anthropic, which runs the features that read your records, deletes what it receives within 30 days (longer only for content flagged under its usage policies) and never uses it to train or improve any model. Image generation runs on Google (Gemini). BranchPage doesn't use your data to train models either.

Who we share it with

We do not sell personal data. The third parties that process it on our behalf — what each one receives and why — are listed in the Subprocessors table on the security page: Supabase, Vercel, Resend, Twilio, Cloudmersive, Cloudflare, Atlassian (Jira), Seamless.AI, UpLead, Stripe, Microsoft (Graph), Google (Gmail), Meta (Facebook / Instagram), LinkedIn, TikTok, and the AI model providers behind the features described above.

How long we keep it

A workspace's records

Kept while the workspace is subscribed.

Archived contacts

Deleted 7 years after their last activity, to meet mortgage record-keeping rules.

Opt-outs

Unsubscribes and do-not-contact requests are kept for as long as the workspace exists, so they keep being honored.

Proof of consent

The proof of consent of a deleted contact is kept for 5 years.

Logs and AI chat

Sign-in failure logs, error logs and AI assistant chat history are deleted after 365 days. The audit log of who did what is kept longer, as evidence.

When a workspace leaves

Its data is deleted on the schedule described on /security. Backups age out on their own schedule.

Your rights

If you use the CRM

To see or delete the data of your own account, ask your workspace admin, or email support@branchpage.com.

If an office has your details

If you are a lead or client of an office that uses BranchPage, your request to see or delete your data goes to that office, which decides what happens to its records. If you write to us, we pass your request to the office within 2 business days and tell you we did.

Deletion in the product

Contacts and uploaded documents can be deleted from within the product.

Cookies

Sign-in

Keep you signed in, remember which workspace you're in, and sign you out after inactivity. Kept for up to 400 days.

Short-lived

Used during sign-in, two-step setup and Sign in as, and to show a new API key once. They last from a minute to a few hours, or until you close the browser.

Last product used

Remembers which BranchPage product you used last, so signing in takes you back to it. Kept for 1 year.

Display preferences

Your light or dark theme and whether the sidebar is collapsed. Kept for 1 year.

The CRM's pages set no advertising cookies and load no tracking pixels. We don't track you across other websites, so a Do Not Track or Global Privacy Control signal changes nothing here.

Other things to know

Children

The CRM is a business tool, not for anyone under 18. We don't knowingly collect data from children.

Where data is stored

In the United States.

Changes to this policy

We update the date at the top of this page. For a material change, we email workspace admins.

Questions

Email support@branchpage.com with any privacy question or request.