Privacy Policy

This Privacy Policy explains how Sceptrum LLC (“Sceptrum,” “we,” “us”) collects, uses, and protects information when you visit this website, contact us, or use Sceptrum CRM as a client. We're a small business, and we try to collect only what we need.

Information we collect

Information you give us

• Contact form: your first and last name, email address, and the message you send.
• Client accounts: your name, email address, password (stored only in scrambled, hashed form), optional profile photo, and your email notification preferences.
• Billing: when you add a payment method, you enter it directly into a form provided by our payment processor, Stripe. Your full card or bank account number goes to Stripe and is never sent to or stored on our servers. We keep only the type, brand, and last four digits so you can recognize it.

Information collected automatically

• Technical details: your IP address, browser and device type (user agent), and the page that referred you to our site.
• Visit statistics: we group page views into visits (sessions), including the page you arrived on, how many pages you viewed, the referring site or campaign, and your general device type, to understand how many people use the site and how they found it. Signed-in clients aren't tracked.
• Sign-in history: for client accounts, we record each sign-in and failed sign-in attempt with its date, IP address, device and browser, and approximate location (city, state, country). We estimate location from the IP address using a database stored on our own servers; your IP address isn't sent to an outside service to do this. You can review your history under Login activity in the CRM.
• Cookies: see “Cookies” below.

How we use information

• To reply to your inquiry and discuss a potential project. When you use our contact form, we email you a one-time confirmation that we received your message.
• To provide Sceptrum CRM, including the email notifications you choose to receive (such as new-lead alerts and a morning summary) and account emails such as password resets and security notices.
• To bill for our services and keep your account in good standing.
• To provide, maintain, and improve our website and services.
• To understand site traffic in aggregate, such as how many people visited and where they came from.
• To protect accounts and the site against spam, abuse, unauthorized access, and security threats.
• To meet legal obligations.

We do not sell your personal information, and we don't share it with third parties for their own marketing.

Calendar integrations (Google and Microsoft)

Sceptrum CRM can optionally sync with your Google Calendar or Microsoft Outlook calendar. This only happens if you choose to connect your calendar from your CRM profile and approve access on Google's or Microsoft's sign-in page. We never see your Google or Microsoft password.

What we access

• Your account's email address, so you can see which calendar is connected.
• Events on your primary calendar from 30 days in the past to 6 months ahead: each event's title, date and time, location, description, guest email addresses, and a link to open it in your calendar.

With Google, we request permission to view and edit events on your calendars (calendar.events), plus your basic profile and email address. With Microsoft, we request permission to read and write your calendars and to read your basic profile.

How we use it

• To show your schedule on the CRM's Calendar page.
• To link events to contacts in your CRM when a guest's email address matches one of your contacts, so meetings appear on that contact's record.
• To add, update, and remove events on your calendar when you create or change a timed task or an event in the CRM, and to keep those tasks in sync when you move or delete the event in your calendar.
• To send a calendar invitation to a contact, only when you click “Send invite.” The invitation is sent by Google or Microsoft from your own calendar account.

We use calendar data only to provide these features to you. We don't sell it, use it for advertising, or use it to build profiles of you. We don't use it to train artificial intelligence or machine learning models. People at Sceptrum don't read your calendar data unless you ask us to for support, it's needed for security purposes (such as investigating abuse), or the law requires it. Calendar data is visible inside the CRM only to you, except that meetings linked to a contact appear on that contact's record for your company's CRM users.

Storage, sharing, and deletion

• The access tokens that let us reach your calendar are stored encrypted. Synced events are stored in our database so the CRM can display them.
• We don't share calendar data with anyone except the service providers that host and operate Sceptrum CRM, and only so they can do that.
• When you disconnect your calendar from your CRM profile, we stop syncing, delete the stored access tokens, and delete the synced events from our database. Your CRM tasks remain. You can also remove Sceptrum's access at any time from your Google Account permissions or Microsoft account app access settings.
• If your client account is deleted, your calendar connection and synced events are deleted with it.

Sceptrum CRM's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies

This site uses a small number of first-party cookies:

• Essential cookies keep forms secure and, for clients, keep you signed in (including the optional “Keep me signed in” cookie). The site won't work properly without them.
• A visitor cookie (visitor_id) lets us tell new visitors apart from returning ones. It contains a random identifier, not your name or email, and expires after one year.

Our billing page loads Stripe's payment form, which may set its own cookies to process payments securely and prevent fraud, as described in Stripe's privacy policy. You can block or delete cookies in your browser settings. Doing so may affect how parts of the site work.

Service providers

We rely on a few providers to run our website and services. Each receives only what it needs to do its job:

• Cloud hosting: stores and serves the website and Sceptrum CRM, including the data described in this policy.
• Amazon Web Services (Amazon SES): delivers our emails, such as contact-form confirmations, CRM notifications, and password resets.
• Stripe: processes payments and stores payment methods for clients.
• Google and Microsoft: only if you connect your calendar, as described above.
• Google Fonts and jsDelivr: serve fonts and scripts used by the site. When your browser loads them, these providers may receive your IP address and basic technical information.

Each provider handles information under its own privacy policy and our agreements with it.

Client data in Sceptrum CRM

If you're a client using Sceptrum CRM, the information you store in the CRM (such as your contacts, leads, notes, tasks, and connected calendar events) is processed on your behalf to provide the service, under the terms of your client agreement.

How long we keep information

• Contact form submissions: as long as needed to respond to you and manage any resulting business relationship.
• Visit statistics: as long as they're useful for understanding site traffic.
• Sign-in history: one year, then deleted automatically.
• Calendar data: until you disconnect your calendar or your account is deleted.
• Billing records: as long as required for accounting and tax purposes.

We delete or anonymize information when it's no longer needed.

How we protect information

We use reasonable technical and organizational measures to protect your information, including encrypted connections, hashed passwords, encryption of calendar access tokens, and limits on repeated sign-in and password-reset attempts. No method of transmission or storage is completely secure, but we work to keep your data safe.

Your choices and rights

• You can turn CRM email notifications on or off from your profile.
• You can disconnect a connected calendar at any time from your profile.
• You can ask us to access, correct, or delete the personal information we hold about you. Depending on where you live, you may have additional rights under state privacy laws.

To make a request, contact us.

Children's privacy

This site is intended for businesses and is not directed to children under 13. We don't knowingly collect information from children.

Changes to this policy

We may update this policy from time to time. When we do, we'll change the “Last updated” date above.

Contact us

Questions about this policy? Get in touch. Sceptrum LLC, Minnesota, United States.