AdsRole CRM privacy policy
Last updated: 15 October 2026
AdsRole CRM ("the CRM") is AdsRole's internal sales and project management tool, available at hub.adsrole.app to AdsRole staff on the company roster. This policy explains how the CRM accesses, uses, stores, shares and deletes Google user data.
Google user data we access
- Basic profile (openid, email, profile): your name, email address and Google account ID.
- Gmail (gmail.readonly, gmail.send): email messages between you and the CRM's leads, and the ability to send email as you.
- Google Calendar (calendar.events): your calendar events, and the ability to create events.
- Google Drive (drive.file): only files the CRM creates or that you choose to attach.
- Google Sheets (spreadsheets, administrators only): the company lead sheet the administrator connects.
- Google Workspace directory (admin.directory.user.readonly, administrators only): the list of company accounts and whether each is suspended.
How we use it
- Basic profile: to sign you in and check that you are an approved team member.
- Gmail: to show each lead's full email history on the lead's page, to open a message or attachment when you click it, and to send emails and replies you write in the CRM. The CRM only links messages that involve a lead; other mail is not stored.
- Calendar: to list your upcoming meetings and create Google Meet meetings with leads when you book them.
- Drive: to store and open documents you attach to a lead.
- Sheets: to keep the company lead sheet and the CRM in sync.
- Directory: to disable CRM access for people who have left the company.
We use Google user data only to provide these user-facing features. We do not use it for advertising, and we do not sell it.
What we store
- For emails with leads: sender, recipients, subject, date and Gmail message ID. Message bodies and attachments are fetched from Gmail when you open them and are not stored.
- For Drive documents: file name, type, size and link.
- Google access (refresh) tokens, encrypted.
- Lead records synced with the company sheet.
Sharing and transfer
Google user data is visible only to signed-in AdsRole staff whose role allows them to see the related lead or project. We do not share, sell or transfer it to third parties, except: to our hosting and database provider (Railway) solely to run the CRM; when required by law; or as part of a merger or acquisition with prior notice to users.
How we protect it
All traffic uses HTTPS. Google tokens are encrypted at rest with a server-held key and are never sent to the browser. Access inside the CRM is checked on every request against your role, and administrator actions are recorded in an audit log.
Retention and deletion
- Google tokens are deleted as soon as you disconnect Gmail, Calendar or Drive in the CRM, or when Google reports that access was revoked. Tokens of disabled accounts are no longer used and are deleted on request.
- Email details and document links are kept for as long as the related lead is kept as a business record.
- You can revoke the CRM's access at any time at myaccount.google.com/permissions.
- To request deletion of your data, email harvey@24x7ads.com. We delete it within 30 days, except where we must keep it by law.
Limited Use
AdsRole CRM's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Google Workspace APIs are not used to develop, improve, or train non-personalized AI and/or ML models.
Changes and contact
If we change how the CRM uses Google user data, we will update this page and notify users before the change takes effect. Questions: harvey@24x7ads.com. See also our terms of service and homepage.