Privacy Policy

Who we are

B2B CRM is a product of Sales Led Oy (trading as Clevenio), a Finnish company headquartered in Helsinki, Finland. We operate b2bcrm.net and the B2B CRM application.

The data controller for personal data processed via the website and the free CRM is Sales Led Oy.

When you visit the website

Server logs — IP address, user agent, requested URL, timestamp. Used to run the service and detect abuse. Retained for 30 days.
Cookies — minimal session cookies for the dashboard and form submissions. No third-party advertising trackers.
Form submissions — when you request beta access, we receive the name, work email, company, and any message you provide. We use it to provision your workspace and follow up.

When you use the free CRM

The CRM stores the data you put into it, on behalf of your team, which typically includes:

Contact records — names, work emails, phone numbers, job titles, and custom fields you define.
Company / account records — company names, websites, custom fields.
Deal records — deal stages, amounts, notes, activity timelines.
Email content (if you connect email sync) — sent and received messages associated with deal records.
Call recordings (if you enable call summary) — and the structured summaries the AI agents produce from them.

You are the data controller for the contacts, accounts, deals, emails, and calls you store in the CRM. We are the data processor acting on your instructions, governed by our Data Processing Agreement (DPA), available on request.

When you turn on AI agents

The AI agents read and write data inside your CRM workspace. Specifically:

The Research Agent reads account records and writes briefs into account fields.
The Outreach Agent reads research briefs and writes drafts into the rep’s outbox.
The Qualification Agent reads inbound submissions and writes qualification scores + rationales into contact records.
The Call-Summary Agent reads call recordings (only ones you explicitly upload or connect) and writes structured summaries into deal records.
The Hygiene Agent reads and writes across all records to keep them current.

Agent activity is logged and reversible. We do not use your CRM data to train shared AI models — agents are configured per-workspace.

Why we process your data

To provide the service — running the CRM and the agents.
To respond to inquiries — when you fill in a contact or beta form.
To comply with law — tax records, anti-fraud, and other legal obligations.
To improve the service — aggregated, anonymised analytics.

We do not use your personal data for advertising, profiling, or sale to third parties.

Subprocessors

We use carefully selected subprocessors:

Vercel — hosting (EU and US regions).
AWS — backend infrastructure (EU regions where supported).
Stripe — payment processing.
Anthropic / OpenAI — LLM inference for AI agents (no training on customer data, zero-retention API tier where available).
A transcription provider for the Call-Summary Agent (signed DPA, EU residency where available).

The current subprocessor list is available on request.

You have the right to access, correct, delete, export, and object to processing of your personal data. End users whose contacts are stored in a customer’s CRM should contact that customer directly (the customer is the controller).

To exercise any right against us as a data controller (for the website or your account), email privacy@clevenio.com.

Data retention

Server logs: 30 days
CRM data: retained for the lifetime of your workspace; deleted within 30 days of workspace deletion (subject to legal hold)
Form submissions: 24 months from last contact
Backups: rolling 30-day window

Changes

We’ll update this page when our practices change. Material changes notified by email to active customers.

Contact

Privacy questions: privacy@clevenio.com
Postal: Sales Led Oy, Helsinki, Finland