Your data, and what we do with it.

Charm works across the places your deals actually happen — but only the sources you connect, and only once you turn them on:

• Email & calendar, through Google.
• CRM records — contacts, companies, and deals in Charm’s own CRM. If you choose, a one-time import reads your existing records and activity from HubSpot, using a token you paste in that is never stored.
• Calls, opt-in per call.
• Chat and product-usage signals, when you enable them.

Disconnect any source at any time and capture stops.

When Charm drafts a reply or answers a question, it doesn’t hand your raw thread to a model. Identifying details are redacted first — names, companies, phone numbers, email addresses, and signatures become placeholders. You decide, per contact, which details to reveal.

Because you should be able to verify this rather than take our word for it, the app shows you the exact prompt — already redacted — before it’s sent.

Your emails, calls, contacts, and CRM records are used to do your work — nothing else. They are never used to train AI models, ours or anyone’s, and they are never sold or shared for advertising.

To deliver the product, Charm relies on a small set of providers, each used only to perform the task you asked for:

• AI model providers (Anthropic, OpenAI, Google, DeepSeek) — to generate drafts and answers, from the redacted prompt only. You choose the model.
• Google — to sync your mail and calendar and send replies you approve.

These providers process data on our behalf under their own terms, and we send them the minimum needed to do the job.

You stay in control of what’s kept:

• Call recordings and transcripts — you set retention and can delete any one at any time.
• Your mailbox in Charm is a rebuildable cache of Gmail; revoke access and it can be cleared and rebuilt from the source.
• Imported records — what you import from HubSpot becomes ordinary Charm CRM records, kept and deleted like any other. Charm also keeps a small import ledger (HubSpot record id → Charm record) so a re-run never duplicates anyone. When you erase a person, their imported data goes with them; the ledger keeps only HubSpot ids and a one-way hash of each of their email addresses, so a later import can never bring them back.
• Your account — ask us to delete it and we remove your data.

At any point you can:

• Read the redacted prompt before any AI call.
• Choose which contact details are revealed.
• Disconnect Google from its own settings.
• Delete recordings, transcripts, or your whole account.
• Ask what we hold about you.

This is a plain-language overview for our private beta; a formal policy will accompany general availability. For a privacy question or a deletion request, get in touch — we read every message.