CRM
Sign in

Privacy — CRM

Last updated: 30 July 2026

CRM is part of Meta-Me. The Meta-Me privacy policy is the main document — it covers your account data, why we process it, how long we keep it, who our subprocessors are, and how to exercise your rights. It applies here in full. This page adds what CRM itself stores, and explains the one respect in which CRM is different from the other Meta-Me apps.

1. Data about other people

CRM exists to hold information about your contacts. Almost everything in it is personal data belonging to someone other than you — names, messages, notes about conversations, and whatever else you choose to record.

That makes the roles different here. For your own account you are the customer and we are the controller. For your contacts' data you are the controller and we act as your processor: we store and process it on your instructions and for no purpose of our own. You are responsible for having a lawful basis to hold it, for telling those people you hold it if they ask, and for responding if one of them exercises their rights. We will help — see our terms, section 10, which commits us to assisting within 14 days.

2. What CRM stores

  • Records you create — contacts, organisations, notes and other entries, including their titles, summaries and full contents.
  • Links between records, and the labels you organise them with.
  • Conversations with the assistant, and a log of events and background jobs so the app can show you what changed and when.
  • Search embeddings — numerical representations of your records that make semantic search work. These are derived from the record's contents and are deleted with it.

3. AI processing

When you use the assistant or semantic search, the relevant records are sent to Google Gemini to generate a reply or an embedding. This means your contacts' information is sent to Google as part of providing the feature. Gemini API requests are excluded from model training under Google's terms. The legal basis is your consent, which you can withdraw at meta-me.uk/settings/privacy.

4. Separation between users

CRM data is partitioned per instance and enforced in the database itself with row-level security, so one user's records are not reachable from another user's session even in the event of an application bug.

5. Retention and deletion

Records are kept until you delete them or delete your account. Deleting a record removes it, its links and its embeddings. Deleting your Meta-Me account removes everything CRM holds for you — including the contact data you entered, which is how you would fulfil an erasure request from one of your contacts by deleting their record.

6. Your rights

For your own data, see meta-me.uk/settings/privacy or email [email protected]. If you are one of someone's contacts and want to know what they hold about you, ask them — they control that record, not us. You also have the right to complain to the ICO.