Privacy Policy

Last updated: September 21, 2026

This Privacy Policy explains how Fluid CRM collects, uses, and protects your information when you use our service at fluidcrm.io.

Information We Collect

Account information you provide:

• Name, email, and password when you sign up
• Company name
• Payment information processed through Stripe (we never see your card numbers)
• Customer, deal, and contact data you input into your CRM workspace

Usage data we collect automatically:

• How you use Fluid CRM (features accessed, pages viewed, actions taken)
• Device and browser information (browser type, operating system, screen resolution)
• IP address and approximate location (country/city level, not exact location)
• Log data for debugging and security

Data collected only with your cookie consent:

• Meta Pixel tracking (Facebook/Instagram advertising performance)
• Conversion events to measure marketing effectiveness
• Retargeting data so we can show relevant ads on Meta platforms

You control this data through the cookie banner on our website. Decline cookies and none of this marketing data is collected.

What Are Cookies

Cookies are small text files stored in your browser. We use two types:

Necessary cookies keep you logged in and remember your settings. These can't be disabled because the service won't work without them.

Marketing cookies track your activity for advertising purposes (mainly Meta Pixel for Facebook/Instagram ads). These only activate after you click Accept on our cookie banner. You can change your choice anytime by clearing your browser cookies for fluidcrm.io.

How We Use Your Information

• Provide and maintain the Fluid CRM service
• Process payments and send billing notices
• Send service updates, security alerts, and support messages
• Improve features based on how the service is actually used
• Show you relevant marketing on Meta platforms (only with cookie consent)
• Respond to your questions, feedback, and support requests
• Comply with legal obligations

We do not sell your personal data. We do not share your CRM workspace data (your customers, deals, contacts) with anyone except as described below.

Who We Share Data With

We use trusted third-party services to run Fluid CRM. They only receive the minimum data needed to do their job:

• Supabase: Database hosting and authentication (Stockholm, Sweden)
• Stripe: Payment processing
• Meta (Facebook): Marketing analytics and advertising (only with cookie consent)
• Kit (formerly ConvertKit): Email marketing for newsletter subscribers
• Sentry: Error monitoring
• Resend: Service email delivery for password resets, notifications, and reminder digests
• Cloudflare: MCP endpoint request routing, and bot and abuse protection on forms (Turnstile)
• Google Analytics (GA4): Product usage analytics
• Microsoft Clarity: Product usage and session analytics
• AI providers you connect yourself, such as Anthropic (Claude) or OpenAI (ChatGPT). They only receive data when you connect them and ask them to work with Fluid CRM.

We may also share information if required by law, to enforce our terms, or to protect rights, property, or safety.

AI Tools and MCP (Optional)

You can choose to connect Fluid CRM to an AI tool such as Claude, ChatGPT or Cursor through MCP (Model Context Protocol). This is optional and nothing is shared until you connect a tool yourself.

• You connect through OAuth, a standard secure sign-in. You approve the connection in Fluid CRM and never give your password to the AI tool.
• A connected tool can read and change the data your Fluid CRM account can access, such as deals, contacts, companies, activities and reminders, when you ask it to.
• A connected AI tool can't delete anything in Fluid CRM. It can only read, add and update your data, so a mistake can always be corrected.
• The data a connected tool reads is sent to the AI provider you chose and handled under that provider's own terms and privacy policy. Fluid CRM doesn't control how they process it.
• We store the access tokens needed to keep the connection working until you disconnect the tool or the tokens expire.
• You can disconnect a connected AI tool at any time.
• We don't use your CRM data to train AI models.

Where Your Data Is Stored

Fluid CRM is hosted on infrastructure based in Sweden (AWS Stockholm region). Your CRM workspace data is stored in EU-compliant data centers. Requests to our MCP endpoint reach us through Cloudflare's global edge network, which means request metadata such as the URL may be processed and briefly logged outside the EU. Some third-party processors (Meta, Stripe, Resend, Cloudflare, Google, Microsoft) operate globally and may transfer data outside the EU under standard contractual clauses or equivalent safeguards.

How Long We Keep Your Data

• Active account data: kept as long as your account is active
• Closed account data: deleted within 90 days of account closure, except where legal obligations require longer retention (e.g. tax records for 7 years under Finnish law)
• Marketing data: deleted within 180 days of inactivity or whenever you withdraw consent
• Support communications: kept for 2 years after the conversation ends

Your Rights

If you're in the EU, UK, or similar jurisdiction, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and personal data
• Export your data in a portable format
• Object to certain processing
• Withdraw consent at any time
• Complain to your local data protection authority

Email hello@fluidcrm.io for any of these requests. We respond within 30 days.

Data Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), encrypted databases, two-factor authentication for team accounts, and regular security audits. That said, no system is fully impenetrable. If we ever detect a breach affecting your data, we'll notify you within 72 hours as required by GDPR.

Children's Privacy

Fluid CRM is not for users under 16. We don't knowingly collect data from anyone under 16. If you believe we've collected data from a minor, contact us and we'll delete it.

Changes to This Policy

We may update this Privacy Policy occasionally. Material changes will be communicated by email or in-app notice. The "Last updated" date at the top reflects the most recent revision.

Contact

Questions, requests, or complaints: hello@fluidcrm.io

Fluid CRM is operated by Fenixtal, based in Finland.