MAVERICK FRAME · STUDIO CRM

Privacy policy

Last updated: 21 October 2026. This policy covers Maverick Frame CRM, including its Google / Gmail integration. The CRM is operated for Maverick Frame Studio by Concept Vibe Ltd. For privacy questions or deletion requests, contact kuzmenkodmitry@gmail.com. The studio’s website privacy policy provides its company contact details.

Data we access

The CRM stores staff account details, project and contact records, tasks and business correspondence. If you connect Gmail, we access your Gmail address and the email data needed to show your mailbox: message and thread identifiers, senders and recipients, subjects, dates, message bodies, and attachment information. Attachment content is retrieved when requested.

Google’s Gmail read permission allows the CRM to read your mailbox. The initial import normally covers the previous year, followed by new messages; this import window is not an automatic deletion period. Staff with sending permission may also grant Gmail sending permission to send and reply through the connected account.

How we use Google data

We use this data to synchronize and display email, retrieve requested attachments, send messages you initiate, and associate correspondence with existing CRM contacts and business records. Background synchronization continues while the mailbox connection remains active.

We do not sell Google user data, use it for advertising, or use it to train general-purpose AI or machine-learning models. The Gmail integration does not automatically send message bodies to an AI service.

Who can access it

A newly connected personal Gmail mailbox is accessible only to its owner through the CRM. Other staff do not gain access simply by being CRM administrators. Existing shared or assigned business mailboxes follow the CRM’s explicit mailbox access rules.

Data is processed on the CRM’s server and by Google to provide the integration. Infrastructure providers may process it to host and operate the service. We do not transfer Google data to unrelated parties; any transfer must be necessary to provide a user-facing feature with the user’s consent, protect security, or comply with applicable law. Operational access is restricted to authorized personnel and the permitted purposes below.

Storage and security

Imported messages are stored in the CRM database. Google refresh credentials are encrypted separately using AES-256-GCM; access to the encryption key is restricted on the server. Connections use HTTPS. CRM permissions restrict access to mailbox data. These measures do not make message content end-to-end encrypted.

Disconnection, retention and deletion

You can disconnect Gmail in the CRM’s Mail settings. This stops further synchronization and sending and removes the saved Google refresh credential. You can also revoke the CRM’s permission in Google account connections.

Disconnecting or revoking Google access does not automatically delete messages already imported into the CRM. Imported correspondence is retained for the studio’s ongoing business records until deleted by an authorized operator. To request deletion of imported Gmail data or your CRM account data, contact the address above and identify the connected mailbox. We verify the request and explain any records that must be retained for applicable legal obligations. Disconnection does not delete messages from Gmail.

Google API Services User Data Policy

Maverick Frame CRM’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Human access to Google data is limited to the user’s explicit agreement for specific data, necessary security investigations, legal requirements, or aggregated and anonymized internal operations permitted by that policy.

Policy updates

We publish updates on this page. New Google permissions require the account holder’s consent; changing CRM roles does not silently expand a Google grant.