Privacy

We don’t have your data. By design.

TheCRM is local-first. Your contacts, deals, and emails live on your Mac — not on our server, because we don’t have one for your data.


What we never collect

  • ✗ Your contacts
  • ✗ Your deals
  • ✗ Your emails
  • ✗ Your calendar events
  • ✗ Your notes
  • ✗ Your AI prompts or AI responses
  • ✗ Anything you type into TheCRM

There’s no “telemetry” toggle to flip off. There’s nothing to send.


What we do collect

To run a business and to ship updates, we need a small amount of information.

  • Your email address — when you buy. We use it to send the license key, the receipt, and (rarely) major-update announcements.

  • Your country — for VAT/sales tax calculation at checkout, computed automatically via Stripe Tax. We act as the merchant; payment processing is handled by Stripe (PCI-DSS Level 1).

  • Aggregate, anonymous version data — when TheCRM checks for updates, it sends the app version and macOS version (no IP address stored, no personal identifier). This tells us which versions are still in the wild so we know when it’s safe to drop support for older builds.

That’s it. No analytics SDK, no tracking pixels, no fingerprinting.


What lives on your Mac

Your data lives in a single SQLite file at:

~/Library/Application Support/TheCRM/database.sqlite

You can:

  • Open it with any SQLite tool (DB Browser for SQLite, TablePlus, the sqlite3 CLI)
  • Back it up with Time Machine or any backup tool that copies files
  • Export it to CSV anytime from Settings → Data Export
  • Move it to another Mac by copying the file (single-Mac use only — multi-Mac sync isn’t in v1)

If TheCRM disappeared tomorrow, your data would still be accessible with free tools that have existed since 2000.


What about Gmail, Calendar, and Anthropic?

These integrations require third-party services. Here’s how we handle them.

Gmail and Google Calendar

  • Standard Google OAuth
  • Your access tokens live in your Mac’s Keychain (encrypted, OS-protected)
  • We never see your tokens; we never proxy your requests
  • Email and calendar data flows directly between your Mac and Google’s servers

Anthropic (AI features)

  • You provide your own Anthropic API key
  • Your key lives in your Mac’s Keychain
  • Your prompts go from TheCRM directly to api.anthropic.com
  • We don’t proxy them, log them, or see them
  • You pay Anthropic directly for the tokens you use

Works offline. Forever.

Most CRMs stop working when you lose internet — or when their cloud has a bad day. TheCRM doesn’t.

After your first activation, the app validates your license once and caches the result on your Mac. From that point on, you can fly across an ocean, sit in a cafe with broken wifi, or have your ISP fail for a day — TheCRM keeps working. Every contact, every deal, every note is local.

Behind the scenes, TheCRM only re-validates your license against our server roughly once a week, in the background, when you’re online anyway. If the network is down it doesn’t bother you. If our server is ever down, you don’t notice.

This is the difference between software you use and software you rent access to.


Open data, forever

No proprietary file format. SQLite is an open standard. CSV is an open standard. If we ever shut down, your data is still yours, still readable, still useful.


Cookies and analytics on this website

This website (thecrm.one/) uses privacy-respecting analytics (Plausible). It does not use cookies for tracking. It does not collect personal data. It does not share data with third parties for advertising.

We use cookies only for: – Remembering your dark/light mode preference – WordPress essentials (login session if you’re logged in as an admin)

That’s it.


Questions

If anything here is unclear, email privacy@thecrm.one and Urmas (the founder) will reply personally.


Versioning

This privacy page was last updated on 3 May 2026. Material changes are noted at the top of the page when they happen.