Who operates ContactArc
ContactArc is a customer relationship management product operated by InnovaSouls. This policy describes the ContactArc website, account services and CRM platform. Contact us at contactarc.app@gmail.com for privacy questions.
A company using ContactArc decides which customer information it collects and how that information is used in its workspace. Contact that company first about its sales or marketing activity. InnovaSouls operates the platform and handles account, support and website information for its own service purposes.
Information we handle
- Accounts and company settings: names, work email addresses, roles, workspace membership and authentication information.
- Workspace records: contacts, leads, opportunities, tasks, notes, form and survey responses, bookings, communications and files that a company submits to the platform.
- Connected services: account identifiers, selected provider resources, permission grants and authentication tokens needed to operate an integration.
- Service and support records: access and security logs, integration results, error summaries, support requests and early-access enquiries.
How information is used
We use information to provide company workspaces, authenticate users, apply permissions, run configured CRM features and integrations, answer support requests, investigate failures and protect the service. Companies remain responsible for having permission to collect, contact and process the people in their records.
ContactArc does not sell personal information or use connected Google account data for advertising or to train general-purpose AI models.
Google Sheets integration
When a workspace administrator connects Google Sheets, ContactArc requests the Google account email address and access to the specific Drive files used with ContactArc. The provider permission allows viewing, editing, creating and deleting those specific files.
The current integration creates a dedicated spreadsheet and exports selected CRM lead fields according to the workspace’s saved mapping. It reads spreadsheet headers and event identifiers to validate the mapping and prevent duplicate exports. It stores the connected account identity and encrypted access and refresh tokens so an authorized sync can continue without repeated sign-in.
Google data is used to provide and support the requested integration. ContactArc’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
Meta and other optional integrations
When available and enabled by a workspace administrator, the Meta Lead Ads integration imports selected Facebook or Instagram instant-form leads into that company’s workspace. The imported fields depend on the form and the mapping selected by the company. A lead submission does not automatically create marketing consent in ContactArc.
Calendar integrations, customer-configured webhooks and other connected services operate only when configured. Those providers process information under their own terms and privacy policies. Review the destination and fields before enabling any export or automation.
Retention and security
Account and workspace information is retained while needed to provide the service or until an authorized deletion request is processed, subject to applicable obligations. Logs and backups may retain information after a record is removed from the active workspace. Provider copies, such as an exported spreadsheet, are managed in the connected provider account.
ContactArc uses HTTPS, authenticated access and workspace role checks. Integration credentials are stored in encrypted credential fields. Company administrators should limit account access and protect their own passwords and provider accounts.
Your choices and deletion requests
You can pause a sync, disconnect an integration or ask your company administrator to correct or remove a record. Disconnecting an integration removes the stored provider tokens and stops its future use by ContactArc; it does not remove information already exported to another service. You can also remove the provider grant in your Google or Meta account settings.
For an account or workspace deletion request, contact contactarc.app@gmail.com. Include the company/workspace name, your work email and the scope of the request. We verify identity and authority before acting. See the data-deletion instructions for details. Do not email passwords, authentication tokens or verification codes.
