ContactArc CRM
ContactArc · Information & policies

Privacy policy

How ContactArc handles account information, company workspace data and the integrations you choose to connect.

Last updated 2 November 2026Operator: InnovaSouls · Pakistan

Who operates ContactArc

ContactArc is a customer relationship management product operated by InnovaSouls. This policy describes the ContactArc website, account services and CRM platform. Contact us at contactarc.app@gmail.com for privacy questions.

A company using ContactArc decides which customer information it collects and how that information is used in its workspace. Contact that company first about its sales or marketing activity. InnovaSouls operates the platform and handles account, support and website information for its own service purposes.

Information we handle

  • Accounts and company settings: names, work email addresses, roles, workspace membership and authentication information.
  • Workspace records: contacts, leads, opportunities, tasks, notes, form and survey responses, bookings, communications and files that a company submits to the platform.
  • Connected services: account identifiers, selected provider resources, permission grants and authentication tokens needed to operate an integration.
  • Service and support records: access and security logs, integration results, error summaries, support requests and early-access enquiries.

How information is used

We use information to provide company workspaces, authenticate users, apply permissions, run configured CRM features and integrations, answer support requests, investigate failures and protect the service. Companies remain responsible for having permission to collect, contact and process the people in their records.

ContactArc does not sell personal information or use connected Google account data for advertising or to train general-purpose AI models.

Google Sheets integration

When a workspace administrator connects Google Sheets, ContactArc requests the Google account email address and access to the specific Drive files used with ContactArc. The provider permission allows viewing, editing, creating and deleting those specific files.

The current integration creates a dedicated spreadsheet and exports selected CRM lead fields according to the workspace’s saved mapping. It reads spreadsheet headers and event identifiers to validate the mapping and prevent duplicate exports. It stores the connected account identity and encrypted access and refresh tokens so an authorized sync can continue without repeated sign-in.

Google data is used to provide and support the requested integration. ContactArc’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Meta and other optional integrations

When available and enabled by a workspace administrator, the Meta Lead Ads integration imports selected Facebook or Instagram instant-form leads into that company’s workspace. The imported fields depend on the form and the mapping selected by the company. A lead submission does not automatically create marketing consent in ContactArc.

Calendar integrations, customer-configured webhooks and other connected services operate only when configured. Those providers process information under their own terms and privacy policies. Review the destination and fields before enabling any export or automation.

Service providers and access

Infrastructure providers process information to host and operate ContactArc. Google, Meta and other connected providers receive the information required for the integrations a company enables. Authorized company members can access workspace information according to their roles. Operator access is used for administration, security and support.

We may disclose information when required by applicable law or when reasonably necessary to address fraud, abuse or a security incident. Information may be processed in countries other than your own through hosting or connected service providers.

Retention and security

Account and workspace information is retained while needed to provide the service or until an authorized deletion request is processed, subject to applicable obligations. Logs and backups may retain information after a record is removed from the active workspace. Provider copies, such as an exported spreadsheet, are managed in the connected provider account.

ContactArc uses HTTPS, authenticated access and workspace role checks. Integration credentials are stored in encrypted credential fields. Company administrators should limit account access and protect their own passwords and provider accounts.

Your choices and deletion requests

You can pause a sync, disconnect an integration or ask your company administrator to correct or remove a record. Disconnecting an integration removes the stored provider tokens and stops its future use by ContactArc; it does not remove information already exported to another service. You can also remove the provider grant in your Google or Meta account settings.

For an account or workspace deletion request, contact contactarc.app@gmail.com. Include the company/workspace name, your work email and the scope of the request. We verify identity and authority before acting. See the data-deletion instructions for details. Do not email passwords, authentication tokens or verification codes.

Cookies and updates

ContactArc uses cookies and similar browser state for sign-in, workspace routing and essential application preferences. Connected providers may set their own cookies when you visit their services.

We may update this policy as the service changes. The published revision date identifies the current version. Questions can be sent to contactarc.app@gmail.com.