Your data, and what we do with it.
How Charm treats the calls, email, chat, product usage, and CRM you connect. This is a plain-language overview for our private beta — a formal policy will follow at general availability.
The short version
- You choose what to connect. Charm captures nothing until you switch a source on.
- Before anything reaches an AI model, identifying details — names, companies, phone numbers, emails, signatures — are stripped out.
- Your data is never used to train AI models, and never sold.
- You can read the exact, redacted prompt before it’s sent.
- You can delete your data and revoke access at any time.
What Charm captures
Charm works across the places your deals actually happen — but only the sources you connect, and only once you turn them on:
- Email & calendar, through Google.
- CRM records, through HubSpot — read and write.
- Calls, opt-in per call.
- Chat and product-usage signals, when you enable them.
Disconnect any source at any time and capture stops.
What the AI sees
When Charm drafts a reply or answers a question, it doesn’t hand your raw thread to a model. Identifying details are redacted first — names, companies, phone numbers, email addresses, and signatures become placeholders. You decide, per contact, which details to reveal.
Because you should be able to verify this rather than take our word for it, the app shows you the exact prompt — already redacted — before it’s sent.
We don’t train on your data
Your emails, calls, contacts, and CRM records are used to do your work — nothing else. They are never used to train AI models, ours or anyone’s, and they are never sold or shared for advertising.
Who else touches your data
To deliver the product, Charm relies on a small set of providers, each used only to perform the task you asked for:
- AI model providers (Anthropic, OpenAI, Google, DeepSeek) — to generate drafts and answers, from the redacted prompt only. You choose the model.
- Google — to sync your mail and calendar and send replies you approve.
- HubSpot — to read and update your CRM.
These providers process data on our behalf under their own terms, and we send them the minimum needed to do the job.
Retention & deletion
You stay in control of what’s kept:
- Call recordings and transcripts — you set retention and can delete any one at any time.
- Your mailbox in Charm is a rebuildable cache of Gmail; revoke access and it can be cleared and rebuilt from the source.
- Your account — ask us to delete it and we remove your data.
Your controls
At any point you can:
- Read the redacted prompt before any AI call.
- Choose which contact details are revealed.
- Disconnect Google or HubSpot from their own settings.
- Delete recordings, transcripts, or your whole account.
- Ask what we hold about you.
Questions or requests
This is a plain-language overview for our private beta; a formal policy will accompany general availability. For a privacy question or a deletion request, get in touch — we read every message.