This Privacy Policy explains how Agency Optimization LLC (“Referrals Done Right,” “we,” “us,” or “our”) collects, uses, and protects information in connection with the Referrals Done Right relationship-CRM application (the “Service”). It applies to the Service specifically and is separate from the privacy policy for the referralsdoneright.org marketing website.
Who we are
The Service is operated by Agency Optimization LLC. You can reach us at info@referralsdoneright.org.
Information we collect
We collect the following categories of information:
- Account information. When you sign up, our authentication provider (Clerk) processes your name, email address, and login credentials or single-sign-on identifiers. We store your name, email, role, and workspace membership.
- Content you add. The relationships, contacts, notes, interactions, referrals, events, tasks, and other records you enter — including the names, companies, email addresses, phone numbers, and other details of the referral partners and contacts you choose to track.
- Connected accounts (optional). If you connect Google or Microsoft, we receive OAuth tokens that let the Service read and write your calendar and send email that you initiate. We do not receive your password.
- Billing information. When paid plans are active, our payment processor (Stripe) handles your card details. We do not store full card numbers.
- Usage data. Basic technical information such as IP address, device/browser type, and product activity, used to operate and secure the Service.
Google and Microsoft user data (Limited Use)
Referrals Done Right’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Information obtained from Google and Microsoft (such as calendar data and the ability to send mail on your behalf) is used only to provide and improve user-facing features you request — calendar sync and sending email you initiate. We do not sell this data, use it for advertising, or use it to train generalized artificial-intelligence models, and no human reads it except where you ask us to, where required for security or to comply with law, or in aggregate, anonymized form.
How we use information
- Provide, maintain, and secure the Service and your workspace.
- Surface your daily relationship, send email and calendar events you initiate, and generate your reports and scoreboards.
- Send transactional messages such as team invitations, account notices, and support responses.
- Process payments and manage subscriptions (when billing is active).
- Detect, prevent, and address fraud, abuse, and technical issues.
How we share information
We do not sell or rent your information. We share it only with service providers who process data on our behalf to run the Service, under contracts that require them to protect it:
- Clerk — authentication and account management.
- Neon — database hosting.
- Vercel — application hosting.
- Google / Microsoft — only for the calendar and email features you connect.
- Transactional email provider — to deliver invitations and account emails.
- Stripe — payment processing, when paid plans are active.
We may also disclose information if required by law, to protect our rights or users’ safety, or in connection with a merger, acquisition, or sale of assets, subject to this Policy.
Your responsibilities for contact data
The Service lets you store information about other people (your referral partners and contacts). You are responsible for having an appropriate basis to store and use that information and for handling it in line with applicable law. You act as the controller of that data; we process it on your behalf to provide the Service.
Data retention and deletion
We retain your information for as long as your account is active or as needed to provide the Service. You can export your contacts at any time from within the app (Key relationships → Export), and request export or deletion of the rest of your workspace data by emailing us. When you delete a record or close your account, we delete or de-identify the associated data within a reasonable period, except where retention is required by law.
Security
We use reasonable administrative, technical, and physical safeguards to protect information, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Your rights
Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. Residents of California and the EEA/UK have additional rights. To exercise any right, contact us at info@referralsdoneright.org. We will not discriminate against you for exercising these rights.
Children
The Service is intended for business users and is not directed to individuals under 18. We do not knowingly collect data from children.
Changes to this Policy
We may update this Policy from time to time. Material changes will be posted here with an updated date, and where appropriate we will notify you within the Service.
Contact
Agency Optimization LLC — info@referralsdoneright.org