Privacy Policy

Last updated: 16 October 2026

CertaLink is a CRM that runs inside Gmail as a Chrome extension. It is operated by Kurt Jones ("we", "us"). This policy explains what information CertaLink collects, why, and what control you have over it.

Information we collect

Your account

• When you sign in with Google, we receive and store your name, email address and profile picture. We use these to create and identify your account.
• Details you add in Settings, such as your organisation name, revenue goals and preferences.

CRM records you create

• Contacts: names, email addresses, company, job title and any other details you enter.
• Leads, next actions, notes and their history, including values, stages and due dates.

Limited information from Gmail

To link emails to your leads, the extension reads the following from the email you are viewing or sending, only when you use a CertaLink feature on it:

• the sender's name and email address, so we can match or create a contact;
• the email's subject line and Gmail message/thread ID, so we can record it in a lead's history and link back to it.

We do not read, copy or store the body or attachments of your emails.

Billing

Payments are processed by Stripe. Your card details go directly to Stripe and are never stored by us. We keep a record of your subscription plan and status.

Stored on your device

The extension keeps your sign-in session in Chrome's local extension storage so you stay signed in. It is removed when you sign out.

How we use your information

• To provide the CertaLink service: storing and showing your CRM records and linking them to your emails.
• To manage your account and subscription.
• To contact you about your account, billing or support requests. We are notified when a new account is created.

We do not sell your information, use it for advertising, or use it to train AI models.

Google user data

CertaLink's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google user data to provide and improve the features you use in CertaLink, and we do not transfer it to others except as needed to provide the service, to comply with law, or as part of a merger or acquisition with notice to you. No person reads your data unless you ask us to (for example, for support), it is needed for security, or the law requires it.

Who we share it with

We use these service providers to run CertaLink. They only process your information on our behalf:

• Supabase: database, authentication and hosting for your account and CRM records.
• Stripe: subscription payments and billing.
• Google: sign-in.
• Zoho ZeptoMail: sending service emails.
• InboxSDK (Streak): the library that lets CertaLink add its interface to Gmail.

Some of these providers store data outside Australia, including in the United States. We may also disclose information if required by law.

Security

Data is sent over encrypted connections (HTTPS) and stored in a secured database. Your records are linked to your account and are not visible to other CertaLink users.

Keeping and deleting your data

We keep your information while your account is active. You can edit or delete contacts, leads, actions and notes at any time in the app. To delete your account and all of its data, email [email protected] and we will do so within 30 days, except where we must keep billing records by law.

Your rights

You can ask to access or correct the personal information we hold about you, or complain about how we have handled it, by emailing [email protected]. We handle personal information in line with the Australian Privacy Principles. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner.

Changes to this policy

If we make significant changes, we will update the date above and let you know in the app or by email.

Contact

Questions about privacy: [email protected]