Privacy policy.

1. Who we are

Centaur CRM ("we", "us") is a UK-based business, currently running a private beta. This website only collects what you send us through its enquiry form. When you get in touch, or join the beta, we give you full details of who we are and how we look after your data, in our reply and in the beta agreement. For any question about this policy or your data, email info@centaurcrm.com.

2. Two kinds of data

Our own data. Information about people who visit this website, ask for beta access, or hold a Centaur account. We decide how this is used, and this policy covers it in full.

Our customers' data. The contacts, accounts, deals, emails and notes a company keeps in Centaur. That company decides what goes in and how it's used, and we only process it to run the service for them. If you're a contact in one of our customers' CRMs, that company's own privacy policy applies, and they're the right people to ask first. We'll help them answer you.

3. What we collect

When you visit the website

Nothing that identifies you, unless you send us an enquiry. We don't run analytics, advertising or tracking tools. Our hosting provider keeps standard server logs, including IP addresses, for security and to keep the site running.

When you send us an enquiry

Your name, email address, company, phone number (if you give it) and your message. They're stored in our own CRM, Centaur, so we can reply to you, and we use them only for that and, if you join, to set up the beta. Your IP address is used briefly to protect the form from spam. Ask us at any time and we'll delete your enquiry.

When you email us

Your name, email address and anything you choose to tell us, such as your company and the size of your sales team. We use it to reply, and to set up the beta if you join.

When you use Centaur during the beta

• Account details: your name, work email, role and a scrambled (hashed) copy of your password.
• What your company puts in: CRM records, activities, notes, files and settings.
• What you connect: if your company connects Microsoft 365, Centaur reads the emails, calendar entries and Teams call transcripts it needs to keep the CRM up to date, using only the permissions your company grants. The same goes for Slack and data providers such as Apollo.
• Email engagement: when your company sends campaigns from Centaur, we record opens, clicks and landing-page form submissions for those campaigns.
• Usage and security logs: sign-ins, errors and actions taken, so we can keep the service secure and fix problems.

4. Why we use it

We don't sell personal information, we don't share it for advertising, and we never use our customers' data to train AI models.

5. Who helps us

We use a small number of trusted providers to run Centaur. Each one only gets what it needs to do its job.

• Cloud hosting for the website and the app.
• Database and data storage, encrypted, for the information held in Centaur.
• Email for our own messages, and your company's Microsoft 365 if it connects it.
• A web font service that serves the fonts on this website, and so sees your IP address when the page loads.

Every provider is bound by a data processing agreement and holds recognised security certifications. We're happy to share the full list with every company that joins the beta. Just ask at info@centaurcrm.com.

AI features run on your company's own Anthropic (Claude) account. When the agents or the assistant work, the relevant CRM data is sent to Anthropic under your company's agreement with Anthropic, which doesn't allow it to be used for training. Data providers such as Apollo also run on your company's own account.

We may share information if the law requires it, or if the business changes hands. If that happens, this policy will still protect your data.

6. Where it's stored

Centaur's data is stored in the United States. Where information about people in the UK or EU is transferred there, it's protected by the UK–US data bridge or the EU–US Data Privacy Framework where a provider is certified, or by standard contractual clauses otherwise.

7. How long we keep it

• Emails and beta requests: until you ask us to delete them, or 2 years after we last heard from you.
• Customer accounts and CRM data: for as long as your company uses Centaur. When your company leaves the beta, or a subscription ends, it has 30 days to export its data, and then we delete it. Copies in our providers' encrypted backups are overwritten on a rolling basis after that.

8. Cookies

We don't use cookies, on this website or in the app. The app remembers that you're signed in until you sign out, and uses that for nothing else.

9. Your rights

Wherever you live, you can ask us to:

• tell you what personal information we hold about you, and send you a copy
• correct anything that's wrong
• delete it
• stop or limit how we use it, including any marketing emails
• give it to you in a format you can take elsewhere

Email info@centaurcrm.com. We'll reply within 30 days and won't charge you. We may need to confirm who you are first. If the data is held for one of our customers, we'll pass your request to them and help them deal with it.

If you're in the UK and unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. If you're elsewhere, you can contact your local data protection authority. We'd always appreciate the chance to put things right first.

10. Security

We encrypt data in transit and at rest, hash passwords, and keep each company's data in its own workspace. See our security page for the details.

11. Children

Centaur is a business tool, and it isn't meant for anyone under 18. We don't knowingly collect information about children.

12. Changes and contact

If we change this policy, we'll update the date at the top. If the change is significant, we'll email account holders before it takes effect.

Questions? Email info@centaurcrm.com.