Privacy Policy

Account information. When you create an account we collect your name, email address, phone number, company name, and password (managed by our authentication provider — we never see or store your password in plain text).

Billing information. Payments are processed by Stripe. Your card details go directly to Stripe; we store only a payment reference, plan, and invoice history — never card numbers.

Your workspace data. As a CRM, Ferrum stores the business records you and your team put into it: contacts and leads, conversations (SMS, email, chat), call recordings and transcripts, appointments, pipelines, invoices, forms, and files. For this data, you (the subscriber) are the data controller and Ferrum acts as a processor on your behalf. It is scoped to your organization and isolated at the database level — one workspace can never read another's data.

Communications routed through the platform. When you send or receive texts, calls, or emails through Ferrum, we process the message content, phone numbers, and delivery metadata needed to deliver and thread those conversations.

Connected integrations. If you choose to connect third-party tools (for example Google Calendar or Gmail, QuickBooks, Jobber, Square, or an ad account), we access only the data needed to run that integration, using the permissions you grant. You can disconnect an integration at any time.

Usage data. We collect product analytics (pages viewed, features used, device and browser information, and session recordings of our own interface with your business data masked) to understand and improve the product, plus cookies needed to keep you signed in.

We use your information to operate the platform: deliver messages and calls, sync calendars, process payments, run your automations, provide support, secure the service, and improve the product. We do not sell your personal information, and we do not use your workspace data for advertising.

Ferrum includes AI agents that can draft replies to your leads, transcribe and grade sales calls, research contacts, and run workflow steps. To provide these features, relevant content (such as a conversation thread or a call transcript) is processed by our AI model providers — currently Microsoft Azure OpenAI and Anthropic — under agreements that prohibit them from using your content to train their models. AI-drafted messages are held for human review by default; your team controls if and when AI sends anything on its own.

Call recording and transcription are features you control. If you enable them, you are responsible for recording notices and consent required in your jurisdiction.

We share data only with the service providers (subprocessors) needed to run Ferrum, each bound to use it solely to provide their service to us:

• Stripe — payment processing
• Telnyx — SMS and voice delivery
• Supabase — authentication and database infrastructure
• Resend — transactional email delivery
• Microsoft Azure OpenAI and Anthropic — AI features (Section 3)
• PostHog — product analytics
• Hetzner — cloud hosting
• Google — only for integrations you connect (Calendar, Gmail)

Mobile phone numbers and SMS opt-in consent collected through the platform are never shared with third parties for their own marketing purposes.

We may also disclose information when required by law, to protect our rights or users' safety, or as part of a business transfer (in which case this policy continues to apply).

Ferrum's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google Calendar and Gmail data is used only to provide the calendar sync and email features you enable, is never used for advertising, and is never sold.

We keep your data for as long as your account is active. When you cancel, or on request, we delete your workspace data within a commercially reasonable period, except where we must retain records to meet legal, tax, or billing obligations. You can request deletion at any time by emailing [email protected].

Depending on where you live (including under the GDPR and the California Consumer Privacy Act), you may have the right to access, correct, delete, or receive a copy of your personal information, to restrict or object to certain processing, and to opt out of the sale of personal information (we do not sell it). We will never discriminate against you for exercising these rights.

To exercise any of these rights, email [email protected] with the subject "Privacy Request." If your data lives inside another business's Ferrum workspace (for example, you are a customer of one of our subscribers), we will refer your request to that business, who controls that data.

The Ferrum mobile app accesses the same account and workspace data as the web platform. It may send you push notifications (for example, when a lead replies), which you can turn off in your device settings. The app contains no third-party advertising and does not track you across other companies' apps or websites.

Data is encrypted in transit, access is scoped per organization and enforced at the database layer, and staff access to customer data is limited to what support requires. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you as required by law.

Ferrum is a business tool and is not directed at children under 16. We do not knowingly collect personal information from children.

If we make material changes, we will update this page and the date above, and for significant changes we will notify you in the product or by email. Continued use after changes take effect constitutes acceptance.

Iron Automations · Ferrum
Email: [email protected]
Web: getferrum.com