Privacy Policy
Reewamp CRM and its apps (CRM, PSA, Sales, Commission, CPQ). Last updated: 12 October 2026.
Who we are
Reewamp CRM is operated by Reewamp GmbH, Brehmestrasse 61, 13187 Berlin, Germany (Amtsgericht Charlottenburg, HRB 287052 B). Contact for privacy questions: info@reewamp.com.
Each customer organisation gets its own workspace with its own database. For the business data a customer stores in its workspace (contacts, companies, deals, projects, quotes and so on), the customer is the controller and Reewamp processes that data on the customer's behalf under a data processing agreement. For the account data described below, Reewamp is the controller.
Signing in with Google
You sign in with your Google account. We request only your basic profile: your email address, whether it is verified, your name and, for Google Workspace accounts, your organisation's domain. We use this only to identify you, to decide which workspace you belong to and to show your name in the app. We do not receive your Google password.
Gmail (only if you connect a mailbox in Sales)
Users of the Sales app can choose to connect a Gmail mailbox to send outreach emails and see replies in the Sales inbox. If you do, we request permission to send email on your behalf (gmail.send) and to read your mailbox (gmail.readonly), which we use only to detect replies, bounces and out-of-office messages to emails sent from Sales and to show those conversations in the Sales inbox. Your refresh token is stored encrypted. You can disconnect at any time in Sales, or revoke access in your Google account settings.
Reewamp CRM's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, we do not use it to train AI models, and no person at Reewamp reads it except with your permission, for security purposes, or where the law requires it.
Data we store
- Account data: your email address, name, role and workspace membership, sign-in sessions and an audit log of changes you make.
- Workspace data: the business records your organisation enters or imports, files you upload, and emails sent or received through Sales.
- Technical data: request logs kept by our hosting provider for security and troubleshooting.
Where data is stored and who processes it
- Cloudflare (hosting and databases), with workspace data stored in the EU jurisdiction.
- Google (sign-in, and Gmail if you connect a mailbox).
- Resend (sending email from Sales and system notifications).
- Anthropic (the built-in AI assistant, only when you use it; the relevant records are sent to answer your request and are not used to train models).
- Slack (only if your workspace connects the Slack integration).
We do not sell personal data and do not use it for advertising.
Retention and deletion
Sessions expire after 14 days. Workspace data is kept for as long as the customer's subscription runs and is deleted after the customer ends it, unless the law requires us to keep it longer. A workspace admin can deactivate users and delete records at any time. To have your account or Google data deleted, email info@reewamp.com.
Your rights
Under the GDPR you can ask for access to, correction or deletion of your personal data, restriction of or objection to its processing, and a copy of it in a portable format. You can also complain to a data protection authority, for example the Berlin Commissioner for Data Protection and Freedom of Information. For data in a customer's workspace, please contact that organisation first; we will help them answer your request.
Security
All traffic is encrypted (HTTPS). Each customer's data lives in its own database, access is limited to signed-in members of that workspace, and secrets such as mailbox tokens are stored encrypted.
Changes
We will update this page when our practices change and show the date of the last update at the top.