Privacy Policy

Effective October 28, 2026

Act! Sync+ (“Act! Sync+”, “we”, “us”) is a service provided by Corelogix. It connects your email account and calendar (Microsoft 365, Google, or another IMAP mailbox) to your Act! CRM database, so emails can be filed into Act! and calendars and contacts stay in sync. This policy explains what information we handle, why, and the choices you have. Questions: support@corelogix.ca.

The short version: we only use your data to run the features you turn on. We don't sell it, we don't use it for advertising, and we don't use it to train AI models. Email content is read at the moment it's filed and written into your Act! database. We keep identifiers that prevent duplicates, not copies of your emails.

1. Information we collect

Your Act! Sync+ account

Your name, email address, organization name and role. If you use a password, we store only a secure hash of it. If you sign in with Microsoft or Google, we receive your name and email address from them.
Your settings and notification preferences.

Connected mailboxes

The mailbox address, and the access tokens Microsoft or Google issue when you connect it (for an IMAP mailbox, the server details and password you enter). These let us act on the mailbox on your behalf.
Sync position markers (for example “last checked” times and change tokens), so nothing is missed or processed twice.

Your Act! connection

Your Act! database name, region or server address, and Act! username and password. If you use the Act! Sync+ desktop agent, your Act! login is stored on your own computer instead.

Email, calendar and contact data

Email. When an email is filed (automatically by your rules, or when you choose to file it), we read that message — sender, recipients, subject, body and attachments — and write it into your Act! database as a history record. We do not keep a copy of the message. We keep a message identifier and the Act! contact it was filed to, so the same email is never filed twice, plus an activity-log entry (date, subject line, contact name and result) that you can see on your dashboard.
Optional short-term cache. If you turn on the “encrypted body cache” reliability option (off by default), a copy of a message being filed may be kept, encrypted, for a limited time you choose (24 hours by default) and is then deleted.
Calendar. If you turn on calendar sync, we read and write events in your connected calendar and activities in Act!. We store each event's identifier, its matching Act! activity, its start time, and a fingerprint used to detect changes — not the event's details.
Contacts. If you turn on contact sync, we read and write contacts in your connected address book and in Act!. We store identifiers that link each contact to its Act! record, and a fingerprint used to detect changes.

Billing

Payments are processed by Stripe. We never see or store your card number; we keep your subscription status and plan.

Technical information

Service logs (for example errors and sync results) used to keep the service running and to fix problems. We set only the cookies needed to keep you signed in.

2. How we use information

To provide the features you turn on: filing emails into Act!, syncing calendars and contacts, and creating Act! records from your mailbox.
To show you what happened (your activity feed) and alert you when something needs attention, such as a mailbox that needs reconnecting.
To bill your subscription, provide support, and keep the service secure.

We do not sell your information, use it for advertising, or use it to train artificial-intelligence or machine-learning models.

Optional AI email summaries

If you turn on AI email summaries (off by default), the text of an email being filed is sent to OpenAI's API to produce a short summary and action items, which are added to the Act! history record. This happens only for emails that are actually filed, and only while the option is on. Under OpenAI's API terms, data sent through the API is not used to train OpenAI's models; OpenAI may keep it for a limited period for abuse monitoring.

3. Data from Google accounts

When you connect a Google account, Act! Sync+ requests only the access needed for the features you use:

Gmail (read-only) — to read the emails being filed into your Act! database. We never send, delete or change your email.
Google Calendar events — to sync events between your calendar and Act!, in the direction you choose.
Google Contacts — to sync contacts between your address book and Act!, in the direction you choose.

Act! Sync+'s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

Google user data is used only to provide and improve the features you see in Act! Sync+.
It is transferred only to provide those features: into the Act! database you connect, and to OpenAI only if you turn on AI email summaries; or as required by law, or as part of a merger or acquisition with notice to you.
It is never used for advertising, never sold, and never used to train AI or machine-learning models.
People at Corelogix do not read it unless you ask us to (for example in a support request), it's needed for security or abuse investigations, or the law requires it.

Microsoft 365 data is handled the same way.

4. Who we share information with

We use these service providers to run Act! Sync+; each handles data only on our behalf:

Microsoft Azure — hosting and database (Canada Central region).
Microsoft 365 — sending our notification emails to you.
Stripe — payment processing.
OpenAI — only if you turn on AI email summaries.

Data you sync goes to the Act! database you connect, which you or your organization control. We may also disclose information if required by law.

5. Storage and security

Act! Sync+ is hosted in Canada (Microsoft Azure, Canada Central).
All connections use HTTPS. Our database is encrypted at rest, and Act! and IMAP passwords are additionally encrypted with AES-256 before they are stored.
Access to production systems is limited to the people who operate the service.

6. How long we keep information

Account, settings and activity-log information is kept while your account is active.
Records of finished filing jobs are deleted after 30 days; the optional body cache is deleted after the time you set.
When you disconnect a mailbox, we delete the access tokens (or password) for it immediately, so we can no longer reach it. You can also revoke access from your Google account or Microsoft account at any time.
To delete your account and its data, email support@corelogix.ca. We delete it within 30 days, except billing records we must keep by law.
Emails, activities and contacts already written into your Act! database stay there — that database belongs to you or your organization.

7. Your choices and rights

You can turn each feature on or off at any time, disconnect a mailbox, or ask us to access, correct, export or delete your personal information by emailing support@corelogix.ca. If you are in Canada, you also have rights under applicable privacy law (including PIPEDA), and you may contact the Office of the Privacy Commissioner of Canada.

8. Children

Act! Sync+ is a business tool and is not directed at children under 16.

9. Changes to this policy

If we make material changes, we'll update the date above and let account holders know by email or in the app.

10. Contact

Corelogix — support@corelogix.ca