Legal

Privacy Policy

How Stolvo handles the data you trust it with, including the email and calendar data you connect from Google.

Effective [EFFECTIVE DATE] · Last updated [EFFECTIVE DATE]

The short version

  • We use your email and calendar to keep your CRM current, and for nothing else.
  • We never sell your data or use it for ads.
  • Neither we nor our AI providers train models on your data.
  • No one at Stolvo reads your email unless you ask, or security or the law requires it.
  • You can disconnect, export or delete at any time.
  • Google data follows Google’s Limited Use rules, in section 3.

1. Who we are

Stolvo is a CRM operated by AMDG Development, LLC, a California limited liability company doing business as Stolvo, based in San Diego, California (“Stolvo”, “we”). This policy explains what we collect when you use stolvo.com and the Stolvo app, what we do with it, and the choices you have.

When your company uses Stolvo, your company decides what goes into its workspace. For that workspace data we act as your company’s processor, under our Data Processing Agreement. For your own account details, and for this website, we are the controller.

2. What we collect

  • Account details. Your name, email address and profile picture when you sign in with Google or by email link, and the workspaces and roles you belong to.
  • Data from accounts you connect. Email and calendar data from the Google or Microsoft accounts you choose to connect, as described in section 3.
  • Data you add or import. People, companies, deals, notes and fields you create, or bring over from another CRM or a spreadsheet.
  • What Stolvo creates. Records, summaries, drafts and rules that Stolvo’s agents produce, each linked to the source it came from, and a log of every change.
  • Billing details. Your plan and billing contact. Card details go straight to Stripe; we never see or store full card numbers.
  • Usage and device data. Pages you open, features you use, errors, browser type and IP address, used to run and improve the service and keep it secure.

3. Google user data

If you connect a Google account, Stolvo asks for these permissions, and only after you approve them on Google’s consent screen:

PermissionWhat Stolvo does with it
Sign inYour name, email address and profile picture, to create your account and show who you are to your team.
Read GmailReads the messages in the mailbox you connect to keep your CRM current: who you talk to, at which companies, about which deals, and what was promised. Stolvo stores the messages it links to records so you can see where every value came from.
Send GmailSends an email from your mailbox only after you approve that email, or a kind of email you have chosen to allow.
Read Calendar eventsReads the events on your calendar and their attendees to log meetings, prepare briefs before them, and connect them to records.
Read Meet transcriptsReads the transcript of a Google Meet call you were in, when the meeting recorded one, so the meeting’s notes and commitments come from what was actually said.

Limited Use. Stolvo’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

That means we use Google user data only to provide and improve the features you see in Stolvo. We do not sell it. We do not use it or transfer it for advertising, including retargeting or interest-based ads. We do not use it to train generalized or non-personalized AI or machine-learning models. No person at Stolvo reads it unless you ask us to (for example, in a support request), it is needed for security, such as investigating abuse, it is required by law, or it has been aggregated and anonymized for internal operations.

We transfer Google user data to others only to provide Stolvo’s features (the service providers in section 5, under contracts that bind them to the same limits), for security, to comply with the law, or as part of a merger or acquisition with notice to you. You can disconnect Google at any time in Settings or at your Google Account’s permissions page; Stolvo then stops reading your mail and calendar.

4. How Stolvo uses AI

Stolvo’s agents use AI models to read your email and meetings, extract facts, write summaries and drafts, and answer your questions. We use these providers as service providers, never as owners of your data:

  • Anthropic (Claude models) to read, summarize, draft and answer.
  • Voyage AI to make searchable representations (embeddings) of your content, so search and Ask can find it.

Both process your content only to return results to Stolvo. Neither may use it to train their models, and each has agreed to zero data retention for Stolvo: they keep nothing once they have returned a result. Stolvo does not train AI models on your data either. What Stolvo learns about how you work, such as your writing style or the edits you usually make, stays in your workspace, is shown to you in Settings, and can be edited or deleted.

5. Who we share data with

We share data only with the service providers that run Stolvo for us, each under a contract that limits them to that job:

ProviderWhat they do for Stolvo
AnthropicAI models
Voyage AISearch embeddings
SupabaseDatabase hosting (United States)
VercelApplication hosting
Trigger.devBackground jobs
NangoConnections to other CRMs you import from
ResendAccount emails, such as sign-in links
PostHogProduct analytics and error tracking
StripePayments

We keep this list current and tell workspace owners before adding a provider. We may also disclose data when the law requires it, to protect people’s safety or our rights, or to a successor in a merger or acquisition, who would remain bound by this policy. We never sell personal data.

6. How long we keep data

We keep workspace data for as long as the workspace exists. If you disconnect a mailbox, Stolvo stops reading it; messages already linked to records stay until you delete them or the workspace. When a workspace is deleted, we delete its data within 30 days, and from backups within 35 days. Billing records are kept as long as tax law requires.

7. Security

Data is encrypted in transit and at rest. Tokens for the accounts you connect are encrypted separately and are never shown in the app. Each workspace’s data is kept apart from every other workspace’s at the database level. Access by our staff is limited to what running the service needs and is logged. If a breach affects your data, we will tell you without undue delay.

8. Your choices and rights

You can see, correct and export your workspace’s data at any time, and delete individual records or the whole workspace. Depending on where you live, you may also have the right to access, correct, delete or port your personal data, to object to or restrict how we process it, and to complain to a data protection authority. If your company runs the workspace that holds your data, we will pass your request to them. To make a request, email privacy@stolvo.com. We do not sell or share personal data for cross-context behavioral advertising.

9. Where data is stored

Stolvo stores data in the United States. If you are outside the United States, we transfer your data there under the safeguards the law requires, such as the EU Standard Contractual Clauses.

10. Children

Stolvo is a tool for businesses and is not meant for anyone under 18. We do not knowingly collect children’s data.

11. Changes to this policy

If we change this policy in a way that matters, we will tell workspace owners by email at least 30 days before it takes effect, and the date at the top of this page will change.

12. Contact

Questions about privacy: privacy@stolvo.com. Stolvo is operated by AMDG Development, LLC, San Diego, California.