Privacy Policy
Last updated: October 18, 2026 • Effective Date: October 18, 2026
1. Overview
Rhinover ("we," "our," or "us") provides intelligent customer relationship management (CRM), speed-to-lead workflow orchestration, and autonomous sales communication software (accessible via rhinover.com). This Privacy Policy explains how we collect, use, disclose, and safeguard user information when you access our web application and connected third-party integrations.
2. Information We Collect
We collect information you provide directly to us as well as data generated through your use of the service:
- Account Credentials: Name, work email address, organization name, phone number, and password hashes.
- CRM Records: Leads, contacts, companies, deals, pipelines, notes, tasks, and interaction timelines entered by your team.
- Website Journey Analytics: Page visit histories, dwell times, and submission referral pathways captured via first-party tracking scripts to assist your sales representatives with context.
- Third-Party Integrations: API keys (BYOK) provided by your organization for OpenAI, Google Gemini, Anthropic Claude, or OpenRouter, encrypted securely in your tenant vault.
3. Google API Services User Data Policy & Limited Use Disclosure
When you connect your Gmail or Google Workspace account to Rhinover via Google OAuth, our application accesses specific Google user data strictly to power bidirectional sales email synchronization.
Google Limited Use Notice: Rhinover's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- No Advertising: We never use Google Workspace or Gmail user data for serving personalized, re-targeted, or interest-based advertisements.
- No Unauthorized Humans: No human employees or contractors read your private emails unless you provide explicit consent to resolve technical issues or where required by law.
- No Generalized AI Model Training: Google user data is not used to train, develop, or improve generalized or multi-tenant machine learning or AI models.
- Purpose Limitation: We only access email content and metadata to display interaction history on relevant lead/deal records and to dispatch authorized sales emails you draft and approve.
4. How We Use Collected Data
Your data is processed strictly for legitimate operational purposes:
- Operating and maintaining your tenant-isolated CRM workspace.
- Dispatching speed-to-lead follow-ups, SLA notifications, and WhatsApp/Email communications.
- Generating AI-assisted prospect briefing summaries using your own connected API credentials.
- Facilitating subscription billing and sovereign payment receipts.
5. Data Security & Encryption
We implement industry-standard technical and organizational security controls to safeguard data. All communications with our servers are encrypted in transit via Transport Layer Security (TLS 1.3 / HTTPS). Database storage utilizes AES-256 encryption at rest, secure AWS IAM authorization, and strict tenant logical isolation preventing cross-organization access.
6. Retention and Data Deletion
We retain CRM records for as long as your tenant subscription remains active. You may export or request complete deletion of your workspace data, including all synced email accounts, leads, and tokens, at any time by contacting our support team or through your Organization Settings. Upon termination, records are purged in accordance with our data retention schedule.
7. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us at: