Privacy Policy

Last updated: May 24, 2026

Pegacorn Group LLC, doing business as PegacornCRM ("we," "us," or "our"), operates the PegacornCRM platform at pegacorncrm.com. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have regarding your data.

By using PegacornCRM, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use our services.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and company name. Authentication is handled through Auth0, and we do not store your password directly.

Customer Data You Upload

You may upload or enter contact records, company records, deal information, email content, support tickets, documents, and other business data into your PegacornCRM workspace. You retain full ownership of this data. We process it solely to provide you the service.

Payment Information

Payment processing is handled by Stripe. We do not store your credit card number, bank account details, or other payment credentials on our servers. We receive and store your Stripe customer ID, subscription status, and billing plan.

Email Content

If you connect your Gmail account, we sync email messages to associate them with contact records. We also send marketing emails and campaign messages through our platform via Resend. Email content is stored in your workspace and accessible only to your team.

AI Enrichment Data

PegacornCRM uses the Anthropic Claude API to enrich contact records, including inferring names from email addresses, extracting information from email signatures, and looking up publicly available company information. Data sent to Anthropic for enrichment is processed in accordance with Anthropic's privacy policy and is not used to train their models.

Usage Data

We collect standard usage analytics including pages visited, features used, browser type, and device information. We use Google Analytics 4 for this purpose. We respect the Do Not Track (DNT) browser setting; if your browser sends a DNT signal, we do not load analytics scripts.

Cookies

We use cookies for session management and authentication. We do not use advertising cookies or sell cookie data. Google Analytics may set its own cookies for analytics purposes.

2. How We Use Your Information

We use your information to:

We do not sell your personal information. We do not use your uploaded business data for advertising or marketing purposes unrelated to your use of PegacornCRM.

3. Who We Share Your Information With

We share your information only with the following third-party service providers, solely to operate PegacornCRM:

We may also disclose information if required by law, court order, or governmental request, or to protect our rights, safety, or property.

4. Data Retention

We retain your account information for as long as your account is active. If you delete your workspace, all associated data (contacts, deals, tickets, emails, documents) is permanently deleted from our database. We do not retain backups of deleted workspace data beyond our standard infrastructure backup window of 7 days.

Payment records are retained as required by applicable tax and financial regulations.

5. Your Rights

All Users

GDPR (European Economic Area)

If you are located in the EEA, you have the right to access, rectify, erase, restrict processing of, and port your personal data. You also have the right to object to processing and to withdraw consent. To exercise these rights, contact us at [email protected]. We will respond within 30 days.

CCPA (California)

If you are a California resident, you have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at [email protected].

6. Data Security

We implement reasonable security measures to protect your data, including HTTPS encryption in transit, parameterized database queries to prevent injection attacks, role-based access controls, and error monitoring with personal data scrubbing. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

PegacornCRM is a business tool not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on our website. The "Last updated" date at the top of this page indicates when the policy was last revised.

9. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:

Pegacorn Group LLC
3916 N. Potsdam Ave. #635
Sioux Falls, SD 57104-7048
[email protected]