Privacy Policy

PushButtonCRM is published by Push Button Inc. (“PushButton”, “we”, “us”). We are the controller of the personal information described in this policy. You can reach us at gus@pushbuttonplatforms.com.

We sell PushButtonCRM as a one-time source-code license. We are not a hosting provider for your CRM data unless we have separately agreed in writing to run an instance for you.

We only collect what a tool on this site actually needs. Nothing here is bought from data brokers, and we do not build advertising profiles.

We do not knowingly collect special categories of data (health, biometric, precise geolocation, government identifiers). Please do not upload them to the double-check tool.

• —To run the tool you asked for — score an audit, analyze an export, answer a question, generate a migration plan.
• —To deliver and support what you bought, including issuing license keys and source-code access.
• —To reply to you about your audit, your migration, or your purchase.
• —To keep the site working and secure — rate limiting, abuse prevention, error diagnosis.
• —To meet legal, tax, and accounting obligations.
• —With your consent, to send occasional product emails. Every one of those has an unsubscribe link, and opting out never affects a purchase or a report you asked for.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

The audit results, the capability chat, and the double-check analysis are generated by large language models operated by Anthropic. The relevant content — your answers, your messages, and text or images extracted from what you upload — is sent to Anthropic’s API so a response can be produced.

That content is processed under Anthropic’s commercial terms, which provide that API inputs and outputs are not used to train their models. Output is generated text: it can be wrong, and it is not legal, financial, or engineering advice. Check anything you plan to act on.

The double-check tool exists so you can show us a real export instead of describing it. That means an upload may contain your customers’ personal information. Three things follow from that:

• —You are responsible for having the right to share what you upload, and for redacting anything you do not need us to see. A structure-only export — headers and a handful of sample rows — is usually enough for a compatibility report.
• —We use uploads only to produce your report. We do not mine them, resell them, or load them into any other product.
• —You can ask us to delete an upload and its analysis at any time, and we will do it within 30 days.

We share information with a small set of vendors that run parts of this site, and only so they can perform that function for us:

We also disclose information where the law requires it, to enforce our terms, to protect our rights or someone’s safety, and to an acquirer in a merger, acquisition, or asset sale — in which case this policy continues to apply until the acquirer gives notice of its own.

• —Audit and double-check records: up to 24 months from your last interaction, then deleted or anonymized.
• —Uploaded files: up to 12 months, or immediately on request.
• —Chat transcripts: up to 12 months.
• —Purchase and license records: as long as needed for tax, accounting, and license enforcement — generally seven years.
• —Server logs: typically 30 to 90 days.

Earlier deletion on request always overrides these defaults.

Wherever you are, you can ask us to give you a copy of what we hold about you, correct it, delete it, or stop using it for marketing. Email gus@pushbuttonplatforms.com and we will respond within 30 days.

If you are in the EEA or UK, your legal bases are: performance of a contract (delivering what you bought), legitimate interests (running and securing the site, responding to enquiries), consent (marketing email), and legal obligation (tax records). You may object to processing based on legitimate interests, withdraw consent at any time, request portability, and lodge a complaint with your supervisory authority.

If you are a California resident, you may request disclosure of the categories and specific pieces of personal information we collected, request deletion or correction, and exercise these rights without being treated differently. We do not sell or share personal information as those terms are defined by the CCPA/CPRA, so there is nothing to opt out of.

This site does not run advertising or cross-site tracking cookies. We use a session identifier held in your browser’s session storage so a multi-step tool can resume where you left off, and a strictly necessary, HTTP-only cookie for administrator sign-in. Our hosting provider may set cookies required for security and load balancing.

Data is encrypted in transit with TLS and at rest by our database and storage providers. Administrative access is restricted and credentialed. No system is perfectly secure, so we cannot guarantee absolute security — if a breach affects your personal information, we will notify you and any required regulator as the law provides.

We operate in the United States, and our vendors process data there. If you use this site from outside the US, your information is transferred to and processed in the US under appropriate safeguards, including the Standard Contractual Clauses where they apply.

This is a business product. It is not directed to anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us information, email us and we will delete it.

We may update this policy. The “last updated” date at the top always reflects the current version, and material changes will be announced on this page before they take effect. Continuing to use the site after that means you accept the revised policy.