Privacy Policy
Last updated: October 28, 2026Who we are
This Privacy Policy explains how 321 Digital ("we", "us") handles personal data in the CRM at app.lisenr.com, its customer portal, help centers, booking pages, forms and landing pages (together, the "Service").
For the people who use the Service in a workspace (our customers and their teams), we decide how their account data is used, so we are the controller of it. For the contacts, companies and conversations a workspace keeps in the Service, the workspace's owner is the controller and we process that data on their behalf and on their instructions.
For privacy questions or requests, write to [email protected]. If your question is about data a business keeps about you in its own workspace, we will pass it to that business, which is responsible for answering it.
What we collect
Account data: your name, email address, password (stored only as a one-way hash), two-step verification settings, your role, your profile details and your preferences.
Workspace data: what you and your team put into the Service, such as contacts, companies, deals, notes, tasks, tickets, proposals, invoices, files, emails, messages and call records.
Usage and device data: sign-in times, the device and browser you use, IP addresses and an approximate location derived from them, and records of important actions (the audit log). We use these to keep accounts secure and to show your signed-in devices.
Payment data: when a workspace pays through the Service, our payment processor handles the card or bank details; we receive only references and limited details, such as a card's last digits.
How we use it
We use personal data to provide and support the Service, to keep it secure (detecting unusual sign-ins, preventing abuse and spam, keeping audit logs), to send the emails the Service needs (sign-in codes, password resets, invites and the notifications each person chooses), to bill for paid plans, and to fix problems and improve the Service.
We do not sell personal data, and we do not use workspace data for advertising.
Where the law requires a legal basis, we rely on performing our contract with you, our legitimate interests in running a secure and reliable service, our legal obligations, and your consent where we ask for it.
Email, calendar and call data
When someone connects their mailbox or calendar, the Service logs emails and meetings with the workspace's contacts on those contacts' records, following the workspace's settings. It can skip personal email domains, internal emails and addresses the workspace blocks, and the workspace decides who can read logged email content.
Calls made or received through the Service are logged on the contact's record. When a workspace turns on call recording and transcripts, recordings and transcripts are kept with the call. The workspace is responsible for telling the people it calls and for getting any consent the law requires.
The Service only reads the mailboxes and calendars people connect themselves, and each person can disconnect theirs at any time.
AI features
Some features use artificial intelligence: summaries of records and calls, drafts of emails and proposals, suggested answers to tickets, reading business cards and the AI agents that answer website chats and portal tickets. To do this, the relevant text is sent to our AI provider, which processes it to return a result and does not use it to train its models.
AI results are suggestions. People in the workspace review them, and the AI agents hand conversations to a person according to the workspace's rules.
Retention and deletion
We keep account data while the account is active and for a limited time afterwards for security and legal reasons. Workspace data is kept for as long as the workspace keeps it; a workspace can delete records and export its data at any time.
When a workspace is closed, we delete its data within 90 days, except where the law requires us to keep it longer. Backups are deleted on their own schedule, after which the data cannot be restored.
The Service must not be used for patient health information or other special categories of sensitive data.
Your rights
Depending on where you live, you may have the right to access your personal data, to correct it, to have it deleted, to receive a copy in a portable form, to object to or restrict some uses, and to withdraw consent you have given. You also have the right to complain to your data protection authority.
To use these rights for your account, write to [email protected]. If a business keeps your data in its workspace, contact that business; we will help it answer you.
Changes and contact
We will update this policy as the Service changes, and we will tell workspace owners about important changes before they take effect. The date at the top shows the latest version.
Questions about this policy or your personal data: [email protected].