Your data, your server. EmilCRM is single-tenant and self-hosted, so the people who can see your CRM are the people you give keys to — and that doesn't include us.
Your contacts and pipeline live in your own Neon Postgres database, on your own Vercel project. There is no shared multi-tenant database — your data never sits next to anyone else's.
Because you host it, EmilCRM (the seller) cannot read, export, or recover your CRM data. You hold the credentials.
An optional single-password gate protects the app; the login session is a cookie signed with a secret only your instance knows (AUTH_SECRET). It's enforced whenever you set those values.
The prospecting endpoints (the Claude/Cowork connector) require their own bearer token (INGEST_TOKEN), distinct from your login password — so machine access and human access are isolated.
Everything is served over HTTPS by Vercel.
To check your license, only the license key is sent to Lemon Squeezy — never your CRM data. If the license server is ever unreachable, the gate fails open so a paying customer is never locked out by an outage.
Export a full JSON backup of everything anytime from Settings → Data & backup. Leave, move, or delete whenever you want — no lock-in.
Apollo, Claude/Anthropic, and any Gmail/Calendar connectors use your own accounts under their own terms. You decide what flows where.
Found something? Please email emillundholm25@gmail.com rather than filing a public issue, and we'll get back to you.