Privacy Policy

Baseline is run by Gold Standard Web LLC ("we"). It connects to your agency's CRM, reads the configuration of your client accounts, compares it with a standard you choose, and, when you approve it, changes that configuration across many accounts at once. This page says exactly what we read, what we keep, and when we delete it.

The short version

• We only touch configuration: custom field names and types, custom values, tag names, trigger link names and addresses, and user emails and roles.
• We never read or store contacts, conversations or messages — no customer names, phone numbers, emails or message text.
• We only write to your CRM when someone on your team approves a change set (or a schedule they approved runs it).
• We don't sell or share your data, and we don't use it to train AI.
• When you disconnect, your logs stay viewable for 30 days. Then everything is deleted.

What we read from your CRM

With the permissions you approve at install, for each client account we read:

• The account's name, timezone, phone and website (to fill placeholders like {{account.name}}).
• Custom fields (name, type, which record they belong to), custom values (name and value), tags (name) and trigger links (name and address).
• Users with access to the account: name, email, role and which accounts they can open.

What we change in your CRM

Only what an approved change set says, in the accounts it names: creating, renaming, archiving or deleting those same configuration items, and giving or removing a user's access or changing their role. Every change is shown in a dry run first and recorded in a log. Protected accounts are never changed.

What we keep

• Your agency's name, timezone and settings; your standard; drift findings; change sets and their results.
• For each team member who opens Baseline: their CRM user ID, name, role, and the email they give us.
• Copies of the configuration of each account (the latest read, for audits), and a before-copy of what a change set was about to change, kept for 30 days (90 on the Scale plan) so it can be rolled back, then deleted.
• Access tokens for your CRM, encrypted (AES-256-GCM). A who-did-what activity log.

Who processes data for us

• Netlify (hosting and file storage), Neon (database, United States), Resend (sending email), Sentry (error reports, with personal data removed).
• Your CRM provider, which bills you for Baseline.
• Slack, only if you connect a Slack webhook for notices.

How long we keep it

Before-copies: 30 days (90 on Scale). Everything else: while you're connected. If you disconnect, Baseline becomes read-only for 30 days and then everything — settings, logs, copies and team members — is deleted.

Your choices

You can download any change set's results as CSV, change who can approve changes, protect accounts, or disconnect from Settings. To ask what we hold or to have it deleted sooner, email hello@goldstandardweb.com. We answer within one business day.

Changes

If we change what we collect, we'll update this page and email agency owners before the change takes effect.