Privacy Policy

Last updated October 14, 2026

Bolt CRM ("Bolt", "we") is operated by Empowered Insurance & Consulting. This policy explains what information Bolt collects, how we use it, and the choices you have. It covers bolt-crm.io and the Bolt app.

Information we collect

Account information: your name, email, phone number, company and login details.
Data you add to Bolt: leads and contacts, notes, appointments, form submissions, messages and call records that you and your team create or import.
Calls and texts: call logs, recordings and transcripts when recording is turned on, and the texts you send and receive through Bolt.
Billing: handled by Stripe. We don't store full card numbers.
Usage and device data: pages used, browser and IP address, used to keep Bolt secure and working.

Google user data

If you choose to connect a Google account, Bolt asks for these permissions and uses them only as described:

View and edit events on your calendars (calendar.events): to add appointments you book in Bolt to your Google Calendar, keep them updated when they're moved or canceled, bring back changes you make in Google, and, if you turn it on, show your Google events inside Bolt's calendar.
See your free and busy times (calendar.freebusy): so your booking pages only offer times you're actually free, and teammates you allow can see that you're busy (never what the event is).
See the list of your calendars (calendar.calendarlist.readonly): so you can choose which calendars Bolt writes to and checks.

Limited Use. Bolt's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't sell Google user data, use it for advertising, or use it to train AI models. People at Bolt don't read it except with your permission, for security, or when the law requires.

Storage: Google's access token is stored encrypted (AES-256-GCM). Bolt stores the IDs of the events it creates so it can keep them in sync. Your other Google events are read when you view the calendar and are not copied into Bolt's database.

Disconnecting: Calendar › Connections › Disconnect revokes Bolt's access at Google and deletes the stored token. You can also remove access at myaccount.google.com/permissions.

How we use information

To provide and improve Bolt, send the reminders and messages you set up, keep accounts secure, provide support and meet legal duties. We do not sell personal information.

Sharing

Only with service providers that run Bolt for us (hosting, database, calling and texting carriers, email delivery, payments), under contracts that limit their use; when required by law; or in a business transfer, with notice.

Retention and deletion

We keep data while your account is active. Account owners can delete leads and records, and can ask us to delete the account and its data by emailing us.

Security

Data is encrypted in transit, access is limited by role, and sensitive credentials are encrypted at rest.

Contact

Questions or requests: support@bolt-crm.io.