Consent-gated access
An admin must explicitly grant consent before Poodle AI reads and analyzes call/activity data from a connected CRM. Consent can be revoked at any time, independent of disconnecting the integration itself.Credential security
OAuth access and refresh tokens for your CRM are encrypted before storage and only decrypted in memory when needed to call the provider’s API. Tokens are refreshed automatically ahead of expiry.Access logging
Every interaction with a connected CRM — connecting, disconnecting, granting or revoking consent, fetching data, and deleting data — is written to an organization-scoped access log with a success/failure status, available to admins for review.Rate limiting
Calls to each CRM provider’s API are rate-limited per organization, to avoid excessive load on your connected systems and stay within provider limits.Disconnecting and deleting CRM data
1
Disconnect the integration
Disconnecting immediately and permanently deletes the stored CRM credentials (access and refresh tokens) — they are not just deactivated.
2
Revoke related consent
Disconnecting also revokes any consent previously granted for that provider.
3
Delete synced activity data
Admins can separately delete individual synced CRM records, or bulk-delete all synced data for a connection or provider, independent of disconnecting.
Deleting a CRM activity record clears the recording reference and analysis summary tied to it — not the record in your actual CRM or call-recording system, which is managed by that provider.
See sub-processors
Which third parties process data on Poodle AI’s behalf.