Apollo CRM, operated by A&B Consulting Group, Burr Ridge, IL

Privacy policy

Last updated October 29, 2026

Apollo CRM is software that roofing, siding and window contractors use to run their business: leads, estimates, scheduling, photos, invoices and ordering materials from their supplier. This policy explains what information we handle, why, and the choices you have.

What we collect

• Account information: your name, email address, phone number, company name and role, and how you sign in.
• Contractor business data: jobs, estimates, contracts, invoices, payments, costs, schedules, notes and material orders that you and your team enter.
• Homeowner contact information entered by contractors: names, addresses, phone numbers and email addresses of the contractor's customers, plus anything the contractor records about their project. The contractor decides what to enter and is responsible for having a reason to keep it.
• Photos and documents: job photos, signatures, receipts, PDFs and other files uploaded to a job.
• Usage information: basic logs such as when you sign in and which pages load, used to keep the service running and secure.

How we use it

To provide the service to the contractor who owns the account: storing their records, sending the emails and texts they ask us to send, producing their documents and reports, and supporting them. We do not sell personal information, and we do not use it for advertising.

Google user data

• Sign in with Google: we receive your name, email address and profile picture to create and sign in to your account.
• Gmail and Google Calendar, only if you connect them: in Settings › Connections you can let Apollo CRM send email from your Gmail address and create events on your Google Calendar. We use this access only to send the emails you write or approve in Apollo CRM and to add or update the appointments you schedule in Apollo CRM. We do not read your inbox or your existing calendar.
• Google user data is never sold, never used for advertising, and never used to train AI models. People can see it only when needed to provide the feature, for security, or to comply with law.
• Apollo CRM's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• You can disconnect Google at any time in Settings › Connections or from your Google Account's security settings. We then delete the stored access token.

Who processes data for us

We use these service providers, each bound to use the data only to provide their service to us:

• Supabase: database, file storage and sign-in.
• Vercel: hosting.
• Resend: sending email when you haven't connected Gmail.
• Twilio: sending and receiving text messages.
• Google: sign-in, and Gmail and Calendar if you connect them.

Your supplier (for example, Apollo Supply Co.) sees your account and the material orders you send them, never your customers' details, prices or margins beyond the order itself.

Retention and deletion

We keep account and business data while the contractor's account is active. A contractor can ask us to export or delete their data; we delete it within 30 days, except where we must keep records by law (for example, signed contracts or payment records). Homeowners who want their information corrected or deleted can ask the contractor they worked with, or contact us and we will pass the request on.

Security

Data is encrypted in transit and at rest. Each company's records are kept separate by database access rules, people only see what their role needs, and stored files are private. No system is perfectly secure; we will tell affected customers promptly if we learn of a breach.

Contact

Questions or requests: adrian@abconsultingg.com.

Draft: pending attorney review.