Privacy and access

Updated 11 Sep 2026

Michael Jajou Bachuri operates this private Apptomistic CRM to review his Upwork activity. Access is limited to the authorized account owner.

Data and purpose

The CRM can receive proposal, job, contract, Connects, and activity metadata through Upwork's official connection. These records may include identifiers, titles, status, dates, amounts, and client details. It also stores sign-in information, connection credentials, owner-entered notes, and restricted operational logs.

Collection starts disabled. Enabling it requires a recorded purpose, current permission basis, and owner authorization. Separate capabilities control scheduled collection, historical imports, and actions that can return communication bodies. New collection discards raw Upwork responses and cover letters. Permission records and application settings do not themselves grant permission from Upwork.

Retention and deletion

Automated collection is paused while permission and retention are reviewed. Existing proposal history remains available. The existing nightly cleanup removes selected imported fields after 30 days from their last delivery; it does not delete linked proposal records or their notes. This behavior is not a guarantee of compliance with Upwork's retention terms.

Notes, manual stages, and view marks belong to the proposal record. A proposed 24-hour whole-record deletion policy is on hold and is not active. New operational logs use sanitized errors. Any revised automatic deletion policy requires a separate review before it is enabled.

Contact hello@apptomistic.com to request access, correction, deletion, or disconnection, or to raise a privacy concern. Disconnecting deletes the hosted connection token and imported records, including notes. Local credential copies and provider backups require separate operator handling. Signing out alone leaves the Upwork connection in place.

Service providers and access terms

Supabase provides authentication and database hosting. Vercel hosts the dashboard. Upwork provides connected account data. Apptomistic does not sell the data or make it available to other CRM users. This CRM does not use imported content to train or improve AI models.

Keep sign-in details private. Only connect an account you may control and enter information you have the right to use. Do not copy sensitive client communications into notes. Records may be incomplete or expired; verify consequential decisions on Upwork. The CRM does not submit proposals, send messages, accept agreements, or move money.

Upwork's API and MCP terms continue to apply. This notice does not certify compliance or replace required Upwork permissions. Provider retention, processing agreements, and applicable transfer arrangements remain subject to operator review before collection is enabled.