Staging · Demo data · No real customer information

ACA CRM — Privacy Policy

Last updated 11 July 2026

ACA CRM is an internal tool used by ACA Mortgage (operated by VeraSpace) to manage lead calling, appointments and client documents. This policy explains what data the app handles and how, with particular attention to Google user data.

Who this is for

ACA CRM is used by our own staff — callers, presenters and administrators. Accounts are created by an administrator; there is no public sign-up.

Information we handle

  • Your name and email address, for signing in and identifying you within the team.
  • Work activity you create in the app — leads, call outcomes, appointments and uploaded client documents.
  • If you choose to connect Google Calendar, the Google data described below. Connecting is optional.

Google Calendar data

When a presenter connects their Google Calendar, ACA CRM requests permission to view your calendar’s free/busy information and to create and manage calendar events. We use this data only to:

  • check when you are already busy, so appointments booked in ACA CRM don’t clash with your calendar; and
  • add appointments booked in ACA CRM to your Google Calendar.

We store the access and refresh tokens Google issues, solely to keep this connection working. You can disconnect at any time from the Availability page, which deletes those tokens and, where possible, revokes our access with Google.

How we use and share data

Your data is used only to operate ACA CRM for our team. We do not sell it, and we do not share it with third parties for advertising or any unrelated purpose. Google user data is used only for the calendar features described above.

ACA CRM’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and security

Data is stored in our own database and private file storage. Access is restricted to signed-in team members, scoped to what their role needs. Documents are served only through short-lived, expiring links.

Retention

We keep your data for as long as your account is active. Disconnecting Google Calendar removes the stored Google tokens immediately. To have your account and its data removed, contact us below.

Contact

Questions about this policy or your data: contact@veraspace.my.
← Back to ACA CRM