Effective September 19, 2026
Cirqls (“Cirqls,” “we,” “us”) is operated by Partis LLC. This policy explains what information we collect through the Cirqls app (at crm.cirqls.me) and this website (cirqls.me), why we collect it, who we share it with, and the choices you have. Cirqls is an invite-only personal relationship-management tool — accounts aren't created by public sign-up, and the people using it are, at any given time, a small, known group rather than the general public.
If you have questions about this policy or want to exercise any of the rights described below, contact us at privacy@cirqls.me.
When you're invited to Cirqls, we collect your name and email address, and a password (stored as a salted hash, never in plain text) if you sign in that way. If you choose to sign in with Google instead, we receive your name, email address, and profile picture from Google — we request only the openid, email, and profile scopes, nothing broader (no access to your Gmail, Calendar, or Drive).
Cirqls is a place to store information about the people and companies in your professional network, and it only contains what you (or someone on your account) put there: contact records (names, emails, phone numbers, LinkedIn URLs, job titles, locations, birthdays, notes, and any custom fields you define), company records, logged interactions (calls, meetings, emails you record), follow-up reminders, any files you attach to a follow-up or interaction, and any avatar images you upload or import.
To keep you signed in and protect your account, we log the IP address and browser user-agent associated with each login session, along with a session token stored in a cookie on your device. This is used only for authentication and security (e.g. detecting suspicious activity) — Cirqls does not run any analytics, advertising, or behavioral-tracking scripts, on this website or in the app. See Cookies below.
If you use an optional contact-enrichment feature, Cirqls sends identifying information about that contact (such as a name, company, or existing LinkedIn URL) to the enrichment provider you select, and stores whatever business information it returns (such as a work email or phone number) on that contact record. See Third parties we share information with for the specific providers and what each one is sent.
We use the information above to:
We do not use your information for advertising, and we do not build behavioral or marketing profiles.
We do not sell your personal information, and we do not share it with third parties for their own advertising or marketing purposes. We do share limited information with the following categories of service providers, only as needed to operate the features described:
We may also disclose information if required by law, or to protect the rights, property, or safety of Cirqls, our users, or others.
Our database is encrypted at rest using a customer-managed AWS KMS key, and backups are encrypted with the same key and replicated to a second AWS region for disaster recovery. File attachments (documents, images) are individually encrypted before storage. Access to production data is limited to authorized personnel. No method of storage or transmission is perfectly secure, and we can't guarantee absolute security, but we take these protections seriously given the nature of the data involved.
We retain your account and content for as long as your account is active. If you'd like your account or specific data deleted, contact us at privacy@cirqls.me and we'll delete it, generally within 30 days. Because we maintain encrypted backups for disaster recovery, deleted data may persist in backup storage for up to our backup retention window (currently up to 365 days for the disaster-recovery copy) before being fully purged, and won't be restored to the live system except to recover from an actual data-loss incident.
You can access, correct, export, or delete the information in your account at any time by using Cirqls directly, or by contacting us at privacy@cirqls.me.
Under the California Consumer Privacy Act (CCPA/CPRA), California residents have the right to know what personal information we've collected about them, to request deletion of that information, to correct inaccurate information, and to not be discriminated against for exercising these rights. We do not sell or share personal information (as those terms are defined under the CCPA, including for cross-context behavioral advertising), so there is no opt-out link to provide. To exercise any of these rights, contact us at the email above; we may need to verify your identity before fulfilling a request.
Residents of Virginia, Colorado, Connecticut, Utah, and other states with comparable consumer privacy laws have similar rights to know, access, correct, delete, and port their personal information, and the same right to non-discrimination. Contact us at the email above to exercise any of these rights.
Cirqls is not directed to, and is not intended for use by, anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we'll delete it.
Cirqls is operated in the United States, and the information described in this policy is stored and processed in the United States. If you access Cirqls from outside the United States, you understand that your information will be transferred to and processed in the United States.
We may update this policy from time to time. If we make a material change, we'll update the effective date above and, where appropriate, notify you directly (for example, by email).
Questions, requests, or concerns about this policy or your information: privacy@cirqls.me.