License CRM data to AI: what the companies and rules say
The short answer
Mercor lists Salesforce accounts and opportunities, Troveo names Salesforce and HubSpot, and micro1's data partnerships list CRM data. Won or lost outcomes add signal, Troveo says. Customer personal data is the limit. Salesforce makes you responsible for the legality of your customer data. HubSpot says you own it.
A CRM holds two things at once, a record of how sales work went and a list of people. micro1, Mercor and Troveo list the first, and the law cares about the second.
Which CRM records do the companies name?
micro1 lists CRM data and CRM metadata among operational datasets. Mercor lists Salesforce accounts, contacts, opportunities and reports. Troveo groups CRM, sales and support under one heading and names Salesforce and HubSpot as systems.
Why does Troveo say CRM outcomes matter?
Troveo's guide says data showing what happened next, won or lost, resolved or escalated, adds signal that activity logs alone lack. A CRM is one of the few places where that result sits next to the steps that led to it. A deal record linked to the email thread and the proposal is worth more than any one of them, in Troveo's view.
What limits sit on CRM data?
Contact records are personal information about your customers and prospects. California has covered business-to-business and employee data under its privacy law since 1 Jan 2023, and a transfer for money counts as a sale unless the data meets the de-identification test. See CCPA sales and customer consent.
Contracts add more. Customer agreements and NDAs can limit what you do with account notes. My NDA page covers that. Talk to a privacy or commercial lawyer in your state before you sign.
What do Salesforce and HubSpot say about CRM data?
Salesforce's main services agreement, section 3.3, puts responsibility for the accuracy, quality and legality of customer data, and for how you acquired it, on the customer.
HubSpot's terms say you own your customer data, and also say HubSpot may use it to improve its own AI features unless you opt out in your settings. Check that setting, since it concerns a use you never licensed.
Who removes contact details?
Troveo says it scrubs names, contact details, credentials and client identities to a documented standard, and micro1 says it transforms the data itself. My re-identification page covers what that leaves behind.
My rights check asks what personal data the records hold and what your customer contracts allow.
micro1 may pay us a referral fee if a company we introduce goes ahead with it. How we are paid
Apply to micro1's data partnership (paid link)micro1's own data-partnerships pagePaid link. How we are paid
Vaultfish helps you run the process. We are not lawyers and this is not legal advice. If you need counsel who knows this area, we can point you to one. Ask for a referral
