Overview
This policy covers Custos: an internal CRM for a team that handles sensitive client data on live calls, with role-based access and a full audit trail.
It was built by Ahsan Mahmood, a software developer in Lahore, Pakistan. I am responsible for it, and you can reach me at aoneahsan@gmail.com.
Custos is not released. I froze it on October 21, 2026, with my other idea projects, so the products already in production get finished first. It is not being developed or sold now, and these documents change before that does.
What it holds
There is no public sign-up. Accounts are made by the business that runs Custos, for its own staff.
If you used a build of Custos, it may hold:
- staff names and sign-in emails, made by the team’s administrator
- client records and call notes
- the audit log of who changed what
How it is used
Only to run the part of Custos you were using. Nothing is sold, and nothing goes to anyone outside the services listed below.
Nothing is used for advertising.
Services it uses
| Service | What it receives |
|---|---|
| Supabase | Your sign-in record and the data you save, stored in its Postgres database. |
| OpenAI | What you ask an AI feature to work on, sent with your own OpenAI key. |
| Sentry | Error reports when something breaks: the page, the browser or device, and what went wrong. Not your content. |
| Amplitude | Counts of which screens are opened and which buttons are pressed, to see what gets used. |
| Microsoft Clarity | How pages are scrolled and clicked, with typed text masked. |
| OneSignal | A device token, only if you allow notifications. |
Each service keeps what it receives under its own privacy policy.
How long it is kept
Until you ask me to delete it, or until I switch the Custos backend off, whichever comes first.
Children
Custos is not meant for children under 13, and I do not knowingly keep anything about them. If you think a child has used it, email me and I will delete what it holds.
Deleting your data
How to ask, what is deleted and what is kept are on the Custos account deletion page.
Changes to this policy
If this policy changes, the new version goes on this page with a new Last updated date. There is no mailing list, so that date is the notice.
Contact
- Ahsan Mahmood, Lahore, Pakistan
- Email — aoneahsan@gmail.com