Privacy Policy

Last updated: August 31, 2026

This policy explains what information StatusBridge collects when you connect a Redtail or Wealthbox account, how it's stored, and how it's used. StatusBridge is operated by Chris Castle, Inc. ("we", "us"). If you have questions, contact [email protected].

What we collect

• Account information you provide: your company name, a contact email, and the destination webhook URL and shared secret you configure.
• CRM authorization: for Redtail, a UserKey obtained by exchanging your username and password once with Redtail's authentication endpoint — your password itself is never stored, logged, or retained past that single exchange. For Wealthbox, an OAuth access token and refresh token obtained through Wealthbox's own consent screen — we never see your Wealthbox password.
• CRM data limited to opportunity status: for each opportunity in your connected CRM(s), we store its ID, name, and current status, purely to detect when that status changes. We do not import or store other CRM data (contacts, notes, documents, communications, etc.).
• Change history: a log of status changes we detected and whether the corresponding webhook delivery succeeded, including the destination's HTTP response — kept as an operational and troubleshooting record.

How we store it

CRM credentials (the Redtail UserKey; the Wealthbox access and refresh tokens) are encrypted at rest using AES-256-GCM before being written to the database. Decrypted values exist only in memory for the duration of a single request or a single scheduled poll. All other stored data (opportunity status, change log, your account and webhook details) resides in a standard database without additional encryption.

How we use it

The only use of this data is the service itself: on a recurring schedule, we check your connected CRM(s) for opportunities whose status has changed since we last checked, and if one has, we send a notification of that change to the destination webhook you configured, signed with the shared secret you provided. We do not use your data for advertising, do not sell it, and do not share it with anyone other than:

• The CRM provider itself (Redtail or Wealthbox), to authenticate and read your opportunity data;
• Your own destination webhook, which you control;
• [REPLACE: any hosting/infrastructure provider that would process this data, e.g. your web host — or state "no other party" if none].

Retention and deletion

We retain your account information, encrypted credentials, status history, and change log for as long as your account remains active. If you disconnect a CRM or want your data deleted, contact [email protected] and we will revoke the stored credential and delete the associated status history and change log [REPLACE: state your actual deletion timeframe, e.g. "within 30 days"].

Security

All web-facing pages require HTTPS. Redtail login credentials are transmitted once, over HTTPS, directly to Redtail's authentication endpoint, and are never persisted. Wealthbox credentials are never seen by us at all — authorization happens entirely on Wealthbox's own site. Every client's credentials, webhook configuration, and status history are isolated from every other client's.

Your choices

You can disconnect a CRM connection, change your destination webhook, or request deletion of your data at any time by contacting [email protected].

Children's privacy

StatusBridge is a business tool intended for use by CRM account holders and is not directed to children. We do not knowingly collect information from children.

Changes to this policy

If this policy changes, we'll update the "Last updated" date above. [REPLACE: describe how you'll notify existing connected clients of material changes, if at all]

Contact

Questions about this policy or your data: [email protected].