AAF CRM

AAF CRM extension: privacy

Last updated October 6, 2026.

Who it is for

The extension is a work tool for authorised users of the brokerages that use the CRM. It shows the CRM beside the page they are on and helps them move client information between the CRM and the systems they already use. It does nothing for anyone who is not signed in to the CRM.

What it reads

Only when a staff member asks it to: the business or contact details on the page they choose to add to the CRM; the account open in Applied Epic, to show it in the CRM and fill Epic forms from a CRM record; their LinkedIn feed, for the owner's own posting helper; and a draft in Outlook on the web, to attach a submission's files. Phone links on any page are handed to the brokerage's phone system when clicked.

Where it goes

Everything the extension reads is sent only to the CRM (crm.arshamcommercial.ca), over an encrypted connection, under the staff member's own CRM sign-in. It is not sent to anyone else, not sold, not used for advertising, and not used to train any model.

What it keeps on the computer

A few settings in the browser's extension storage: whether the CRM panel is showing, which version it last updated to, and a step in progress (for example the record being sent to Epic) until it finishes. No passwords. The CRM sign-in is the browser's own session with the CRM.

Client information

Client names, phone numbers, email addresses and business addresses handled by the extension are kept in the CRM under the privacy practices of the brokerage the staff member works for and Canadian privacy law (PIPEDA). Questions or requests about personal information: email arsham@arshamcommercial.ca.