# Is LotsCRM Safe? What Your AI Agent Can Do, and What Happens If You Stop Paying

Source: https://lotscrm.com/blog/is-lotscrm-safe
Published: 2026-10-21T03:30:48.36876+00:00

Your AI agent can do in LotsCRM only what your role in that workspace allows, and it can't delete anything: contacts, companies and deals are archived and can be recovered with their history. LotsCRM never emails or messages your contacts. If you stop paying, nothing is deleted: an unfunded workspace turns read-only, and you can still read and export it.

LotsCRM is the CRM that's easy to keep up to date: every lead, call, deal and follow-up in one place, kept current by you in the dashboard or by ChatGPT or Claude. Handing a sales book to an agent is a fair thing to be careful about, so this page sets out exactly what the agent can and can't do, how roles work, what happens to your data when you stop paying, and how to give an agent less access than you have. It comes from LotsCRM's [skill file](https://lotscrm.com/skill.md), [tool list](https://api.lotscrm.com/tools.json), [REST documentation](https://api.lotscrm.com/docs.md), privacy policy and terms, and the product code, all read on 20 October 2026.

## How your agent signs in

- **MCP: OAuth in your browser.** You add `https://api.lotscrm.com/mcp` to ChatGPT, Claude, Claude Code, Codex, Cursor or another MCP client and sign in with your Lots account. You never paste a key or password into the chat. The setup steps for each agent are on [lotscrm.com/mcp](https://lotscrm.com/mcp).
- **You approve every new app.** The sign-in uses the authorization code flow with PKCE, and a consent page names the app and where it returns before you approve. An app you disconnect can only come back by asking you again.
- **Short-lived tokens, stored as hashes.** Access tokens expire after one hour. Refresh tokens last 30 days, are stored as hashes, and each one works once before it's replaced.
- **REST: an API key.** For scripts and cloud agents that don't speak MCP, you create a key at [lotstech.com/api](https://www.lotstech.com/api?utm_source=blog-lotscrm&utm_medium=blog&utm_campaign=launch-2026-10-20). It's shown once, LotsCRM stores only a hash of it, and it's limited to 100 requests a minute.
- **You can cut an agent off at any time.** Settings, AI connections, links to Connected apps on lotstech.com, which lists every AI app that can act on your account and disconnects any of them.

The agent never gets more than your access. It acts as you, with the role you hold in the workspace it's working in, so its writes are your writes.

## What each role can do

Every workspace has its own members and roles, and LotsCRM checks your access to that workspace before every read and every write. A record ID from another workspace grants nothing.

| Role | What it can do |
|---|---|
| **Owner** | Everything, including archiving or restoring the workspace itself |
| **Admin** | Manage the team, pipelines and workspace settings, plus everything a manager can do |
| **Manager** | Create, edit and archive any contact, company or deal |
| **Member** | Create and edit records, log activity and set follow-ups. Can't archive |
| **Viewer** | Read only. Can't create, edit or archive anything |

Your agent inherits the role of the person who connected it. A viewer's agent can read the pipeline and answer questions about it, and every write it tries is refused. Teammates are unlimited and free on every plan, so giving each person, client or agent its own account and role costs nothing.

## What your agent can do

With the role to match, the agent can do the whole job you'd do in the dashboard:

- Add and update contacts and companies, import up to 100 prospects at a time, and tag them.
- Create deals, move them through your pipelines and mark them won or lost.
- Log calls, meetings, emails, messages and notes after they happen.
- Create and complete follow-ups, and tell you what's due or overdue.
- Brief you before a call, summarise the pipeline and draft a follow-up from the CRM history.
- Invite teammates, change their roles and remove them, if you're an owner or admin.
- Check billing and give you a checkout link.

## The guard rails built into every tool

| Guard rail | What it stops |
|---|---|
| **No delete tool** | Archive replaces delete. An archived contact, company or deal keeps its deals, activity and history and can be recovered. Only managers and above can archive |
| **Never sends to contacts** | LotsCRM sends no emails, messages, sequences or reminders to your contacts. `record_activity` records what happened and never sends. The only emails LotsCRM sends are team invitations and "you were added" notices to teammates |
| **Respects opt-outs** | `prepare_follow_up` returns `can_contact: false` for a contact who opted out or is marked do not contact, and the agent is told not to draft outreach to them |
| **No overwriting newer work** | Deal updates, moves and archives carry the version the agent last read. If someone changed the deal since, the write is refused and the agent reads it again instead of overwriting |
| **No duplicates from retries** | Creates and imports carry an idempotency key, so a retried call returns the first result instead of a second record. Contacts and companies are deduplicated by email and domain in each workspace |
| **Lost deals need a reason** | Moving a deal to lost requires a reason, and every stage move is kept in the deal's stage history |
| **Clients stay separate** | Each workspace is its own sales book. The agent is told to pick the workspace first and never carry records or context from one workspace to another |
| **Private guidance stays private** | The briefing labels your public business facts apart from private guidance meant only for the agent, and the agent is told never to quote that guidance to a customer |
| **Every change is logged** | The database writes an audit event for every change to a record, listing which fields changed but never their values |

## What your agent can't do at all

- **Delete records.** There is no delete tool through MCP or REST. Archived records stay recoverable.
- **Email or message a contact.** It drafts; you send with the email or messaging tool you already use, and the agent logs it.
- **Make anyone the owner.** No invite or role change grants the owner role, and the owner can't be removed, suspended or leave their own workspace.
- **Act beyond your role.** A member's agent can't archive, and a viewer's agent can't write.
- **Pay.** `create_checkout` returns a link you open in your browser. The agent never sees or asks for card details.

## What the agent does only after you confirm

| Action | What has to happen first |
|---|---|
| Archive a workspace | Owner only. The agent has to send the workspace's exact name, and the tool tells it to confirm with you first. Nobody can open the workspace until it's restored, and the owner can restore it for 30 days. Nothing is deleted |
| Invite, add or remove a teammate | You ask, and you're an owner or admin. A removed teammate loses access at once, and their records, history and assignments stay |
| Send a follow-up | The agent drafts with `prepare_follow_up`, shows you, and you send it yourself |

## What happens if you stop paying

LotsCRM charges per workspace, one per business or client. A plan covers a number of workspaces, and any workspace beyond it is paid from your credits each day at your plan's rate.

- **Nothing is deleted.** Workspaces your plan covers stay fully available. A workspace nobody pays for turns read-only.
- **Reading and export keep working.** You and your agent can still open every contact, deal and timeline, run briefings and export contacts and companies to CSV from the dashboard. Writes are refused until the workspace is funded again.
- **Add credits or a plan to edit again.** Purchased credits never expire.
- **Archive what you don't need.** Archiving a workspace stops it counting toward your plan from the next daily charge, and the owner can restore it for 30 days.

The CSV export neutralises spreadsheet formulas, so a cell a contact filled in can't run as a formula when you open the file. You own what you put in LotsCRM, and you can ask LotsTech to delete your account and its data at any time.

## How your data is stored

LotsTech's [privacy policy](https://www.lotstech.com/privacy-policy) has a section for LotsCRM (section 18, updated 20 October 2026) that puts the main points in writing. LotsTech processes your records "only to provide the service", doesn't sell them or use them for advertising, and "LotsCRM runs no AI model that reads it". LotsCRM never sends emails or messages to your contacts, and for your contacts' data you are the controller, with LotsTech processing it on your behalf. If your plan or credits lapse, nothing is deleted: unfunded workspaces become read-only, and you can still read and export your data.

LotsCRM's data is stored on servers in the United States through Supabase and Cloudflare. Data is encrypted in transit with TLS, and sensitive data is encrypted at rest with AES-256. The CRM tables have row-level security with no browser access at all: the dashboard and the API reach them only through server code that checks your workspace access first.

Whatever your agent reads is processed by your AI provider under its own terms, and your AI provider bills its own usage. LotsCRM doesn't charge per agent action.

## How to give an agent less access than you have

Because the agent acts as whoever signed in, you limit it by signing it in as someone with a narrower role:

1. Invite an account for your agent, for example an address you control. You can do it on the Team page or ask your agent to call `invite_member`.
2. Give it the role that fits: **Viewer** for reports and briefings, **Member** to log calls, add leads and move deals without archiving.
3. Invite it only to the workspaces it should touch. For an agency, that can be one client's workspace.
4. Connect your agent to LotsCRM with that account instead of yours.

The same goes for clients: add a client's staff to their own workspace as viewers, and they see their pipeline without being able to change it. More on that setup on the [LotsCRM for agencies](https://lotscrm.com/for/agencies) page.

## Connect LotsCRM to your agent

Give your agent this and let it set itself up:

> Read https://lotscrm.com/skill.md and help me connect LotsCRM. Then list my workspaces and tell me my role in each.

LotsCRM costs $5 per workspace a month on pay as you go, or plans from $12 a month for 3 workspaces, with unlimited contacts, deals and teammates, and the MCP server and REST API on every plan. Pro and Business plans also include LotsNotes Pro. New accounts get 5,000 free credits, valid 90 days, no card. [See pricing](https://lotscrm.com/pricing). For setup in a specific agent, read the [Claude CRM integration guide](https://lotscrm.com/blog/claude-crm-integration) or [what ChatGPT can do in each CRM's connector](https://lotscrm.com/blog/chatgpt-crm-integration).

## Common questions

### Is LotsCRM safe to connect to ChatGPT or Claude?

LotsCRM signs your agent in with OAuth, so you never paste a key into the chat, and the agent has only your role in each workspace. It can't delete records, only archive them recoverably if you're a manager or above, and it never emails or messages your contacts. You can disconnect it at any time from Connected apps.

### Can my AI agent delete my contacts or deals?

No. There is no delete tool. A manager, admin or owner's agent can archive a contact, company or deal, and archived records keep their history and can be recovered. A member's or viewer's agent can't archive at all.

### Can my agent email my leads without asking me?

No. LotsCRM doesn't send emails or messages to contacts. The agent drafts a follow-up from the CRM history, you send it with your own tools, and the agent logs it. It won't draft outreach to a contact who opted out or is marked do not contact.

### What happens to my CRM data if I stop paying?

Nothing is deleted. Workspaces your plan covers stay available, and a workspace nobody pays for turns read-only: you can still read it and export contacts and companies to CSV. Add credits or a plan to edit again.

### Can a client see their pipeline without changing it?

Yes. Add the client's staff to their workspace with the viewer role. Viewers sign in with a free Lots account, see the records and the pipeline, and can't edit anything. Their AI agent gets the same read-only access.

### How do I disconnect an AI agent from LotsCRM?

Open Settings, AI connections, and follow the link to Connected apps on lotstech.com. It lists every AI app that can act on your account across Lots products, and you can disconnect any of them. A disconnected app has to ask you again to come back.

*Details from LotsCRM's [skill file](https://lotscrm.com/skill.md), [tool list](https://api.lotscrm.com/tools.json), [REST documentation](https://api.lotscrm.com/docs.md), [pricing](https://lotscrm.com/pricing), the [privacy policy](https://www.lotstech.com/privacy-policy) (section 18, LotsCRM), the [terms](https://lotscrm.com/terms) and the product code, read on 20 October 2026. Features and permissions can change; check those pages for the latest.*