Privacy Policy

Last updated: August 1, 2026

This Privacy Policy explains how Salesa ("we," "us," "our") collects, uses, discloses, and protects information when you use our platform (salesa.io and the Salesa application, together the "Service").

1. Information We Collect

Account information: name, email address, company name, job title/role (manager/rep/admin), and industry, when you request access, sign up, or are invited to join a team.

Call and deal content: call transcripts and audio you paste or upload, deal records, notes, stakeholder details, timeline entries, and documents (contracts, proposals, pricing sheets) you upload for analysis.

Communications data: messages sent through Team Chat and other in-app communication features, and any correspondence you send us directly (e.g., support requests).

Usage data: how you interact with the Service — pages visited, features used, number of analyses run, and similar technical/usage information — for the purpose of operating, securing, and improving the product, including enforcing usage limits described in our Terms of Service.

Device and log data: IP address, browser type, device information, and access timestamps, collected automatically as part of standard web service operation.

Payment information (where applicable): if and when payment features are enabled, billing information is collected and processed by our third-party payment processor; we do not store full payment card details ourselves.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service (analyzing calls and documents, generating deal intelligence, running forecasts, coaching insights, and team collaboration features);
• Communicate with you (invite emails, account notifications, password resets, approval emails, usage-limit notices, and support);
• Improve and train our AI models using anonymized and aggregated data — we may use patterns and trends derived from call analyses (stripped of identifying information) to improve the accuracy of our AI models across the platform. This underpins how Salesa's prediction-accuracy tracking works.
• Monitor, secure, and maintain the integrity of the Service, including detecting misuse and enforcing usage limits;
• Process payments, where payment features are enabled;
• Comply with legal obligations and enforce our Terms of Service.

3. What We Do NOT Do

• We do not sell your personal information to third parties.
• We do not share your raw call transcripts, deal data, documents, or messages with other, unrelated customers.
• We do not use your identifiable data to train models for the benefit of unrelated companies — only anonymized/aggregated patterns inform overall model improvements.
• We do not access any email inbox, calendar, or cloud drive unless you explicitly connect that account yourself and grant read-only permission. You can disconnect at any time from the Integrations page.
• We do not use data obtained from Google APIs to train, fine-tune, or improve generalized or standalone artificial-intelligence or machine-learning models.
• We do not use the Service or any Google API to generate, host, store, or distribute synthetic or AI-generated intimate, sexual, or non-consensual imagery of any person (AI NCII), deepfakes, or any sexually explicit content. Salesa processes business text only and has no image-generation capability.

4. Data Isolation Between Customers

Each customer account's data (deals, calls, documents, team messages) is logically isolated from every other customer's data using database-level access controls (row-level security). Users can only access data belonging to their own account, and role-based permissions further govern what account members (e.g., reps) can see relative to account managers.

5. Third-Party Service Providers

We use the following categories of third-party providers to operate the Service, each processing data on our behalf under their own security and privacy commitments:

We do not control these providers' independent use of data outside the services they perform for us, but we select providers who maintain industry-standard security practices.

6. Data Retention

We retain your data for as long as your account is active. If you request account deletion, we will delete or anonymize your data within a reasonable period, except where we are required to retain it for legal, tax, or legitimate business purposes (e.g., financial records, fraud prevention). Team messages and deal outcome history are retained as permanent records for audit-integrity purposes while your account remains active, consistent with our Terms of Service.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you;
• Request correction or deletion of your data;
• Object to or restrict certain processing;
• Request a copy of your data in a portable format;
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at supportsalesa.io@gmail.com or call +1 (415) 318-0680. We will respond within a reasonable timeframe consistent with applicable law.

8. California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. As stated above, we do not sell personal information. To exercise CCPA rights, contact supportsalesa.io@gmail.com.

8A. European Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR), including the rights described in Section 7 above, as well as the right to lodge a complaint with your local data protection authority. Our legal basis for processing your data includes: performance of a contract (providing the Service you signed up for), legitimate interests (improving and securing the Service), and consent (where applicable, such as optional communications). If you are located in the EEA/UK and have concerns about international data transfers, contact us at supportsalesa.io@gmail.com — we can discuss appropriate safeguards on request.

8B. Sensitive Personal Data in Your Content

Depending on your industry and the content of your calls and documents, Your Content may include categories of sensitive personal data about third parties — for example, health-related information in an insurance context, salary and employment history in a recruiting context, or financial details in a real estate or banking context. You, not Salesa, are responsible for ensuring you have the appropriate legal basis and consent to share such information through the Service, consistent with Section 4 of our Terms of Service. Salesa processes this content the same as any other call or document data, under the same security and access controls described in this Policy, but does not independently verify or classify the sensitivity of content you upload.

8C. Data Breach Notification

In the event of a security incident that compromises your personal data, we will notify affected users without undue delay and in accordance with applicable law, providing information about the nature of the incident and steps we are taking in response, through the contact information associated with your account.

9. Security

We use reasonable administrative, technical, and physical safeguards to protect your data, including encrypted storage, database-level access controls scoped by account and role, restricted internal access to sensitive credentials, and permanent, non-deletable audit trails for sensitive actions (such as deal outcome changes) to protect data integrity. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9A. Google User Data and Limited Use

If you choose to connect a Google account (for example Gmail, Google Calendar, or Google Drive) to Salesa, Salesa's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Exactly what Google data we access. When you connect a Google account, Salesa requests only the following read-only scopes and uses each strictly as described:

We never request permission to send, compose, modify, label, archive, or delete mail, calendar events, or files. We do not access Google Contacts, Google Photos, Google Chat, or any Google product other than those listed above.

What we store and for how long. For each ingested item we store the provider identifier, timestamp, participant email addresses, source type, and the minimum body excerpt required to justify an extracted signal. We deduplicate quoted reply chains and signatures before storage. Attachments are never executed. Marketing, newsletter, automated-notification, spam, and trash messages are filtered out before analysis and are not retained. Ingested Google data is deleted when you disconnect the account and request deletion, and in any event within 30 days of your account being closed.

Who can see it. Google data ingested by your connection is visible only to you and, where deal visibility rules in your own organization allow it, to authorized members of your own Salesa organization. It is enforced at the database level through row-level security and is never visible to any other customer. Our staff do not read it, except with your explicit consent for a specific item, to investigate abuse or a security incident, or where required by law.

What we do not do with it. We do not sell, rent, or share Google user data with data brokers. We do not use it for advertising, credit assessment, lending decisions, or any purpose unrelated to the features you enabled. We do not use it to train, fine-tune, or improve generalized or standalone AI or ML models; our third-party model providers are contractually prohibited from training on data we send them, and the anonymized-improvement practices described in Section 2 above do not apply to Google user data.

What we request and why. We request read-only access to the minimum Google data needed for the features you enable: message content and metadata from Gmail to detect deal-relevant commitments, timeline changes, objections, and stakeholder activity; calendar events to associate meetings with the correct deal; and only the specific Drive files you select for document analysis. We never request write, send, or delete permissions.

Limited Use commitments. Google user data obtained through these integrations is:

• used only to provide and improve the user-facing features you enabled inside Salesa (deal intelligence, signals, health scoring, forecasting, and coaching);
• never sold, rented, or transferred for advertising, credit assessment, lending, or any similar purpose;
• never transferred to third parties except (a) to the sub-processors strictly necessary to provide those features (secure hosting, database storage, and AI analysis), (b) where you explicitly direct it, (c) for security purposes such as investigating abuse, or (d) where required by law;
• never used to train, fine-tune, or otherwise improve generalized or standalone artificial-intelligence or machine-learning models. Our AI analysis is performed by third-party model providers under contractual terms that prohibit using your data for model training, and the anonymized-improvement practices described in Section 2 above do not apply to Google user data;
• never read by a human, except where you give explicit consent for specific items, where it is necessary for security purposes such as investigating abuse, to comply with applicable law, or where the data is aggregated and anonymized for internal operations.

Storage and retention. We store the minimum content needed for the features you enabled, along with the source, timestamp, participants, and provider identifier so you can trace every insight back to its original item. OAuth tokens are encrypted and held only on our servers; they are never exposed to browser code.

Revoking access and deletion. You may disconnect any Google account at any time from the Integrations page inside Salesa, which revokes our access token. You may also revoke access from your Google Account permissions page. On disconnection we stop all syncing, and you may request deletion of previously ingested Google data by contacting supportsalesa.io@gmail.com.

9B. Purpose Limitation and AI Safety

Salesa is a business-to-business commercial platform used by sales, real estate, and investment-banking teams to manage their own transactions. All artificial-intelligence processing in the Service operates on business text only — call transcripts, meeting notes, email threads, and commercial documents — and produces text summaries, structured deal signals, risk flags, and suggested next actions.

Salesa does not generate, host, store, transmit, or distribute images, video, or audio content of any kind. The Service therefore cannot be, and must not be, used to produce synthetic or AI-generated intimate or sexual imagery, non-consensual intimate imagery (AI NCII), deepfakes of any person, or any sexually explicit, harassing, or abusive content. Any attempt to use Salesa or any Google API accessed through Salesa for those purposes is a material breach of our Terms of Service and will result in immediate termination of access. Our use of all Google APIs complies with the Google APIs Terms of Service, the Google API Services User Data Policy, and Google's Generative AI Prohibited Use Policy.

10. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete it.

11. International Users

If you access the Service from outside the United States, your information will be transferred to and processed in the United States, where our servers and service providers operate. By using the Service, you consent to this transfer.

12. Cookies and Similar Technologies

We use cookies and similar technologies (such as local storage) for essential purposes — including keeping you logged in, remembering preferences, and maintaining security — and may use analytics technologies to understand how the Service is used. You can control cookies through your browser settings, though disabling essential cookies may affect the Service's functionality.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will make reasonable efforts to notify active users of material changes (such as via email or in-app notice). Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

14. Contact Us

Questions about this Privacy Policy or your data? Contact us at supportsalesa.io@gmail.com or call +1 (415) 318-0680. -e

=====COOKIE POLICY BELOW=====