This policy explains how SalesMarketing processes the personal data of people who use the platform, of people who visit www.salesmarketings.com and, acting as a processor, of the people whose data our Customers entrust to us. The terms of use of the service are in the Terms of Service.
1. Who is the controller
The controller of the data of our users and of the visitors to our website is {RAZON_SOCIAL}, located at {DIRECCION}, tax identification {NIF_O_EIN} ("SalesMarketing", "we"). Privacy contact: {CORREO_LEGAL}. Full identification details are in the Legal Notice.
SalesMarketing is offered only to businesses and professionals established in the United States and in Latin America, except Peru. It is not directed at the European Union, the European Economic Area, the United Kingdom or Peru, and it does not offer goods or services there.
2. Two different roles
- Controller. We decide why and how the data of the people who create an account, work in a workspace, buy a plan or visit our website is processed. This policy deals mainly with that role.
- Processor. When a Customer uses the platform with the data of its own customers, contacts or visitors (CRM, calls, WhatsApp, email, forms, orders, audiences, visits to its website), the controller is that Customer and we process the data on its behalf and on its instructions. That processing is governed by the Data Processing Agreement (DPA).
If you are a customer or contact of a business that uses SalesMarketing, please exercise your rights with that business and read its privacy notice. If you write to us, we will forward your request to the right business and tell you we have done so.
3. What data we process, where it comes from and why
| Data | Source | Purpose | Basis |
|---|---|---|---|
| Account: name, email, hashed password, language, role, workspace | From you when you sign up or accept an invitation; or from your sign-in provider if you use one | Create and manage the account, authenticate you, provide support | Contract |
| Security: sign-in events (attempted email, IP, browser, result), second factor, workspace change log | From use of the platform | Protect accounts, detect abuse, investigate incidents | Legitimate interest and legal obligation |
| Billing: plan, number of businesses, balance, invoices, payment processor customer ID (the card is stored by the processor, not by us) | From you and from the payment processor | Charge the plan and the balance, invoice, prevent fraud | Contract and legal obligation |
| Work content: businesses, campaigns, creatives, copy, metrics, settings, conversations with the assistant | From you and from the accounts you connect | Provide the service | Contract |
| Connections: identifiers of ad, store, email or calendar accounts and their encrypted credentials | From the platforms you authorize | Act in those accounts on your behalf | Contract |
| Cloned voice, avatar or digital twin (optional) | From you, with the consent of the person whose voice or image is used | Create and use the private voice or video model | Consent |
| Communications: support messages, rights requests, notices | From you | Answer you and fulfill your requests | Contract, legal obligation |
| Visitors to our website: pages viewed, device, cookie identifiers | From your browser | Measure and improve the website and our advertising | Consent (except necessary cookies) |
| Use of the dashboard with session recording turned on (text masked) | From your browser, only if you turn it on | Understand usability issues and improve the interface | Consent |
| SalesMarketing marketing communications | From you | Send you news | Consent or legitimate interest, with an unsubscribe link in every message |
We do not ask for sensitive data to use the platform. Voice and image used for cloning or for an avatar may be biometric data: they are processed only if you turn on that feature and confirm the person's permission.
4. Artificial intelligence and automated decisions
The platform uses AI models to write, summarize, classify, transcribe and generate images, video and voice. We do not make decisions that produce legal or similarly significant effects on our users based solely on automated processing. Campaign verdicts, opportunity scoring and the winning score are deterministic rules that can be explained. Details, limits and notices are in the AI and Transparency Policy.
We do not use your data or the data of our Customers' customers to train our own models, and we configure AI providers not to use it to train theirs where they allow it.
5. Who we share data with
- Subprocessors that help us provide the service (hosting, database, storage, email, telephony, AI, billing, error tracking). They are in the subprocessor list, with their function, their data and their location.
- Platforms you connect (ads, stores, email, calendar, CRM). We send them what you ask us to send; your relationship with them is governed by their own terms.
- Your agency, if your workspace is managed by an agency, according to the permissions you give it.
- Authorities, when the law requires it and after checking the request.
- A buyer or successor, if the company is sold or merged, with the same safeguards.
We do not sell personal data for money. What California law may treat as "sharing" (the advertising pixels on our website, only with your consent) is explained in Do Not Sell or Share.
6. Where data is stored
The platform and its database are hosted in the United States. Some subprocessors may process data in other countries; the list says where. When the law of your country requires safeguards to send data to the United States, we apply them by contract (clauses in the DPA).
7. How long we keep it
| Data | Period |
|---|---|
| Account and work content | While the account exists. When it is deleted, if you are the last owner and the only member, the workspace is deleted immediately, with no grace period; otherwise your personal data is deleted and the workspace remains for the others |
| Copies at providers (voice, samples, voice assistants, phone numbers) | Deletion is requested when the account is closed and retried until the provider confirms it |
| Removal of a business managed by an agency | 7-day grace period during which it can be cancelled; the exported archive is kept for 30 days |
| Sign-in events | 90 days |
| Invoices and billing data | As long as tax and commercial law requires |
| Call and meeting recordings | 12 months, unless the account sets a shorter period |
| Transcripts and conversations | While the record exists; once the record is deleted, they are emptied after 30 days |
| Cloned voice, avatar or twin (biometrics) | Until revoked, or after 3 years without use |
| Ended free trial | The account is paused without deleting anything until you reactivate or delete it |
8. Security
We apply real technical and organizational measures: encrypted connections, hashed passwords, encrypted third-party credentials, isolation of each account in the database with a second row-level barrier, two-factor authentication, least-privilege roles, rate limits, support access only with permission and logged, and error tracking without personal data. Details are in the security annex of the DPA. No system is invulnerable: if a breach affects you, we will notify you within the time limits the law requires.
9. Your rights and deadlines by region
Depending on where you live, you have the right to access your data, correct it, delete it, take it with you (portability), object to or restrict its use, withdraw your consent and not be subject to solely automated decisions. Country details are in Your Privacy Rights.
| Region | Response deadline |
|---|---|
| California (CCPA/CPRA) | Acknowledgment within 10 business days; response within 45 days, extendable by another 45 with notice |
| Other U.S. states with a privacy law (Virginia, Colorado, Connecticut, Texas, Oregon and others) | 45 days, extendable under each state's law |
| Brazil (LGPD) | 15 days |
| Mexico (ARCO rights) | 20 days to respond and 15 more to carry it out |
| Colombia (Law 1581) | 10 business days for inquiries and 15 for claims |
| Argentina (Law 25,326) | Access within 10 calendar days; correction and deletion within 5 business days |
| Chile | Under Law 19,628 and, once in force, Law 21,719 |
| Other Latin American countries | Under their national law |
You can exercise them with the form on Your Privacy Rights, from the dashboard in Settings › Legal and rights or by writing to {CORREO_LEGAL}. It is free. We may ask you to confirm your identity.
10. Where to complain
If you are not satisfied with our answer, you can go to the authority of your country:
- United States: the Federal Trade Commission (FTC), your state attorney general and, in California, the California Privacy Protection Agency (CPPA).
- Brazil: the National Data Protection Authority (ANPD).
- Mexico: the federal personal data protection authority. Since 2025 those functions, formerly of INAI, moved to the Ministry of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno); please confirm the current authority.
- Colombia: the Superintendence of Industry and Commerce (SIC).
- Argentina: the Agency for Access to Public Information (AAIP).
- Chile: the Council for Transparency and, once operational, the Personal Data Protection Agency.
- Other countries: the data protection or consumer authority of your country.
11. Minors
The platform is for businesses and professionals aged 18 or over. It is not directed at people under 18 and does not knowingly collect data from children under 13. If you believe a minor has given us data, write to {CORREO_LEGAL} and we will delete it.
12. Notice for California residents
In the last 12 months we have collected these CCPA categories: identifiers (name, email, IP, cookie identifiers); commercial information (plan, balance purchases); internet activity (use of the website and the dashboard); audio and visual information (only if you use cloned voice, avatars or recordings); professional information (company and job title); and inferences limited to product use. We use them for the purposes in section 3 and keep them for the periods in section 7.
We do not sell personal information. We only "share" identifiers with advertising platforms through the pixels on our website, and only if you accept it. You can opt out at Do Not Sell or Share; we honor the Global Privacy Control (GPC) signal. We do not use sensitive personal information to infer characteristics. We will not treat you worse for exercising your rights.
13. Changes and versions
If we change this policy, we will publish the new version with its date and record it in the version history. If the change is significant, we will notify you in the dashboard or by email before it applies.