Privacy Policy

salesman is run by [COMPANY LEGAL NAME] ("we"). This policy explains what we collect when you use salesman to manage contacts and publish posts to social networks, why, who we share it with, and how to have it deleted.

Who is responsible

For your account and billing details, we are the data controller. For the contacts and posts a workspace keeps in salesman, the workspace owner decides what is kept and why, and we process that data on their behalf. A Data Processing Addendum is available on request at [CONTACT EMAIL].

What we collect

• Your account. Your name, email address, a hashed password or passkey, and the workspaces you belong to.
• Connected social accounts. When you connect an account on Bluesky, X, Threads, Facebook, Instagram or another network, we store the access tokens that network gives us, encrypted, along with the account's ID, username and profile picture. We use them only to publish the posts you schedule and to keep the connection working.
• Posts and media. The text you write, the images you upload with their alt text, when each post is scheduled, and what each network returned when it was published.
• Contacts. The people and organisations you add, and the details you or our lookups attach to them: names, websites, social handles, profile photos, public bios and notable work.
• Usage and billing. Basic logs needed to run and secure the service, and, if you subscribe, billing details handled by our payment processor. We never see or store your full card number.

How contact lookups work

When you ask salesman to look up a contact, we search public sources for that person or organisation: their own website, public profiles on social networks, Wikidata, and web search results. We store what we find for your workspace only, and mark anything unconfirmed as a suggestion until you confirm it. We do not combine one workspace's contacts with another's, and we do not sell contact data.

Data from social networks

Data we receive from a social network, including Meta's Threads, Facebook and Instagram, is used only to provide the features you use in salesman: connecting your account, publishing your posts, and showing you their status. We do not sell it, use it for advertising, or share it with anyone except the service providers below who help us run salesman.

Who we share data with

• The networks you post to, which receive your posts and media when they are published.
• Hosting and storage: Laravel Cloud runs the service and its database; images are stored in Cloudflare R2.
• AI processing: when you ask us to shorten a post or describe a contact, the relevant text is sent to Anthropic's Claude API to get the result back. We do not train AI models on your data, and under Anthropic's commercial terms they do not either.
• Search: contact lookups send the contact's name to Brave Search and Wikidata.
• Payments: Stripe processes subscriptions.
• The law: we disclose data when legally required to.

We require each of these providers to protect the data and to delete it when we stop using them. Our providers process data in the United States; transfers from the EEA, UK and Switzerland rely on Standard Contractual Clauses.

Why we use it

• To provide the service you signed up for: your account, connections, posts and contacts.
• Our legitimate interests: keeping the service secure, preventing abuse, and looking up public details about contacts you add. [LAWYER: confirm the basis for contact lookups.]
• Legal obligations: tax and billing records.
• Your consent, where we ask for it, such as product emails. You can withdraw it at any time.

How long we keep it

We keep your data while your account is open. When you disconnect a social account we delete its tokens immediately; its username and the record of posts already published stay with your post history until you delete them or your account. Content deleted or made private on X is removed from salesman within 24 hours of X or the account owner telling us. When you delete your account or ask us to delete your data, we delete it within 30 days, except billing records, which we keep for 7 years as the law requires.

Deleting your data

You can delete your data at any time:

• Disconnect a social account under Settings › Connections. Its tokens are deleted straight away.
• Delete contacts, posts and images from within the app.
• Delete your whole account under Settings, or email [CONTACT EMAIL] from your account's address and we will delete everything within 30 days.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your data, and to object to how we use it. Email [CONTACT EMAIL] and we will respond within 30 days. If a contact you have not met finds themselves in a workspace and wants their details removed, they can email us too.

California residents: in the last 12 months we collected the categories listed under "What we collect". We do not sell or share personal information for cross-context advertising. You can ask to know, correct or delete your information by emailing [CONTACT EMAIL], and we will not treat you differently for doing so.

Cookies

We use only the cookies needed to keep you signed in and protect forms from forgery. We do not use advertising or analytics cookies.

Children

salesman is not meant for anyone under 16. If we learn we hold a child's data, we delete it.

Security

Access tokens are encrypted at rest, connections use HTTPS, and each workspace's data is kept separate. No system is perfectly secure, and we will tell you promptly if a breach affects your data.

Changes and contact

We will post any changes here and update the date above, and email you about significant ones. Questions go to [CONTACT EMAIL], or [COMPANY LEGAL NAME], [POSTAL ADDRESS].