Privacy Policy

At SalesAstra ("SalesAstra", "we", "our", or "us"), we are committed to protecting the privacy, confidentiality, and security of the information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, store, transfer, and protect personal information when you access or use our websites, applications, products, services, customer support, events, and other related offerings (collectively, the "Services").

Privacy is fundamental to how SalesAstra is designed, developed, and operated. We follow the principles of transparency, accountability, data minimization, and privacy by design to help ensure that personal information is handled responsibly and in accordance with applicable data protection laws.

SalesAstra provides cloud-based customer relationship management (CRM), business productivity, automation, artificial intelligence, and related software services to organizations worldwide. As our Services evolve, we remain committed to protecting customer information while continuously improving the functionality, security, and reliability of our platform.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.

This Privacy Policy applies to personal information collected through:

• SalesAstra websites
• Customer portals
• Web and mobile applications
• Product demonstrations and trial environments
• Customer support interactions
• Sales and marketing activities
• Events, webinars, and training sessions
• Online communities and documentation portals
• Any other Services that reference this Privacy Policy

This Privacy Policy applies to:

• Website visitors
• Prospective customers
• Trial users
• Customers and subscribers
• Authorized users of customer accounts
• Business partners
• Vendors and service providers
• Individuals who communicate with us regarding our Services

This Privacy Policy does not apply to:

• Third-party websites, products, or services that maintain their own privacy policies.
• Information processed by our customers outside the SalesAstra platform.
• Third-party integrations that customers independently enable within their own environments.

Your use of third-party services remains subject to the privacy policies and terms of those respective providers.

Depending on how you interact with SalesAstra, our responsibilities for processing personal information may differ.

When We Act as a Data Controller

SalesAstra acts as a Data Controller when we determine the purposes and means of processing personal information.

Examples include information collected when you:

• Visit our website
• Request a product demonstration
• Register for an event or webinar
• Subscribe to newsletters or marketing communications
• Create a SalesAstra account
• Purchase or subscribe to our Services
• Contact our sales or support teams
• Participate in surveys or provide feedback

In these situations, SalesAstra determines how and why your personal information is processed in accordance with this Privacy Policy and applicable law.

When We Act as a Data Processor

When organizations use SalesAstra to manage their own business information, customer relationships, communications, or other operational data, SalesAstra generally acts as a Data Processor (or equivalent legal role under applicable law).

In these circumstances:

• The customer organization determines what information is collected, stored, and managed within its SalesAstra environment.
• SalesAstra processes that information only on the customer's documented instructions and for the purpose of providing the contracted Services.
• Customer organizations remain responsible for ensuring that their collection and use of personal information complies with applicable privacy laws.

If your personal information is managed within a SalesAstra account by your employer or another organization, that organization is generally responsible for responding to requests relating to your personal information.

Shared Responsibility

Privacy and security are shared responsibilities.

While SalesAstra provides secure infrastructure, administrative controls, and privacy safeguards, customers are responsible for appropriately configuring their environments, managing user access, determining data retention practices, and ensuring their own compliance with applicable legal and regulatory obligations.

The information we collect depends on how you interact with SalesAstra, the Services you use, and the choices you make. We collect only the information reasonably necessary to provide, secure, improve, and support our Services.

Information You Provide Directly

You may voluntarily provide personal information when interacting with SalesAstra, including when creating an account, requesting information, subscribing to our Services, contacting support, registering for events, or communicating with us.

Depending on the interaction, this information may include:

• Name
• Business email address
• Telephone number
• Company or organization name
• Job title
• Business address
• Country or region
• Preferred language
• Time zone
• Account credentials
• Billing and subscription information
• Tax information where required
• Support requests and correspondence
• Feedback, testimonials, and survey responses
• Any other information you choose to provide

Payment card information is processed by authorized payment service providers. SalesAstra does not store full payment card details unless expressly required for a supported payment service and handled in accordance with applicable security standards.

Information Processed on Behalf of Customers

Organizations using SalesAstra may store, manage, or process business information and personal information within their accounts.

SalesAstra processes such information solely for the purpose of providing the Services and in accordance with customer instructions, contractual commitments, and applicable law.

The nature of this information depends entirely on how each customer uses the platform and may include customer relationship information, communications, documents, business records, and other information uploaded or generated by the customer.

Information Collected Automatically

When you access or use our Services, certain information is collected automatically to help us operate, maintain, secure, and improve the platform.

This information may include:

• Internet Protocol (IP) address
• Device identifiers
• Browser type and version
• Operating system
• Language preferences
• Date and time of access
• Authentication events
• Session information
• Pages and features accessed
• Referring URLs
• Performance metrics
• Error reports
• Diagnostic information
• Security logs
• Usage analytics

This information helps us maintain service reliability, troubleshoot issues, monitor security, prevent abuse, and improve the user experience.

Cookies and Similar Technologies

We use cookies and similar technologies to:

• Maintain secure user sessions
• Remember user preferences
• Authenticate users
• Improve website functionality
• Measure product and website performance
• Understand usage trends
• Enhance the overall user experience

Additional information regarding our use of cookies is available in our Cookie Policy.

Information from Third Parties

We may receive information from trusted third parties where authorized by you or our customers, or where necessary to provide the Services.

Examples include:

• Identity and authentication providers
• Payment processors
• Business partners
• Customer-authorized integrations
• Marketing and event partners
• Publicly available business sources
• Other service providers supporting our operations

The information received depends on the services used and the permissions granted.

AI-Assisted Processing

Where customers choose to use AI-powered capabilities within SalesAstra, information may be processed to generate requested outputs, recommendations, summaries, insights, or other AI-assisted functionality.

SalesAstra processes such information solely for the purpose of delivering the requested Services and in accordance with applicable agreements, this Privacy Policy, and customer instructions.

Information We Do Not Intentionally Collect

Unless specifically required for a lawful business purpose, we do not intentionally request or encourage the collection of highly sensitive personal information, including government-issued identification numbers, payment card credentials, passwords for third-party services, biometric data, or health information.

Customers are responsible for ensuring that the information they store within SalesAstra is appropriate for their intended business purposes and complies with applicable laws.

SalesAstra uses personal information only where necessary to provide, maintain, improve, protect, and support our Services, fulfill contractual obligations, comply with applicable laws, and operate our business.

Depending on your relationship with SalesAstra, we may use personal information to:

Provide and Deliver Our Services

We use information to:

• Create and manage user accounts
• Authenticate users and maintain account security
• Deliver subscribed products and services
• Process transactions and manage subscriptions
• Provide customer support and technical assistance
• Enable integrations requested by customers
• Operate and maintain the functionality of our Services

Improve Our Services

We continually improve our products and services by using information to:

• Develop new features and capabilities
• Enhance performance, reliability, and usability
• Identify and resolve technical issues
• Monitor platform health and service availability
• Conduct analytics and product research
• Improve customer experience

Where practical, we use aggregated or de-identified information for these purposes.

Communications

We may use your information to communicate with you regarding:

• Service-related announcements
• Security notifications
• Billing and subscription matters
• Product updates
• Customer support responses
• Changes to our Services, Terms, or Privacy Policy

Where permitted by applicable law, we may also send newsletters, educational materials, event invitations, and marketing communications. You may opt out of promotional communications at any time using the unsubscribe instructions provided or by updating your communication preferences.

Security and Fraud Prevention

We use information to help:

• Protect customer accounts
• Detect and prevent fraud, abuse, and unauthorized access
• Investigate suspected security incidents
• Maintain the integrity and availability of our Services
• Enforce our agreements and policies
• Protect the rights, property, and safety of SalesAstra, our customers, and others

Artificial Intelligence

Where customers choose to use AI-enabled capabilities, we may process information necessary to provide AI-assisted functionality, such as generating responses, recommendations, summaries, or other requested outputs.

We do not use customer data to provide AI functionality beyond the purposes authorized by the customer or required to deliver the Services.

Legal and Business Purposes

We may also process information to:

• Comply with legal obligations
• Respond to lawful requests from government authorities
• Protect our legal rights
• Resolve disputes
• Conduct audits
• Manage financial reporting
• Support business continuity
• Perform internal administrative and operational functions

Data Minimization

We are committed to collecting and processing only the personal information reasonably necessary to provide our Services and fulfill the purposes described in this Privacy Policy.

Where applicable privacy laws require a legal basis for processing personal information, SalesAstra relies on one or more of the following lawful bases:

Performance of a Contract

We process personal information where necessary to provide the Services requested by you or your organization, fulfill contractual obligations, manage subscriptions, and deliver customer support.

Legitimate Interests

We may process personal information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

Examples include:

• Improving our Services
• Securing our platform
• Preventing fraud
• Product development
• Business operations
• Customer communications
• Service analytics
• Network and information security

Consent

Where required by law, we rely on your consent to process personal information for specific purposes, such as certain marketing communications or optional features.

You may withdraw your consent at any time where processing is based on consent. Withdrawal of consent will not affect processing that occurred before consent was withdrawn.

Legal Obligations

We may process personal information where necessary to comply with applicable laws, regulations, court orders, lawful requests, or other legal obligations.

Protection of Vital Interests

In limited circumstances, we may process personal information where necessary to protect the vital interests of an individual or another person.

SalesAstra does not sell personal information to third parties.

We share personal information only where necessary to provide our Services, comply with legal obligations, protect legitimate interests, or where authorized by our customers or users.

Within Your Organization

If you access SalesAstra through an organization, your information may be visible to authorized administrators and users within that organization according to their configured permissions and access controls.

Your organization is responsible for managing user permissions and determining who may access information within its SalesAstra environment.

Service Providers and Sub-processors

We work with carefully selected third-party service providers who assist us in delivering and supporting our Services.

These providers may perform services including:

• Cloud infrastructure and hosting
• Identity and authentication services
• Payment processing
• Customer support
• Email delivery
• Security monitoring
• Analytics
• Backup and disaster recovery
• Artificial intelligence services

Service providers are contractually required to protect personal information and may process it only for the purposes specified by SalesAstra.

Third-Party Integrations

Customers may choose to connect SalesAstra with third-party products or services.

When such integrations are enabled, information may be shared with those third parties in accordance with customer instructions and the permissions granted by the customer.

We encourage customers to review the privacy practices of any third-party services they choose to integrate with SalesAstra.

Business Transfers

If SalesAstra is involved in a merger, acquisition, financing, corporate restructuring, asset sale, or similar business transaction, personal information may be transferred as part of that transaction, subject to appropriate confidentiality and legal safeguards.

Legal Requirements

We may disclose personal information where we believe disclosure is necessary to:

• Comply with applicable laws or regulations
• Respond to lawful requests from public authorities
• Protect our legal rights
• Enforce our agreements
• Prevent fraud or illegal activity
• Investigate security incidents
• Protect the safety of our customers, employees, or the public

Aggregated and De-identified Information

We may use and disclose aggregated, statistical, or de-identified information that does not reasonably identify an individual for purposes such as analytics, product improvement, benchmarking, research, and business reporting.

Customer-Controlled Information

Where SalesAstra processes personal information on behalf of a customer, we process and disclose such information only in accordance with the customer's documented instructions, contractual commitments, and applicable law.

SalesAstra provides cloud-based services to organizations operating in multiple countries and regions. As a result, personal information may be transferred to, stored in, or processed in jurisdictions other than the country in which it was originally collected.

We are committed to ensuring that international transfers of personal information are carried out in accordance with applicable privacy and data protection laws.

Where required, we implement appropriate safeguards for cross-border transfers, which may include:

• Standard contractual clauses or equivalent contractual safeguards
• Data processing agreements
• Technical and organizational security measures
• Risk assessments where appropriate
• Other lawful transfer mechanisms recognized under applicable law

Our authorized service providers and sub-processors may also process information in multiple jurisdictions in order to provide the Services.

Where available, SalesAstra may offer customers options regarding data hosting or regional data residency based on their subscription, contractual arrangements, or future service offerings.

Customers remain responsible for evaluating the legal and regulatory requirements applicable to their own use of the Services, including any obligations relating to international data transfers.

SalesAstra continually reviews its international data transfer practices to align with evolving privacy regulations and recognized industry standards.

SalesAstra retains personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, provide the Services, comply with applicable legal obligations, resolve disputes, enforce our agreements, and protect our legitimate business interests.

The retention period varies depending on the nature of the information, the purpose for which it was collected, customer instructions, contractual commitments, and applicable legal or regulatory requirements.

Customer Data

Customer organizations determine the information they store within their SalesAstra environment and generally control the retention and deletion of that information.

Unless otherwise agreed or required by law, customer data is retained for the duration of the applicable subscription and in accordance with customer instructions.

Account Information

Information relating to user accounts may be retained while an account remains active and for a reasonable period thereafter where necessary to:

• Maintain service continuity
• Meet legal and regulatory obligations
• Resolve disputes
• Prevent fraud and abuse
• Protect the security of our Services
• Enforce contractual rights

Backups and Disaster Recovery

To support business continuity and disaster recovery, backup copies of information may be retained for a limited period after deletion from active systems.

Backup data is securely protected and is deleted or overwritten according to our operational retention schedules.

Legal Requirements

Certain information may be retained for longer periods where required by applicable law or where reasonably necessary to establish, exercise, or defend legal claims.

Secure Disposal

When personal information is no longer required, SalesAstra takes reasonable steps to securely delete, anonymize, or otherwise dispose of the information using appropriate technical and organizational measures.

Protecting customer information is fundamental to the design, development, and operation of SalesAstra.

We maintain a comprehensive information security program designed to safeguard the confidentiality, integrity, and availability of personal information and customer data.

Our security program incorporates administrative, technical, and organizational safeguards that are regularly reviewed and enhanced to address evolving security risks and industry best practices.

Our security measures include, where appropriate:

• Encryption of data in transit and at rest
• Strong authentication mechanisms
• Role-based access controls
• Principle of least privilege
• Secure software development practices
• Security monitoring and logging
• Vulnerability management
• Network and infrastructure security
• Backup and disaster recovery procedures
• Incident detection and response processes
• Employee security awareness and confidentiality obligations
• Periodic security assessments and risk management activities

Access to customer information is limited to authorized personnel who require such access to perform their responsibilities and is subject to appropriate confidentiality obligations.

While we strive to protect personal information using commercially reasonable safeguards, no method of electronic transmission, storage, or processing can be guaranteed to be completely secure. Customers are also responsible for maintaining appropriate security practices within their own environments, including protecting account credentials, managing user access, and securing devices used to access the Services.

Where required by applicable law or contractual commitments, SalesAstra will notify affected customers of confirmed security incidents involving personal information within the timeframes required by applicable law.

Additional information regarding our security practices may be available through our Trust Center or other security documentation.

Depending on your location and applicable privacy laws, you may have certain rights regarding your personal information.

These rights may include:

Where SalesAstra processes personal information on behalf of a customer organization, requests relating to customer-controlled information should generally be directed to that organization, as it determines the purposes and means of processing such information.

To protect personal information, we may request additional information to verify your identity before responding to certain requests.

We will respond to privacy requests in accordance with applicable legal requirements.

SalesAstra will not discriminate against individuals for exercising their privacy rights where such protections are provided by applicable law.

SalesAstra uses cookies and similar technologies to support the operation, security, and performance of our websites and Services.

These technologies help us:

• Authenticate users
• Maintain secure sessions
• Remember user preferences
• Improve website functionality
• Measure service performance
• Understand usage trends
• Analyze website traffic
• Enhance user experience
• Detect security issues and prevent misuse

Some cookies are necessary for the operation of our Services, while others help us improve functionality, understand product usage, or provide communications that are relevant to users.

Where required by applicable law, we will request your consent before placing non-essential cookies or similar technologies on your device.

You may manage or disable cookies through your browser settings. However, doing so may affect the functionality or availability of certain features of the Services.

Additional information regarding our use of cookies is available in our Cookie Policy.

SalesAstra is designed for business and professional use and is not directed to individuals under the age required to enter into legally binding agreements under applicable law.

We do not knowingly collect personal information directly from children.

If we become aware that personal information has been collected from a child in violation of applicable law, we will take reasonable steps to delete such information as promptly as practicable.

If you believe that a child has provided personal information to SalesAstra, please contact us using the contact information provided below.

Our Services may contain links to or integrate with third-party websites, applications, products, or services.

These third-party services operate independently and are governed by their own privacy policies and terms of use.

SalesAstra is not responsible for the privacy, security, or content of third-party services.

We encourage customers and users to review the privacy practices of any third-party services they choose to access or integrate with SalesAstra.

We may update this Privacy Policy from time to time to reflect changes in our Services, legal obligations, business practices, security measures, or applicable laws.

When we make material changes, we will update the "Effective Date" at the beginning of this Privacy Policy and, where appropriate, provide notice through the Services, by email, or through other reasonable communication methods.

Your continued use of the Services after the updated Privacy Policy becomes effective constitutes your acknowledgment of the revised Privacy Policy, to the extent permitted by applicable law.

We encourage users to review this Privacy Policy periodically to remain informed about how we protect personal information.

If you have questions about this Privacy Policy, our privacy practices, or wish to exercise your privacy rights, please contact us.

If SalesAstra processes your personal information on behalf of your employer or another organization, we recommend contacting that organization first, as it generally acts as the data controller for information stored within its SalesAstra environment.

Where required by applicable law, SalesAstra will cooperate with customers and relevant regulatory authorities in responding to privacy-related requests.