This is the policy in force, not a draft of one. It describes what we actually do today, in words you can read without a law degree. Two things you are entitled to know. It has not been through outside counsel — we say so rather than imply a review. And changes apply forward, never backward: we give notice by email, and the commitments below do not get weaker in a later version.
What we collect
We collect the minimum needed to run Saleringo and talk to you. Concretely:
- Account data. Name, work email, business name, industry, and country — what you give us when you request early access or create an account.
- What you send through our forms. The early-access and “get my plan” forms post to our own server (
/api/lead) and are stored in our database in Seoul: your name, work email, phone, company, industry, the message you write, the page you sent it from and the referring page, your browser's user-agent string, a salted hash of your IP address (never the address itself — it is used only to rate-limit and de-duplicate), and which consent boxes you ticked. A notification goes to us, and when confirmation email is switched on you get a copy with a reference number. If the server cannot store it, the page says so and opens an email in your mail app instead — then we receive exactly what you decide to send. The order form posts the same way and adds the company name, registration or tax number, representative and contact names, invoice email, any note you leave, and the plan and country you picked, with the time of the order. - Usage data. Which features are used, error logs, and basic browser/device information — so we can keep the product working and decide what to fix first.
- Billing data. Card payment is not switched on yet. An order is a request — nothing is charged at that stage, and the contract forms on the signed written order. Card registration starts only after we contract a payment provider; that provider is named on Security & trust before it takes a card, and we will not store your card number ourselves.
What we don't — your customers' data
When your business runs its front desk on Saleringo, your end customers' conversations — the calls, chats, and WhatsApp messages — belong to your business, not to us.
- We act as a processor. We process those conversations on your instructions, to answer inquiries, qualify leads, book appointments, and update your records — and for no other purpose.
- We don't sell personal data. Not yours, not your customers'. There is no "may share with selected partners" clause hiding here.
- We don't run ads and we don't build advertising profiles from anyone's conversations.
- You control the settings. As the controller of your customers' data, you decide what is collected in conversations and how long it is kept — see Security & Trust for how the roles work.
AI & training
This is the section most AI vendors bury. Here it is in three sentences:
- No cross-customer training. Your conversations and your knowledge base are never used to train or improve models for other customers. Your competitor's assistant learns nothing from your data.
- Improvement is opt-in. Using your own data to improve your own assistant is off by default and happens only if you turn it on in writing.
- Approved facts stay yours. The verified answers you sign off are your content. We don't reuse, republish, or resell them.
Retention & deletion
- While your account is active, we keep the data needed to run the service — account details, settings, your knowledge base, and conversation history per your retention settings.
- When you leave, close your account or email hello@saleringo.com. We delete your account and CRM data within 30 days, and purge call recordings from backups within 90. Two things outlive that, both under South Korean law, where we are established: call metadata is held for 12 months under the telecommunications record-keeping duty in the Protection of Communications Secrets Act, and transaction and billing records for 5 years under the Act on Consumer Protection in Electronic Commerce. An inquiry you send through a form is kept for one year from the day you sent it, or deleted at once if you ask. The full table, per kind of record, is on Security & trust.
- Your customers' conversations follow the retention period you set as controller — when it lapses, they go. If you never set one, conversations are kept for 24 months by default.
- Your rights, wherever you live. You can ask what we hold about you, ask us to correct it, ask us to delete it, or ask us to stop processing it. We honor these requests without making you cite a statute — we act on them, and tell you the outcome, within 10 days.
Contact
Privacy questions go to hello@saleringo.com — a human, not an autoresponder, replies within one business day.
Where GDPR fits
For customers established in the UK or the EEA, you are the controller of your customers' personal data; Saleringo is your processor. Our Data Processing Agreement sets that out. It incorporates the Standard Contractual Clauses for transfers outside the EEA and names each subprocessor and its country. Request it at hello@saleringo.com — we send it before you sign anything.
Nothing on this page limits rights you hold under your own country's law. Where local data-protection law gives you more than this policy describes, the local law governs.
Read the fine print.
Liked what you found?
That's the whole point. Join the founding cohort, or email us any privacy question — a person answers.