Privacy Policy

Effective and last updated: October 16, 2026

Information we handle

• Account details: your Google account identifier, name, email address and profile image, together with session and authorization records. Google handles your password; SalesComb does not receive it.
• Workspace information: business details, website address, contact information, opening hours, team settings, permissions, policy drafts, published policies and activity records you create or approve. Document content is processed only when document storage is available and you upload files.
• Connected services: authorized credentials, scopes, connection identifiers, API schemas and exposed field names. Depending on the connector and your actions, SalesComb reads posts, pages, products, orders, customer records, prices, inventory and metadata. It stores imported catalog information and proposed changes, which may contain personal data. Connecting an account does not provide access beyond that provider's permissions.
• Website and technical information: public pages you ask us to inspect, source URLs, request and error information, and security records. Our hosting provider processes network information such as IP addresses to deliver and protect the service.

Why we use it

We use this information to authenticate users, maintain workspaces, import requested business information, enforce access controls, carry out approved connector operations, respond to support requests and investigate errors or abuse. Features marked unavailable or coming soon do not authorize access to those services.

Growth agents. When a business owner starts a Growth mandate, SalesComb's agents read that business's connected data (for example search performance, website pages, products and reviews) to find and carry out marketing improvements for that same business, within the goal, budget, channels and autonomy level the owner sets. Every action is logged, many can be undone, and spending or sensitive actions wait for the owner's approval.

AI processing. To write titles, posts, replies and page copy, and to sort and draft replies to email in a mailbox you connect, SalesComb sends the minimum relevant business facts and the text being answered to an AI model run by Google (Gemini API) or by our hosting provider, Cloudflare (Workers AI). These requests are not used to train general-purpose models. Public comments and reviews are treated as untrusted text and are never used as instructions.

Facebook. With your permission SalesComb reads your Facebook Pages, posts, comments and insights and your Meta ad accounts, and publishes the posts, replies and moderation actions you or your mandate allow. If you turn on the comment monitor, Meta sends new comments on your Page to SalesComb so they can be answered, hidden as spam or flagged to you. SalesComb never sends private messages on its own and never contacts people who have not contacted your Page.

WhatsApp. SalesComb is a Meta Tech Provider on the WhatsApp Business Platform. A business connects its own WhatsApp Business Account and number through Meta's Embedded Signup and grants SalesComb access to that account only; the number and account stay the business's own, and the business pays Meta directly for messages Meta charges for. For each conversation SalesComb keeps the customer's WhatsApp number and profile name, the messages exchanged, delivery and read status, and whether the customer opted out. Photos, voice notes and documents stay with Meta and are fetched only when someone in the business opens them. SalesComb sends the messages the business's team writes, the approved templates they choose, and, only if the business switches automatic replies on, short replies written from the business's own details. It follows WhatsApp's rules: free-form replies only within 24 hours of the customer's last message, templates only to people who messaged the business or agreed to hear from it, no further templates after someone opts out (for example by writing STOP), and a person in the business takes over when a customer asks for one. When automatic replies are on, the conversation is sent to the AI model described above to write the reply. Conversations also count toward the business's own demand insights and customer records in SalesComb. Disconnecting WhatsApp stops Meta's webhooks for the account and deletes its conversations from SalesComb.

Sharing and external clients

Cloudflare provides hosting and database infrastructure. Google provides sign-in, and messages sent to our Gmail contact are processed by Google. Connected platforms receive the requests necessary to perform the actions you authorize. These providers also process information under their own terms and privacy policies.

If you authorize an external MCP client, such as ChatGPT, that client can request information allowed by its granted scopes. Tool responses may include business and connected-service records, including personal data. Review the client's privacy terms before authorizing access. You can revoke its SalesComb grant in MCP access settings. Publication of a business policy makes that policy public.

We do not sell personal information or use connected-service data for targeted advertising or to train general-purpose AI models. Information may be disclosed where necessary to comply with applicable law or protect against security threats. Support access is limited to what is necessary for the request, security or legal obligation.

Google data

Google sign-in uses your name, email address and profile image only for account identity and access. Each Google service below is connected separately, only when a workspace administrator chooses to connect it and approves Google's consent screen. Sign-in alone grants none of them.

• Google Search Console (webmasters): reads search queries, clicks, impressions, pages and sitemaps for your verified sites, and submits your sitemap so Google recrawls changed pages.
• Google Analytics (analytics.readonly): reads visits, traffic sources and conversions to measure your goal. Read only.
• Google Ads (adwords): reads campaign performance and spend, and creates, pauses and edits your Search campaigns, keywords, ads and budgets when you or your mandate approve, within the budget you set.
• Google Merchant Center (content): reads your product listings and their approval status.
• Google Business Profile (business.manage): reads your locations, reviews, posts and performance, and posts review replies, profile updates and posts you or your mandate approve.
• Google Calendar (calendar list, free/busy, events): checks availability and creates or changes the booking events you request.
• Google Tag Manager (read-only): reads your containers and tags to check what is installed on your website.
• YouTube (youtube.readonly, youtube.upload): reads your channels and their statistics, and uploads videos you supply with the visibility you choose.
• Gmail (gmail.send): sends the email campaigns and messages you approve from the Gmail address you connect. SalesComb cannot read, change or delete the mail in your mailbox. It keeps a record of what it sent (recipient, subject and time) so you can review it, and deletes these records when you disconnect Gmail.
• Google Contacts (contacts.readonly): reads the names, email addresses, phone numbers and companies of your contacts so each one joins the matching customer in SalesComb. Contacts without an email address or phone number are not stored, and a contact on its own is never shown as a customer. Read only: SalesComb never changes or deletes your contacts. The copies are updated as your contacts change and deleted when you disconnect Google Contacts.

SalesComb's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Google user data is used only to provide and improve the features you can see in SalesComb for your own business; it is not sold, not used for advertising, not used to train general-purpose AI models, and not read by people except with your permission, for security, or to comply with the law. It is transferred to others only as needed to provide those features (for example to an AI assistant you authorize through MCP), for security, or as required by law. You can disconnect any Google service in Connections and revoke SalesComb at myaccount.google.com/permissions.

Storage, security and cookies

SalesComb uses HTTPS, encrypted stored connector credentials, hashed session and MCP tokens, and business-scoped access controls. No system can guarantee complete security. Service providers may process information outside your country.

The application uses necessary cookies for sign-in, sessions and authorization. Google sign-in may use Google's own technologies. These public legal pages do not load sign-in scripts, analytics or advertising trackers.

Retention and your choices

Workspace records remain available while the workspace is in use or until removed through an applicable feature or a verified deletion request. Disconnecting a provider stops SalesComb access but does not by itself erase all previously imported records or revoke credentials at the provider. We may retain limited information required for security, legal obligations or resolving disputes. Backup copies may remain until the hosting provider's retention period ends.

You can edit business details, revoke sessions and MCP access, and disconnect integrations. Workspace administrators can export business information. To request access, correction, deletion, or raise a privacy concern, email [email protected]. We verify your authority before releasing or deleting information. See our data deletion instructions; account deletion is currently handled manually.

If your information belongs to a business using SalesComb, contact that business or tell us which business is involved so we can route the request. Rights and available complaint procedures depend on applicable law.

Children and policy changes

SalesComb is a business service, not a service directed to children. Contact us if you believe a child has supplied personal information. Updates will appear on this page with a revised date. Material changes to data use will require appropriate notice and consent where required.