Privacy policy
Last updated: 31 October 2026
This policy explains what personal data Salefy handles when you use our website and our CRM, and who else handles it for us.
Who we are
Salefy is a sales CRM for small teams, run by [legal entity name and address]. Questions about this policy or your data go to hello@salefycrm.com.
What we collect
- Account details: your name and email address, used to sign you in and to tell your teammates who did what.
- Data you put in Salefy: the contacts, companies, leads, deals, tasks, invoices, emails and files that you or your team enter or upload. We process it to run the service for you.
- Billing details: payments are handled by Stripe. We receive your plan and payment status, not your full card number.
- Error reports: when something breaks, the app can send an error report to Sentry. We configure it not to send IP addresses, cookies or request bodies. A report can still contain technical details such as page addresses and error messages, and in rare cases a record ID.
- Document text: when you upload a PDF, Word or text file, we send its text to OpenAI to write a summary and to make the document searchable. We also send short pieces of CRM text (such as contact and company details) to OpenAI to build search.
- Mailboxes you connect: if you connect your own mailbox, Salefy reads and sends mail through your provider using the credentials you give it. Saved mailbox passwords and API keys are stored encrypted.
The marketing website at this address does not collect personal data on its own.
Who processes your data
We use these services to run Salefy. Each handles your data only to provide its part of the service.
| Service | What it does for us | Where |
|---|---|---|
| Stripe | Takes subscription payments | United States, and other Stripe locations |
| Resend | Sends sign-in codes, invitations and other emails from Salefy | United States |
| DigitalOcean | Hosts the app and database, and stores uploaded files and backups | San Francisco, United States |
| OpenAI | Writes document summaries and builds search | United States |
| Sentry | Receives error reports | United States |
If you choose to sign in with Google or to link Google Calendar, you share data with Google under Google's own terms. Likewise, if you connect a mailbox, your email provider handles that mail under its own terms. These are your choices, not services we engage on your behalf.
How long we keep data
Your data stays while your account is active. Records you delete in Salefy are hidden rather than erased at once, so an admin can restore most of them (documents cannot be restored). We keep daily backups for 30 days, so deleted data can remain in a backup for up to that long. If you ask us to delete your account, we remove your data and it leaves our backups within 30 days.
Cookies
The website sets no tracking cookies and uses no advertising or analytics trackers. The Salefy app sets one sign-in session cookie so that you stay signed in. Your theme choice on the website is kept in your browser's local storage and never sent to us.
Your rights
You can ask us to show you the data we hold about you, correct it, export it or delete it. Account owners can also manage most of this inside the app. Email hello@salefycrm.com and we will reply within 30 days. If you are in the European Economic Area or the United Kingdom, you may also complain to your local data protection authority.
Changes
If we change this policy in a way that matters, we will update the date above and tell account owners by email.