Privacy Policy

1 Information We Collect

We collect information you provide directly to us, as well as information generated through your use of the Service.

Account information:

• Organisation name, subdomain, and industry
• Admin name, email address, and hashed password
• Billing information (processed securely through Stripe — we do not store card numbers)

Usage data (within your tenant):

• Salesperson profiles and contact information
• Client and prospect company data you add to the platform
• Visit plans, visit logs, and associated notes
• Opportunities, revenue records, and pipeline data
• KPI targets and performance data

Technical data:

• IP addresses and browser user-agent strings (logged for security purposes)
• Login timestamps and session identifiers
• Server-side audit logs of create, update, and delete actions

2 How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service
• Process payments and manage subscriptions
• Send transactional emails (visit reminders, password resets, billing receipts)
• Detect and prevent fraud, abuse, and security incidents
• Respond to support requests and communicate with you about the Service
• Comply with legal obligations

We do not use your business data (clients, visits, opportunities) for any purpose other than delivering the Service to you.

3 Data Isolation & Security

Every organisation that registers on SalesTaskManager gets a dedicated, isolated database. Your data is never stored in a shared table alongside another organisation's data.

Security measures we employ include:

• Database credentials encrypted at rest using AES-256-GCM
• All data transmitted over HTTPS/TLS
• Passwords stored using bcrypt hashing — never in plain text
• Per-action audit logs for all data modifications
• Role-based access control limiting what each user can see

While we implement strong security practices, no system is 100% immune to attack. We encourage you to use strong passwords and report any suspected security issues to security@salestaskmanager.com.

4 Data Sharing

We do not sell, rent, or trade your personal information to third parties. We may share data in the following limited circumstances:

• Service providers: We use Stripe for payment processing and may use email delivery services (e.g., SendGrid). These providers only receive the data necessary to perform their function.
• Legal compliance: We may disclose information if required by law, court order, or governmental authority.
• Business transfers: If SalesTaskManager is acquired or merges with another company, your data may be transferred as part of that transaction. You will be notified before any such transfer.

5 Cookies & Tracking

We use cookies only for essential Service functionality:

• Session cookie: Keeps you logged in during your browser session. Deleted when you close your browser or log out.
• CSRF token: Protects against cross-site request forgery attacks.

We do not use third-party analytics cookies, advertising cookies, or any tracking pixels on the Service. The public landing pages may load Font Awesome icons from a CDN, which may set its own cookies subject to its own privacy policy.

6 Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. When you cancel your account:

• You may request a full data export within 30 days of cancellation
• After 30 days, your tenant database will be scheduled for deletion
• Master account records (billing history) may be retained for up to 7 years for legal and tax compliance

7 Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Portability: Request your data in a machine-readable format
• Objection: Object to certain uses of your data

To exercise any of these rights, contact us at privacy@salestaskmanager.com. We will respond within 30 days.

8 Children's Privacy

SalesTaskManager is a business productivity tool intended for use by adults in a professional capacity. We do not knowingly collect personal information from anyone under 16 years of age. If you believe a minor has provided us with personal information, please contact us immediately.

9 Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by displaying a prominent notice in the Service at least 14 days before the changes take effect. The "last updated" date at the top of this page reflects the most recent revision.