Privacy Policy

What we collect

If you use the app:

• Your account: name, email, company and a hashed password.
• What you set up: tone guides, campaigns and settings.
• The email replies that flow in through the tools you connect.
• Billing details. Stripe handles payments; we never see your full card number.

If you visit this website:

• Website analytics: pages viewed, the page you landed on, referring site, UTM tags, approximate location (country, region and city, derived from your IP address by our hosting provider; without your consent the IP address itself is not stored), browser/device category, time on page, scroll depth, and clicks on buttons such as "Start free trial" or a link to our docs or calendar.
• A random session id for the current tab. Only if you click "Accept analytics": a random visitor id that stays in your browser, so we can see which visit led to a signup, and your IP address plus the name of the network it belongs to (for example your employer, a university or an internet provider). See Cookies and analytics.
• What you type in the contact form: name, email, company and message.

Replies from your prospects belong to you. For that data you are in charge and we process it for you. Got an email sent through SalesLobe? Ask the company that sent it. If you ask us, we pass your request on.

Why

• To run the service, support you and bill you.
• To keep the platform safe and stop abuse.
• To answer your messages.
• To see which pages and campaigns work, and, if you accept analytics, which companies visit our website.
• To meet Dutch tax and bookkeeping rules.

We do not sell your data and we do not use it for ads. Our AI runs on Anthropic, and Anthropic does not train on your data. What Corty learns from your edits stays in your own workspace.

Where it's stored

Your workspace data lives in an EU database (Supabase, Stockholm). A few services we use are in the US, such as Anthropic (AI), Vercel (hosting) and Stripe (payments). Website visits are stored in that same EU database. Contact-form messages still sit in a separate Supabase database in the US for now; we plan to move them to the EU after launch. Data that leaves the EU is covered by Standard Contractual Clauses.

The full list is on our sub-processors page.

How long

• Account data: as long as your account is active.
• Campaign replies: kept while your account is active, until you or we delete them. Mail bodies in Inbox Management (Gmail/Outlook via Make) can be set to delete after 7, 30 or 90 days per client.
• After you cancel, nothing is deleted automatically. Ask us and we delete your organization within 30 days. We can send you an export first.
• Website visits: at most 13 months, removed automatically. IP addresses of visitors who accepted analytics: at most 90 days, then erased automatically.
• Billing records: seven years, as Dutch tax law requires.

Your rights

You can see, correct, export or delete your data. You can also object to how we use it or withdraw consent. Email privacy@saleslobe.com. We answer within 30 days, usually much sooner. You can also complain to the Dutch data protection authority (Autoriteit Persoonsgegevens).

Cookies and analytics

• One essential cookie: sl_user, set by the SalesLobe app on saleslobe.com when you're logged in. It holds only your display name and avatar link, so this site can show that you're logged in. No token, no tracking. It expires after 30 days.
• Always, no cookie: a random session id (sl_sid) in your browser's sessionStorage, deleted when you close the tab, plus where this visit came from (landing page, referring site, UTM tags) for that session. We count pages, button clicks such as "Start free trial", approximate location (country, region, city; the IP address is not stored), browser/device category, active time and scroll depth. No third-party analytics or ad trackers without your consent.
• Only after "Accept analytics": a random visitor id (sl_vid) and the source of your first visit (sl_attr) are kept in localStorage. When you click "Start free trial" they travel along in the link, so we can see which pages lead to a signup. Choose "Only essential" and nothing is kept after you close the tab.
• Also only after "Accept analytics": Google Analytics (Google Ireland Ltd.) loads and sets the cookies _ga and _ga_ETCV9KGTYJ to measure visits and pages. Without that choice it isn't loaded at all. If you withdraw consent we stop it and remove those cookies. Google may process this data in the United States under the EU-US Data Privacy Framework.
• Your choice itself is stored in localStorage (sl_consent). Change it any time via Cookie settings, also in the footer.
• Only on devices of our own team: sl_internal in localStorage, so our own visits are not counted in our statistics.
• Partner links (?ref=CODE): without consent the code is not stored. It only stays in the address of the page and is added to the links on that page, so a signup can be credited to the partner who referred you. After "Accept analytics" it is kept with the source of your first visit (sl_attr) and in the attribution cookie sl_aff (the partner code and the date of your first visit through a partner link), on saleslobe.com and app.saleslobe.com for 90 days. If you withdraw consent we remove it.
• Also only after "Accept analytics": we store your IP address with your visit and look it up once at ipapi.is (Berlin, Germany) to see which organisation's network it belongs to, such as a company, a university or an internet provider. That way we see which companies are interested in SalesLobe, and we may contact that company. The IP address is erased after 90 days; the organisation name stays with the visit (at most 13 months). It is never shared with ad networks.
• Instagram links (?fmc=CODE), only on the contact page: if you arrive through a link in an Instagram message, a script from FutureMarketingAI measures whether a request follows. The script only loads on a visit through such a link; otherwise nothing is sent to FutureMarketingAI. It stores nothing on your device and does not read what you fill in on forms; it only notes that the contact form was sent. That measurement is linked to the follower's Instagram id for 90 days. The IP address is only processed by their hosting provider and kept in server logs for 30 days.
  Komt u via een link uit een Instagram-bericht, dan meet een script van FutureMarketingAI of daarna een aanvraag volgt. Het script laadt alleen bij een bezoek via zo'n link; anders gaat er niets naar FutureMarketingAI. Het slaat niets op uw apparaat op en leest niet wat u in formulieren invult; het ziet alleen dat het contactformulier is verstuurd. Die meting wordt 90 dagen gekoppeld aan het Instagram-id van de volger. Het IP-adres wordt alleen door hun hostingpartij verwerkt en 30 dagen in serverlogs bewaard.
• Without that consent your IP address and full browser user-agent are only used briefly in memory, as a one-day keyed hash to block abuse. Neither value is stored.
• Website analytics is stored in our EU database (Supabase, Stockholm) and kept at most 13 months.

The app uses only the login cookies it needs to keep you signed in.

Contact

Privacy questions: privacy@saleslobe.com. Security issues: security@saleslobe.com.
Den Hartogh Solutions · KVK 93891237 · Velp, the Netherlands.

If this policy changes in a way that matters, we tell you first by email or on the site.