Privacy Policy

SalesFractal ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our CRM software and services (the "Service"). This policy complies with applicable U.S. federal and state privacy laws, including but not limited to the California Consumer Privacy Act (CCPA), Virginia Consumer Data Protection Act (VCDPA), and other relevant regulations.

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide when using the Service:

• Account Information: Name, email address, phone number, company name, job title
• Business Data: Customer information, vendor details, sales data, invoices, estimates, work orders, and other CRM-related data
• Communication Data: Messages, support requests, feedback, and correspondence with us
• Payment Information: Billing address and payment card details (processed securely through third-party payment processors)
• Integration Data: Information from third-party services you connect, such as QuickBooks Online

1.2 Automatically Collected Information

We automatically collect certain information when you access the Service:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, time spent, click patterns, session duration
• Location Data: General geographic location based on IP address
• Cookies and Tracking: We use cookies, web beacons, and similar technologies (see Section 8)

1.3 Information from Third Parties

We may receive information about you from:

• Third-party services you integrate with the Service (e.g., QuickBooks Online)
• Business partners and resellers
• Publicly available sources
• Other users who provide your information (e.g., when they share access with you)

2. How We Use Your Information

We use the collected information for the following purposes:

• Service Provision: To operate, maintain, and provide the Service features
• Account Management: To create and manage your account, authenticate users, and provide customer support
• Communication: To send transactional emails, service updates, security alerts, and administrative messages
• Improvement: To analyze usage patterns, improve features, and develop new functionality
• Security: To detect, prevent, and address fraud, security issues, and technical problems
• Legal Compliance: To comply with legal obligations, enforce our terms, and protect rights
• Marketing: With your consent, to send promotional communications (you may opt-out at any time)
• Integration: To facilitate connections with third-party services you authorize

3. Legal Bases for Processing (GDPR Compliance)

If you are in the European Economic Area, we process your personal data based on:

• Contract Performance: Processing necessary to provide the Service
• Legitimate Interests: Our legitimate business interests in operating and improving the Service
• Consent: Your explicit consent for specific processing activities
• Legal Obligations: Compliance with applicable laws and regulations

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party vendors who perform services on our behalf:

• Cloud hosting providers (data storage and computing)
• Email service providers (transactional and marketing emails)
• Payment processors (secure payment handling)
• Analytics providers (usage analysis and reporting)
• Customer support tools

4.2 Third-Party Integrations

When you connect third-party services (e.g., QuickBooks Online), we share necessary data to enable the integration. These services are governed by their own privacy policies.

4.3 Business Transfers

If we are involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change.

4.4 Legal Requirements

We may disclose information if required by law, court order, subpoena, or to:

• Comply with legal processes
• Enforce our agreements and policies
• Protect our rights, property, or safety, or that of others
• Investigate fraud or security issues

4.5 With Your Consent

We may share information with other parties when you explicitly consent or direct us to do so.

5. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this policy. Specific retention periods depend on:

• The nature and sensitivity of the information
• Legal, regulatory, or contractual obligations
• The purposes for which we collected the information
• Whether we need the information to defend legal claims

When information is no longer needed, we will securely delete or anonymize it. You may request deletion of your data at any time (see Section 9).

6. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data in transit is encrypted using TLS/SSL; data at rest is encrypted using AES-256
• Access Controls: Role-based access controls and authentication requirements
• Infrastructure Security: Secure hosting with regular security audits and monitoring
• Security Testing: Regular vulnerability assessments and penetration testing
• Incident Response: Procedures for detecting and responding to security incidents
• Employee Training: Security awareness training for all personnel

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by regulatory authorities
• Privacy Shield certification (where applicable)
• Adequacy decisions by relevant data protection authorities

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for the Service to function (authentication, security)
• Performance Cookies: Analyze usage and improve performance
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Understand how users interact with the Service

You can control cookies through your browser settings. Disabling certain cookies may limit functionality.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

9.1 Access and Portability

You have the right to access and receive a copy of your personal data in a portable format.

9.2 Correction

You can correct inaccurate or incomplete personal information through your account settings.

9.3 Deletion

You can request deletion of your personal information, subject to certain exceptions (e.g., legal obligations, fraud prevention).

9.4 Opt-Out of Marketing

You can unsubscribe from marketing emails using the link in each email or by contacting us.

9.5 Restrict or Object

You may restrict or object to certain processing of your personal information.

9.6 Withdraw Consent

Where processing is based on consent, you may withdraw consent at any time.

9.7 Lodge a Complaint

You have the right to lodge a complaint with a data protection authority.

To exercise your rights, contact us at hello@salesfractal.com. We will respond within 30 days (or as required by law).

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the personal data we collect, use, and disclose
• Right to Delete: You can request deletion of your personal information
• Right to Opt-Out: We do not sell personal information. If we did, you could opt-out
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, email us at hello@salesfractal.com with "California Privacy Rights" in the subject line.

11. Children's Privacy

The Service is not intended for children under 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will delete it promptly. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending an email notification to your registered email address
• Displaying a prominent notice within the Service

Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

13. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature. Our Service does not currently respond to DNT signals. If we adopt a DNT policy in the future, we will update this Privacy Policy accordingly.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: