1. Introduction
Welcome to SalesLyt, a product operated by ARTIS MULTITECH PRIVATE LIMITED (“SalesLyt”, “Company”, “we”, “us”, or “our”).
SalesLyt operates the website saleslyt.com and the SalesLyt cloud-based customer relationship and sales management platform, together with related applications, features, tools and services (collectively, the “Service”).
This Privacy Policy explains how we collect, use, process, store, safeguard and disclose personal data when you access or use the Service.
SalesLyt is committed to protecting personal data and complying with applicable privacy and data-protection requirements, including, where applicable, India's Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the rules made thereunder.
By accessing or using the Service, you acknowledge the practices described in this Privacy Policy.
2. Definitions
For purposes of this Privacy Policy:
Personal Data means any data about an individual who is identifiable by or in relation to such data, consistent with applicable law.
Customer Data / CRM Data means information uploaded, entered, imported, generated or otherwise processed by an organization or its authorized users through SalesLyt, including information concerning leads, prospects, customers, contacts and business relationships.
Usage Data means technical and usage-related information generated when a person accesses or interacts with the Service.
Data Principal has the meaning assigned under the DPDP Act and generally refers to the individual to whom personal data relates.
Data Fiduciary has the meaning assigned under the DPDP Act and refers to a person who determines the purpose and means of processing personal data.
Data Processor means a person or organization that processes personal data on behalf of a Data Fiduciary.
User means an individual authorized to access or use the Service.
Customer means the business, organization or other entity that subscribes to or uses SalesLyt.
3. Our Role in Processing Personal Data
The role SalesLyt performs depends on the circumstances in which personal data is processed.
When SalesLyt collects personal data directly for purposes such as account administration, subscriptions, billing, customer support, security, product communications or operation of our website, SalesLyt may act as a Data Fiduciary under applicable law.
When a Customer uses SalesLyt to store and manage personal data concerning its own leads, prospects, customers, employees, representatives or other contacts, the Customer generally determines why that information is collected and how it is used.
In those circumstances, SalesLyt processes Customer Data for the purpose of providing the Service and in accordance with the Customer's instructions and applicable contractual and legal requirements.
Customers are responsible for ensuring that they have appropriate authority, notices, consent where required, or another lawful basis applicable to their collection and use of personal data entered into SalesLyt.
4. Information We Collect
We may collect the following categories of information.
4.1 Account and Personal Information
When you register for or use SalesLyt, contact us, request a demonstration, start a trial or subscribe to the Service, we may collect information such as:
Name
Business email address
Phone number
Company or organization name
Job title or designation
Account credentials
Subscription information
Billing and transaction information
Communications with SalesLyt
Other information you voluntarily provide
We collect only information reasonably necessary for providing the applicable Service or other specified purposes.
4.2 Customer and CRM Data
Customers and their authorized users may enter or import information concerning:
Leads
Prospects
Customers
Companies
Contact persons
Opportunities
Sales activities
Calls
Meetings and visits
Follow-ups
Tasks
Notes
Pipeline information
Quotations
Invoices
Payment-related records
Business communications
Other CRM-related information
Customers control the information they choose to enter into SalesLyt and are responsible for ensuring that such information is collected and processed lawfully.
4.3 Usage and Technical Information
When you use the Service, certain technical information may be collected automatically, including:
IP address
Browser type
Device type
Operating system
Login timestamps
Pages and features accessed
Application activity
Error and diagnostic information
Security events
Session information
This information may be used to operate, secure, troubleshoot and improve SalesLyt.
4.4 Information from Integrations
If you connect SalesLyt to a third-party service, we may receive information that you have authorized that third-party service to provide.
Information received through integrations will be processed for purposes associated with providing the requested integration or functionality.
5. How We Use Personal Data
SalesLyt may process personal data for purposes including:
Providing the Service
To create accounts, authenticate users and provide SalesLyt's CRM and sales-management functionality.
CRM Operations
To enable Customers to manage leads, customers, opportunities, sales pipelines, activities, tasks, follow-ups and related business information.
Customer Support
To answer questions, investigate problems and provide technical assistance.
Security
To authenticate users, prevent unauthorized access, detect misuse, investigate security incidents and protect the Service.
Billing and Subscription Management
To administer subscriptions, invoices, payments and related financial records.
Product Improvement
To analyze Service performance, diagnose technical problems and improve functionality and user experience.
Communications
To send service-related communications such as account notifications, password resets, security notices, product updates and important policy changes.
Marketing
Where permitted by applicable law, we may send information about SalesLyt products, services, offers and updates.
Users may opt out of promotional communications through the mechanism provided in those communications or by contacting us.
Legal and Regulatory Requirements
We may process information where reasonably necessary to comply with applicable laws, regulatory requirements, legal processes or lawful government requests.
6. DPDP Notice and Consent
Where consent is required under the DPDP Act, SalesLyt will seek consent through a clear notice explaining the personal data being processed and the specified purpose of processing.
Consent should be free, specific, informed, unconditional and unambiguous, and provided through clear affirmative action.
SalesLyt will seek to process only the personal data necessary for the specified purpose for which consent has been obtained.
Where applicable, the relevant notice will provide a method for Data Principals to:
Withdraw consent;
Exercise applicable rights;
Contact SalesLyt regarding personal-data processing; and
Use the available grievance-redressal mechanism.
Where processing is based on consent, a Data Principal may withdraw that consent in accordance with applicable law.
Withdrawal will not affect the lawfulness of processing carried out before the withdrawal.
Where required, SalesLyt will cease processing personal data following withdrawal of consent unless continued processing is permitted or required under applicable law.
7. Customer Responsibilities
Customers using SalesLyt to process CRM Data are responsible for their own compliance with applicable privacy and data-protection laws.
Customers should ensure that:
Personal data is collected lawfully;
Appropriate privacy notices are provided;
Consent is obtained where required;
Personal data entered into SalesLyt is relevant to legitimate business purposes;
Users are granted appropriate levels of access;
Requests from Data Principals are properly handled;
Personal data is corrected or deleted when required; and
SalesLyt is not used to process personal data unlawfully.
SalesLyt's provision of privacy and security features does not by itself make a Customer compliant with the DPDP Act or any other privacy law.
8. How We Share Information
SalesLyt does not sell personal data.
We may disclose or make information available in the following circumstances.
Service Providers
We may use trusted third-party providers for services such as:
Cloud infrastructure
Database infrastructure
Email delivery
Payment processing
Security
Error monitoring
Analytics
Customer support
AI or automation functionality, where applicable
Service providers are permitted to process information only for the purposes for which their services are engaged, subject to applicable agreements and legal requirements.
Legal Requirements
We may disclose information where required by applicable law, court order, legal process or valid request from a competent government authority.
Corporate Transactions
Information may be transferred as part of a merger, acquisition, restructuring, financing or sale of all or part of the Company's business or assets, subject to applicable legal requirements.
At Your Direction
Information may be shared where a Customer or User deliberately connects an integration, exports information or otherwise instructs SalesLyt to transfer information.
9. Cookies and Similar Technologies
SalesLyt may use cookies, local storage and similar technologies to operate and secure the Service.
These technologies may be used for:
Authentication
Maintaining login sessions
Security
Remembering preferences
Application functionality
Performance measurement
Analytics
Where legally required, appropriate notice or consent mechanisms will be provided for non-essential cookies.
Users can manage cookies through their browser settings, although disabling essential cookies may prevent certain SalesLyt features from functioning correctly.
10. Data Security
SalesLyt takes reasonable technical and organizational measures designed to protect personal data from unauthorized access, disclosure, alteration, loss, misuse or destruction.
Depending on the applicable Service and configuration, safeguards may include:
Encryption of data in transit;
Appropriate encryption or protection of stored data;
Authentication controls;
Role-Based Access Control (RBAC);
Tenant-level data isolation;
Access restrictions;
Security logging;
Audit logging where applicable;
Secure authentication practices;
Infrastructure monitoring;
Backup and recovery measures;
Vulnerability management;
Security incident management; and
Internal access controls.
No electronic system or method of storage is completely secure. Therefore, SalesLyt cannot guarantee absolute security.
Customers are also responsible for protecting their accounts, credentials, devices and user permissions.
11. Personal Data Breach
SalesLyt maintains processes designed to identify, investigate, contain and remediate personal-data breaches.
Where a personal-data breach occurs, SalesLyt will take appropriate measures based on the nature and circumstances of the incident.
Where required under applicable law, SalesLyt will provide appropriate notifications to affected Data Principals and/or relevant authorities, including the Data Protection Board of India, in accordance with applicable DPDP requirements.
SalesLyt may also cooperate with affected Customers to help them meet their own breach-response obligations where SalesLyt processes Customer Data on their behalf.
12. Data Retention
SalesLyt retains personal data only for as long as reasonably necessary for the purposes for which it was collected or processed.
Retention periods may depend on:
The duration of a Customer's subscription;
The nature of the information;
Customer instructions;
Security requirements;
Contractual obligations;
Tax and accounting requirements;
Legal or regulatory requirements; and
The need to establish, exercise or defend legal claims.
When personal data is no longer required, SalesLyt will take appropriate steps to delete, anonymize or otherwise securely dispose of it in accordance with applicable requirements.
Certain information may remain temporarily in backups or security records until the applicable retention cycle expires.
13. Data Principal Rights Under the DPDP Act
Subject to the DPDP Act and other applicable laws, a Data Principal may have rights concerning their personal data.
These may include:
Right to Access Information About Personal Data
A Data Principal may request information concerning the processing of their personal data in accordance with applicable law.
Right to Correction and Updating
A Data Principal may request correction of inaccurate or misleading personal data and completion or updating of incomplete personal data.
Right to Erasure
A Data Principal may request erasure of personal data in circumstances provided under applicable law.
SalesLyt may retain certain information where retention is required or permitted by law.
Right to Withdraw Consent
Where processing is based on consent, the Data Principal may withdraw consent.
SalesLyt will provide an appropriate mechanism for withdrawal where applicable.
Right to Grievance Redressal
A Data Principal may raise a grievance regarding SalesLyt's processing of their personal data.
Right to Nominate
Where applicable under the DPDP Act, a Data Principal may nominate another individual to exercise applicable rights in the event of death or incapacity.
14. Exercising Your Privacy Rights
To exercise applicable privacy rights, Data Principals may contact SalesLyt using the contact details provided in this Privacy Policy or through privacy controls made available within the Service.
We may need to verify the identity of the person making a request before providing information, correcting records or deleting personal data.
Where personal data is controlled by a SalesLyt Customer, individuals may need to submit their request directly to that Customer.
SalesLyt will reasonably assist Customers with such requests where required by applicable law and contractual arrangements.
15. Grievance Redressal
If you have concerns regarding how SalesLyt processes your personal data, you may contact our designated privacy/grievance contact.
Privacy / Grievance Contact
Name: Ayush Basak
Email: grivance@saleslyt.com
SalesLyt will review privacy grievances and respond in accordance with applicable requirements.
Where a Data Principal has exhausted the applicable grievance-redressal mechanism and remains dissatisfied, they may exercise remedies available under applicable law, including approaching the Data Protection Board of India where the law permits.
16. Children's Privacy
SalesLyt is a business-focused CRM and sales-management platform and is not intended to be used by children.
We do not knowingly seek to collect personal data directly from children through ordinary use of the Service.
Where SalesLyt is required to process personal data relating to a child and the DPDP Act applies, appropriate measures, including verifiable consent of the parent or lawful guardian where required, will be implemented.
SalesLyt will not knowingly undertake processing of children's personal data in a manner prohibited by applicable law.
If you believe that children's personal data has been improperly provided to SalesLyt, please contact us.
17. Cross-Border Processing and Data Transfers
SalesLyt may use cloud infrastructure, service providers or subprocessors located in India or other jurisdictions.
Where personal data is transferred or processed outside India, SalesLyt will handle such transfers in accordance with applicable Indian law and any restrictions or requirements imposed by the Central Government.
Customers should review their own regulatory or contractual data-location requirements before using the Service.
18. AI and Automated Features
SalesLyt may provide artificial-intelligence-assisted or automated functionality designed to improve sales management, prioritization, analytics, recommendations, workflows or other aspects of the Service.
Where personal data is processed through such functionality, SalesLyt will apply the principles and safeguards described in this Privacy Policy and applicable law.
SalesLyt will not intentionally use Customer CRM Data for unrelated purposes contrary to Customer instructions or applicable contractual commitments.
Customers remain responsible for reviewing AI-generated recommendations and making appropriate business decisions.
19. Third-Party Integrations
SalesLyt may allow Customers to connect third-party applications and services.
When a Customer enables an integration, certain information may be transferred between SalesLyt and that third party at the Customer's direction.
Third-party services operate under their own privacy policies and terms.
SalesLyt is not responsible for the independent privacy practices of third-party services.
Customers should review the privacy practices of third-party providers before enabling an integration.
20. Data Export and Account Deletion
Subject to applicable account permissions and Service functionality, Customers may be able to export CRM information maintained within SalesLyt.
Customers may also request termination or deletion of their account and associated Customer Data.
Following a valid deletion request, SalesLyt will delete or anonymize applicable personal data in accordance with its retention procedures, except where continued retention is required or permitted by applicable law.
21. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect:
Changes to SalesLyt;
New features or integrations;
Changes in our data-processing practices;
Security requirements;
Regulatory developments; or
Changes in applicable laws.
The latest version will be made available through the SalesLyt website or Service.
Where a change materially affects how personal data is processed, we will provide appropriate notice where required by law.
The “Last Updated” date at the beginning of this Privacy Policy will indicate when the policy was most recently revised.
22. Contact Us
If you have questions about this Privacy Policy, SalesLyt's privacy practices or your personal data, please contact us.
SalesLyt
Operated by ARTIS MULTITECH PRIVATE LIMITED
Website: saleslyt.com
Privacy / Grievance Email: grivance@saleslyt.com
Grievance Officer: Ayush Basak
DPDP Commitment
SalesLyt is committed to implementing privacy, security and data-governance practices designed to support compliance with India's Digital Personal Data Protection Act, 2023 and applicable rules.
We continuously review our privacy and security practices as the regulatory framework evolves and as new requirements become applicable.
