1. Introduction
SalesLyt ("SalesLyt," "we," "us," or "our") operates a business-to-business Software-as-a-Service Customer Relationship Management platform accessible at saleslyt.com, including core CRM record management, AI-powered features (conversational copilot, lead/deal scoring, pipeline visualization), and geo-tagged field visit logging (the "Service"). This Privacy Policy describes how we collect, use, store, share, and protect personal data in connection with the Service, in accordance with the Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable rules issued thereunder. By using the Service, you consent to the practices described in this Policy.
2. Definitions
"Data Principal" means the individual to whom personal data relates. "Data Fiduciary" means SalesLyt, which determines the purpose and means of processing personal data. "Personal Data" means any data about an individual who is identifiable by or in relation to such data. "Customer" means the business entity that subscribes to the Service. "End User" means an individual authorized by a Customer to access the Service, such as a sales representative or manager.
3. Personal Data We Collect
We collect account and profile data (name, work email, phone number, job title, employer); authentication data (login credentials, single sign-on identifiers); CRM record data entered by Customers, including contact, lead, and deal information relating to third parties; geo-location data captured during visit check-ins, including latitude/longitude, timestamp, and address resolved from device GPS; device and usage data (IP address, browser type, device identifiers, log data, feature interaction data); communications data (support tickets, in-app messages, chatbot conversation history); and payment and billing data processed via our payment partners.
4. Sources of Personal Data
We collect personal data directly from Data Principals during account creation and use of the Service; from Customers who input contact and lead information into the CRM on behalf of their own customers and prospects; automatically through the Service via cookies, SDKs, and device sensors (including location services); and from integrated third-party tools that Customers choose to connect, such as email, calendar, and telephony providers.
5. Purpose and Legal Basis for Processing
We process personal data to provide, maintain, and improve core CRM functionality (creating, reading, updating, and deleting records); to power AI-native features, including generating chatbot responses, computing lead and deal scores, and rendering pipeline visualizations; to record and display geo-tagged visit logs for field sales activity tracking; to authenticate users and secure accounts; to provide customer support; to send service-related communications; to detect fraud and prevent misuse; and to comply with legal obligations. Processing is carried out on the basis of consent obtained at signup and through in-product consent notices, and, where applicable, for the performance of the contract between SalesLyt and the Customer.
6. Consent and Consent Manager
Where consent is the basis for processing, we will provide a clear, itemized notice describing the personal data to be collected and the purpose of processing, in English and, where feasible, in other languages specified under the DPDP Act. Data Principals may give, refuse, or withdraw consent at any time through account settings or by contacting our Grievance Officer. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal, and may result in reduced or discontinued access to certain features, including geo-tagging and AI-powered functionality.
7. Use of AI-Powered Features
Our conversational copilot, lead and deal scoring engine, and related AI functionality process CRM record data, usage patterns, and, where applicable, conversation inputs to generate suggestions, summaries, scores, and recommendations. Outputs are generated using automated processing and may involve trusted third-party AI model providers acting as our processors under contractual data protection obligations. AI-generated outputs are provided as decision-support and are not a substitute for independent business judgment. Personal data submitted to AI features is not used to train third-party foundation models unless a Customer has expressly opted in.
8. Geo-Tagging and Location Data
Location data is collected only when an End User actively checks in to a visit or enables location services within the Service, and is used to log field visit activity, verify visit authenticity, and generate location-based reporting for the End User's employer (the Customer). End Users may disable location permissions through their device settings at any time, which may limit or disable geo-tagging functionality. Location data is retained in accordance with Section 11 and is accessible to the Customer administrator who manages the End User's account.
9. Disclosure and Sharing of Personal Data
We share personal data with the Customer that administers the End User's account; with sub-processors who provide hosting, storage, analytics, communications, payment processing, and AI model inference services, under contractual confidentiality and data protection obligations; with professional advisors and auditors; and with government or regulatory authorities where required by law, court order, or to protect the rights, safety, or property of SalesLyt, our users, or the public. We do not sell personal data.
10. Cross-Border Data Transfer
Personal data may be stored or processed on servers located outside India through our hosting and sub-processor infrastructure. Where such transfers occur, we implement appropriate contractual and technical safeguards consistent with the DPDP Act and any restrictions notified by the Central Government from time to time.
11. Data Retention
We retain personal data for as long as necessary to provide the Service, fulfill the purposes described in this Policy, and comply with legal, accounting, or reporting obligations. CRM record data and geo-tagged visit logs are retained for the duration of the Customer's subscription and for a limited period thereafter for backup and legal purposes, after which they are deleted or anonymized, unless a longer retention period is required by law.
12. Data Security
We implement technical and organizational measures appropriate to the nature of the personal data processed, including encryption in transit and at rest, access controls, network segmentation, logging and monitoring, and periodic security assessments, to protect personal data against unauthorized access, loss, misuse, or alteration.
13. Rights of Data Principals
Subject to the DPDP Act, Data Principals may request a summary of personal data being processed and the processing activities undertaken; request correction, completion, updating, or erasure of personal data; nominate another individual to exercise these rights in the event of death or incapacity; withdraw consent at any time; and file a grievance regarding processing of their personal data. Requests may be submitted through account settings or by contacting the Grievance Officer identified below, and will be addressed within the timelines prescribed under applicable law.
14. Grievance Redressal
Any Data Principal with a grievance regarding the processing of their personal data may contact our Grievance Officer at the details published on saleslyt.com/legal. We will acknowledge and respond to grievances within the timeframe required under the DPDP Act. If unresolved, Data Principals may escalate the grievance to the Data Protection Board of India.
15. Children's Data
The Service is intended for business use by working professionals and is not directed at individuals under the age of 18. We do not knowingly collect personal data of children as defined under the DPDP Act. If we become aware that we have inadvertently collected such data, we will take steps to delete it promptly.
16. Cookies and Tracking Technologies
We use cookies and similar technologies to authenticate sessions, remember preferences, and analyze Service usage. Cookie preferences can be managed through browser settings and, where available, our in-product cookie consent tool.
17. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be notified to Customers and, where required, to Data Principals through the Service or by email, along with the updated effective date.
18. Contact Us
For questions about this Privacy Policy or to exercise your rights, contact us at privacy@saleslyt.com or through the Grievance Officer contact details published on saleslyt.com/legal.
