Privacy Policy

1. Data We Collect

We collect the following types of information:

• Account Information: Name, email address, organization name, and role when you create an account.
• Call Data: Audio recordings, transcripts, and metadata of sales calls you upload to the Service.
• Usage Data: Information about how you interact with the Service, including features used, pages viewed, and actions taken.
• Payment Data: Billing information processed securely through Stripe. We do not store credit card numbers.
• Integration Data: Credentials and tokens for connected third-party services such as Zoom, Slack, Zapier, and developer API integrations.

2. How We Use Your Data

We use your data to:

• Provide and operate the Service, including call analysis, scoring, and coaching.
• Process AI-powered transcription, scoring, and feedback generation.
• Improve our AI models and algorithms (using aggregated, anonymized data only).
• Send you service-related notifications and updates.
• Process payments and manage your subscription.

3. Data Sharing

We do not sell your data. We share data only with:

• Service Providers: Cloud infrastructure (AWS), AI processing (OpenAI), transcription (Deepgram), payments (Stripe).
• Legal Requirements: When required by law, regulation, or legal process.
• Business Transfers: In the event of a merger, acquisition, or sale of assets.

All service providers are bound by data processing agreements. Your call data is never shared between organizations.

4. Data Retention

We retain your data for as long as your account is active. After account deletion, we retain data for 30 days to allow recovery, then permanently delete it. Aggregated, anonymized analytics data may be retained indefinitely.

5. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your data (“right to be forgotten”).
• Portability: Request your data in a machine-readable format.
• Objection: Object to processing of your data for certain purposes.
• Restriction: Request restriction of processing in certain circumstances.

To exercise these rights, contact us at privacy@clashtor.io.

6. Security

We implement industry-standard security measures including:

• Encryption in transit (TLS 1.3) and at rest (AES-256).
• Role-based access controls and multi-tenant data isolation.
• Regular security audits and vulnerability assessments.
• Secure credential storage with encryption.

7. Cookies

We use essential cookies to maintain your session and remember your preferences. We do not use third-party tracking cookies. Analytics data is collected server-side without cookies.

8. Contact

For privacy-related inquiries, contact our Data Protection Officer at privacy@clashtor.io.