Privacy Policy

Depending on how you use Salesleon, we collect or process different types of information.

Account Information

We may collect:

• Name
• Business name
• Email address
• Phone number
• Password (stored only in hashed form)
• Role and account settings
• Profile information and profile photo, where provided

Business and Store Information

We may collect or process information related to your business and connected stores, including:

• Business and store information
• Product details
• Product variants
• Catalog data
• Pricing information
• Stock and inventory levels
• Order information
• Sales and transaction-related information
• Team member information
• Customer records
• Connected store data

Customer Information and Conversations

If you connect customer communication channels or provide customer data through Salesleon, we may process information such as:

• Customer names
• Phone numbers
• Email addresses
• Delivery information
• Order requests
• Order history
• Support questions
• Customer conversations
• Conversation history
• Other customer information submitted through connected channels

This includes information received from channels such as WhatsApp, Facebook, Instagram, TikTok, website chat, email, or other connected platforms.

You are responsible for ensuring that you have the necessary rights, permissions, notices, consents, or other lawful basis required to collect, provide, and process customer information through Salesleon.

Communications, Files and User Content

We may process content submitted through the platform, including:

• Chat messages
• Customer conversations
• Files uploaded to Salesleon
• Images
• Documents
• Other content submitted by users

Order and Inventory Data

We may collect or process information relating to customer orders and fulfilment, including:

• Product availability
• Product quantities
• Customer details
• Payment method notes
• Delivery details
• Order status
• Order history
• Fulfilment-related information
• Inventory information

Fraud Review and Risk Data

Salesleon may process information or signals used to support fraud review, misuse prevention, and order risk detection. This may include:

• Phone number patterns
• Order history
• Failed order records
• Cash-on-delivery issues
• Address mismatch signals
• Suspicious account or transaction activity
• Other fraud-related or risk indicators available through your connected systems

Integration Data

When you connect Salesleon with third-party services, we may collect or process information necessary to provide the integration, including:

• Access tokens
• Permissions
• Store data
• Communication channel data
• Courier or delivery information
• WooCommerce data
• Payment service information
• Other information required to operate connected services

Google account data (YouTube and Google Drive) is covered separately in "Google User Data" below.

Social Media and Advertising Data

When you connect a Facebook Page, Instagram, TikTok or YouTube account, or a Meta ad account, we may process:

• Posts, captions, images and videos published on the connected accounts, including those you publish or schedule through Salesleon
• Comments on those posts, with the commenter's public name and profile picture, and the replies and moderation actions (such as hiding a comment) taken from Salesleon
• Engagement and insight figures for the connected accounts and their posts, such as reach, views, likes and comments
• For a Meta ad account you choose to connect: the ad account's name and currency, its ads with their campaign and ad set names, the posts behind those ads, and each ad's spend, results, reach and clicks
• For promotions you create in Salesleon: the ad account, daily budget, duration and status of each promotion

Billing Information

When you subscribe, we collect your plan, billing details, and transaction history. Card and wallet payments are processed by our payment providers, or by Apple or Google when you subscribe through their app stores.

Information Collected Automatically

When you use Salesleon, we may automatically collect certain technical, device, usage, and analytics information, including:

• Pages visited
• Features used
• Platform activity
• Login activity
• Device information
• Browser type and browser information
• IP address
• Time zone
• Click activity
• Log information
• Errors
• Performance logs

We may use the information we collect or process to:

• Create and manage user accounts
• Provide, operate, maintain, and improve the Salesleon platform
• Manage your business workspace
• Process products, orders, inventory, and other business information
• Connect and synchronise communication channels and third-party integrations
• Manage customer conversations
• Help AI respond to customer questions
• Provide product information and recommendations
• Collect order information and order details
• Provide AI-powered sales and customer support features
• Support business workflow automation
• Support fraud review and order risk detection
• Detect and prevent fraud, misuse, or unauthorised activity
• Provide analytics, reporting, and team performance information
• Show the performance of your social posts and of the ads in the ad accounts you connect
• Create, pause and resume the post promotions you confirm, in the ad account you choose
• Send the outcome of orders that came from your ads back to Meta, when you turn this on
• Process subscriptions, billing, and payments
• Provide customer support and technical assistance
• Improve platform functionality and user experience
• Maintain platform security
• Monitor platform performance
• Send service updates, billing notices, security messages, product updates, and important account communications
• Respond to support requests
• Meet applicable legal, regulatory, accounting, and compliance requirements
• Enforce our agreements and protect our legal rights

Salesleon may use artificial intelligence to provide or support features such as:

• Customer message responses
• Product question answering
• Product recommendations
• Order information collection
• Order capture
• Conversation summaries
• Sales assistance
• Business workflow support
• Workflow automation

To provide these features, AI systems may process information such as:

• Business data
• Product information
• Customer conversations
• Customer information
• Order details
• Other information relevant to the requested feature

This processing is done by our AI technology providers on our behalf, only to produce the requested feature.

AI-generated information may not always be complete, accurate, or appropriate for every situation. Users remain responsible for reviewing important AI-generated outputs before:

• Confirming customer orders
• Responding to sensitive customer matters
• Taking significant business actions
• Making business, operational, financial, or other important decisions

Salesleon may integrate with third-party platforms and services, including:

• WhatsApp
• Facebook
• Instagram
• TikTok
• YouTube and Google Drive
• WooCommerce
• Email services
• Courier or delivery services
• Payment services
• AI or technology providers
• Other ecommerce, communication, business, or technology tools

When you connect a third-party service, information may be exchanged between Salesleon and that service as necessary to provide the requested functionality.

Your use of third-party services may also be subject to their own privacy policies, terms, permissions, and data-processing practices.

Salesleon is not responsible for how third-party platforms independently collect, process, store, share, or use information outside Salesleon.

Salesleon lets a Merchant connect their own YouTube channel and, optionally, pick files from their own Google Drive. Access is granted by the Merchant through Google's OAuth consent screen, is used only for the features described below, and can be withdrawn at any time.

A. Scopes we request and what each one is used for

• https://www.googleapis.com/auth/youtube.upload: Used solely to upload a video the Merchant composes or schedules in SalesLeon to the channel they connected, together with the title, description, tags, category, visibility, and optional custom thumbnail they entered. Nothing is uploaded without the Merchant's action — an explicit publish, or a post they scheduled themselves.
• https://www.googleapis.com/auth/youtube.readonly: Used to read the connected channel's own identity (channel ID, title, thumbnail) so the Merchant can see which channel a post will go to; to read the processing state and visibility of videos SalesLeon uploaded, so a publish can be reported as succeeded or failed; to read the public view, like and comment counts of the videos the Merchant published through SalesLeon, which we show on those posts in the dashboard feed and social analytics exactly as YouTube reports them; and to read the channel's uploads (titles, descriptions, thumbnails, durations, visibility, and public counts) and the comments on those videos, to show them in the dashboard. This scope is read-only and never modifies the channel. We do not read watch history, subscriptions, private playlists, or any other user's data.
• https://www.googleapis.com/auth/youtube.force-ssl: Used only to reply to, post, hide, hold for review, or remove comments, and to hide a commenter from the channel, on the Merchant's own channel videos, when the Merchant does so in SalesLeon. SalesLeon never posts, replies, hides, or removes anything without the Merchant's action. We do not use it to change videos, playlists, or any other part of the channel.
• https://www.googleapis.com/auth/drive.file: Used only for the individual files a Merchant explicitly selects in the Google Picker, so that a selected image or video can be copied into their SalesLeon media library. It grants no access to the rest of their Drive.

B. What we store

We store the OAuth access and refresh tokens for the connected channel, the channel's public profile information (ID, title, thumbnail, and the feature flags that tell us whether custom thumbnails are available), a record of the videos published through SalesLeon, including their YouTube video ID, publish status, and public view, like and comment counts, and the metadata of the channel's videos (title, description, thumbnail, duration, visibility, and public counts) together with the comments on them (the commenter's public name and picture, the comment text, and its time). Files copied from Google Drive are stored in the Merchant's media library because the Merchant asked for them to be. Tokens are used only to make API calls on the Merchant's behalf and are never shown to other users or shared with other Merchants.

C. Limited Use

SalesLeon's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide and improve the user-facing features described above.
• We do not use Google user data for advertising, and we do not sell it.
• We do not transfer Google user data to third parties except as necessary to provide those features, to comply with applicable law, or as part of a merger or acquisition, in which case we will give notice before the data becomes subject to a different privacy policy.
• We do not allow humans to read Google user data unless we have the Merchant's explicit consent for specific messages, it is necessary for security purposes such as investigating abuse, it is required by law, or the data has been aggregated and anonymised.
• We do not use Google user data to develop, improve, or train generalised artificial-intelligence or machine-learning models. SalesLeon's AI features never receive YouTube or Drive data for training.

D. Retention and revoking access

• Disconnecting in SalesLeon: A Merchant can disconnect a YouTube channel at any time from the store's Channels page. Disconnecting stops all further use of the connection, cancels any posts scheduled for it, revokes SalesLeon's access with Google, and deletes the stored tokens, the stored YouTube statistics, and the synced videos and comments.
• Revoking in your Google Account: A Merchant can revoke SalesLeon's access at any time at myaccount.google.com/permissions. Once revoked, our stored tokens stop working and no further API calls are possible. YouTube statistics, synced videos and comments we hold for that channel are deleted within 30 days.
• Deletion: Stored Google tokens and channel information are deleted when the Merchant's SalesLeon account is deleted, or on request to [email protected]. Videos already uploaded to YouTube belong to the Merchant's channel and can only be removed from YouTube itself.
• Refreshing statistics: While a channel is connected, we refresh its YouTube statistics, videos and comments at least every 7 days, and we delete a video, its statistics or a comment once YouTube no longer returns it.

• Meta (Facebook, Instagram, WhatsApp): We process data in compliance with the Meta Platform Terms and the WhatsApp Business Terms of Service, strictly to facilitate the Merchant's business operations. We do not use WhatsApp or Messenger data to track users across the internet, or for independent profiling or advertising. Merchants are responsible for obtaining the necessary opt-ins from their customers before sending proactive messages through the WhatsApp Business API.
• Meta ad accounts: A Merchant connects an ad account separately from their Page and chooses which ad accounts to connect. We read ads data only from those ad accounts, only to show it to that Merchant, and never to target or profile people. By default the connection is read-only. If the Merchant also allows promoting posts, we create, pause and resume only the promotions the Merchant confirms in Salesleon, and never change campaigns created elsewhere. Disconnecting an ad account deletes its stored access token and stops all further reads.
• Meta Conversions API: When a Merchant turns on conversion tracking for a channel, we send Meta an event when an order from a conversation that started on the Merchant's ad is confirmed, delivered or cancelled. The event goes to the Merchant's own dataset and carries the order value, currency and items, and the identifier Meta itself assigned to that customer on the Merchant's Page or account, or to the ad click. It is built from the saved order, contains no message text, and can be turned off per channel at any time.
• TikTok: Information retrieved through TikTok integrations is handled under the TikTok Developer Terms and used exclusively for order management, customer support, and the publishing features the Merchant requests.

We do not sell your personal information.

We may share information or provide access to information only where reasonably necessary to provide, secure, maintain, support, improve, or legally operate Salesleon. This may include sharing information with:

• Cloud hosting and infrastructure providers
• Security providers
• Analytics and error-monitoring providers
• Customer communication platforms
• Third-party integrations connected by the user
• Meta, when a Merchant turns on conversion tracking: order events for conversations that came from that Merchant's ads, as described in "Compliance with Meta and TikTok Platform Policies"
• AI or technology providers
• Ecommerce platforms
• Courier, delivery, or fulfilment services — for example Pathao, REDX, SteadFast and Paperfly, which receive the customer's name, phone number, and delivery address solely to dispatch and track the order
• Payment providers
• Professional advisors
• Legal authorities
• Regulators or government authorities where required by applicable law
• A buyer or successor, if Salesleon is involved in a merger, acquisition, or sale of assets, in which case we will give notice before your information becomes subject to a different privacy policy

We aim to share only the information reasonably necessary for the relevant service, integration, operational purpose, or legal requirement. Our service providers are bound by confidentiality obligations and may use the information only to provide their services to us.

Our website or services may use cookies and similar technologies to:

• Keep you signed in and maintain sessions
• Improve user experience
• Maintain or remember preferences
• Understand website traffic
• Measure usage
• Support analytics
• Measure marketing performance
• Improve website and platform functionality

You can manage or disable cookies through your browser settings. Some features of the website or platform may not function correctly if certain cookies are disabled.

We take reasonable technical and organisational measures designed to protect information, including encryption in transit, encryption at rest for selected credentials and secrets, and access controls that keep each business's data separate from every other business's. These measures protect information against:

• Unauthorised access
• Loss
• Misuse
• Alteration
• Unauthorised disclosure

However, no internet-based service, electronic storage system, or transmission method can guarantee absolute security.

You are responsible for:

• Keeping your account credentials secure
• Using appropriate passwords
• Protecting access to your devices
• Limiting platform access to trusted team members
• Managing your team members' permissions appropriately

We retain information for as long as reasonably necessary to:

• Provide Salesleon and the requested services
• Maintain user accounts
• Complete business and transaction records
• Support operational and business requirements
• Meet legal, regulatory, accounting, and security requirements
• Resolve disputes
• Prevent fraud or misuse
• Enforce our agreements
• Protect our legal rights

In general, we keep Merchant account data while the account is active. Customer data such as chat logs and order history is kept for as long as the Merchant's settings require, or as the law requires. When an account is deleted, its data is permanently deleted 30 days later, as described in "Account and Data Deletion".

Specific retention periods may vary depending on the type of information, the purpose for which it is processed, technical requirements, and applicable legal obligations.

You generally retain ownership of the business data, customer data, files, content, and other information that you provide to Salesleon, subject to the rights necessary for Salesleon to provide its services.

If you use Salesleon on behalf of a business, you may add, upload, synchronise, or otherwise process information relating to customers and team members. You are responsible for:

• Ensuring that you have the necessary rights and permissions to provide the information to Salesleon
• Establishing an appropriate lawful basis for processing where required
• Informing customers and team members about how their information may be collected, used, shared, and processed through Salesleon
• Providing any notices required by applicable law
• Obtaining consent where consent is legally required
• Ensuring that you only upload, connect, or process information that you are legally permitted to use

Customers of a Merchant who want to access or delete their chat data or order history should contact that Merchant directly, as the Merchant is the data controller. We will assist the Merchant in responding.

Depending on your location and applicable privacy or data protection law, you may have the right to:

• Access personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of certain personal information
• Object to certain types of processing
• Request restriction of certain processing
• Withdraw consent where processing is based on consent
• Request a copy of your information
• Request data portability where applicable

You can also revoke Salesleon's access to your Facebook, Instagram, WhatsApp, or TikTok accounts at any time from that platform's security or app settings, and to your Google account at myaccount.google.com/permissions.

These rights may be subject to exceptions or limitations under applicable law. To exercise your rights, please contact us using the details provided in the Contact Us section below.

You may request deletion of your Salesleon account and its associated data at any time, in any of these ways:

• In the app: go to Account → Delete account and confirm.
• On the web, without the app: visit salesleon.ai/delete-account, enter the email address of your account, and confirm through the link we email you.
• By email: write to [email protected] from the email address of your account.

When you delete your account, it is closed immediately: you are signed out everywhere, sign-in is refused, and your stores go offline. Your account and its data — including stores, products, orders, customer conversations, files, and connected integration tokens — are then permanently deleted after 30 days. Until then, you can contact support to cancel the deletion.

Certain information may need to be retained after deletion where reasonably necessary for:

• Legal requirements
• Accounting obligations, such as invoices, which we keep in anonymised form
• Regulatory requirements
• Security purposes
• Fraud prevention
• Dispute resolution
• Enforcement of agreements
• Other legitimate purposes permitted by law

Deleting the app from your device does not delete your account. Content you already published to third-party platforms, such as a YouTube video, has to be removed on that platform.

We may send users:

• Product updates
• Offers
• Newsletters
• Educational content
• Service announcements
• Other marketing communications

You may unsubscribe from marketing emails at any time using the unsubscribe option provided in those communications or by contacting us.

Even if you unsubscribe from marketing communications, we may still send important non-marketing communications relating to:

• Your account
• Security
• Service availability
• Legal matters
• Support requests
• Important platform updates

Your information may be processed, transferred, or stored in countries other than the country where you or your customers are located, including countries where our infrastructure providers, service providers, processors, or technology partners operate.

Where required by applicable law, we take reasonable steps to provide appropriate protections for information transferred or processed internationally in accordance with applicable privacy and data protection requirements.

Salesleon may provide some or all of its services through a mobile application. The mobile application may collect or process information necessary to provide:

• Account functionality
• Communication features
• Notifications
• Business management features
• File or image functionality
• Other features requested by the user

Depending on the functionality you use, the application may ask for access to device permissions such as:

• Camera and photos: to take or attach product images and files you choose to upload
• Notifications: to alert you to new messages, orders, and account events

Each permission is requested only when you use the feature that needs it, is optional, and can be turned off at any time in your device settings. The app keeps working without it, apart from that feature.

We do not sell information collected through the mobile application, and we do not use it to track you across apps and websites owned by other companies for advertising.

Salesleon is designed and intended for business use and is not directed toward children. Our services are not meant for anyone under the age of 18, and we do not knowingly collect personal information from children under 13, or under the age set by applicable law.

If you believe that a child has provided personal information to Salesleon, please contact us so that we can review the matter and take appropriate action, including deleting the information.

We may update this Privacy Policy from time to time to reflect:

• Changes to Salesleon
• Changes to our data-processing practices
• New integrations or features
• Legal or regulatory requirements
• Security or operational changes

If we make material changes, we may notify users through the website, email, the Salesleon platform, or another appropriate method.

The updated Privacy Policy will include a revised "Last updated" date.

Your continued use of Salesleon after an updated Privacy Policy becomes effective may constitute acceptance of the revised Policy where permitted by applicable law.

If you have questions, concerns, privacy requests, or data-related requests regarding this Privacy Policy or how Salesleon handles information, please contact us:

Salesleon

Email: [email protected]

Contact: +8801643401818

Address: House#32/D/E, 5th Floor, Natore Tower, Road-3, Dhaka 1230, Bangladesh