# Privacy Policy | SalesMix > How SalesMix collects, uses and protects personal data, our controller and processor roles, sub-processors, retention, and how to exercise your privacy rights. URL: https://salesmix.com/privacy Last updated: 2026-11-03 # Privacy policy: How we handle your data. **In short** We collect what we need to run SalesMix, bill you and support you. We never sell personal data. Lead data you bring into SalesMix belongs to you, and we only process it on your instructions. You can export or delete your data at any time by emailing [hello@salesmix.com](mailto:hello@salesmix.com). Last updated November 3, 2026 ## Who we are SalesMix provides cloud software that automates LinkedIn outreach through LinkedIn accounts our customers connect. This policy explains how SalesMix (“SalesMix”, “we”, “us”) handles personal data when you visit salesmix.com, use the app at app.salesmix.com, use our API or MCP server, or contact us. If you have any questions, email [hello@salesmix.com](mailto:hello@salesmix.com). SalesMix is not affiliated with, endorsed by, or sponsored by LinkedIn. ## Our two roles: controller and processor Data protection law treats us differently depending on whose data it is. - **We are the controller** for data about our customers and website visitors: your account details, billing information, support messages, and website usage. We decide why and how this data is used, and this policy covers it. - **We are the processor** for data our customers bring into SalesMix to run their outreach: leads, prospect profiles, messages, conversations and campaign data (“Customer Data”). Our customer is the controller of that data. We process it only to provide the service and on our customer’s instructions, under our [Terms of Service](https://salesmix.com/terms). If you are a person whose details appear in a SalesMix customer’s campaign and you want to exercise your rights, please contact that customer directly. If you contact us instead, we will pass your request to the relevant customer and help them respond. ## What we collect - **Account data:** your name, email address, company name, password (stored in hashed form), and team members you invite. - **Billing data:** billing name and address, plan, and payment history. Card details are collected and stored by our payment processor. We do not store full card numbers. - **Connected account data:** information needed to connect and operate the LinkedIn accounts you add, such as the account name, profile details and session or connection details. - **Customer Data:** leads, contact details, profile information, messages, replies and campaign data that you upload, import, or generate through the service. - **Usage and technical data:** log data such as IP address, browser type, device information, pages and features used, API and MCP requests, and error reports. - **Communications:** emails and messages you send us, including support requests and founding plan applications. ## How we use it - To provide, operate and maintain SalesMix, including running your campaigns and generating AI drafts you request. - To create and manage your account and verify your identity. - To process payments, send invoices and manage subscriptions and trials. - To provide support and respond to your messages. - To keep the service secure, prevent fraud and abuse, and enforce our [Terms](https://salesmix.com/terms) and [Fair Use Policy](https://salesmix.com/fair-use). - To improve and fix the product, using usage and technical data. - To send service messages, such as billing notices, security alerts and changes to our terms. We only send marketing emails where the law allows, and you can unsubscribe at any time. - To comply with legal obligations. We do not sell personal data, and we do not use Customer Data to train AI models. ## Legal bases (GDPR and UK GDPR) Where the GDPR or UK GDPR applies, we rely on these legal bases for data we control: - **Contract:** to provide the service you signed up for, manage your account and process payments. - **Legitimate interests:** to secure and improve the service, prevent abuse, provide support, and communicate with business customers about SalesMix. We balance these interests against your rights. - **Legal obligation:** to keep tax and accounting records and respond to lawful requests. - **Consent:** where we ask for it, for example for optional marketing emails or non-essential cookies. You can withdraw consent at any time. For Customer Data, our customer is responsible for having a valid legal basis for collecting and using that data, including for outreach on LinkedIn. ## Who we share data with We share personal data only with service providers (sub-processors) who help us run SalesMix, and only as needed for them to do their job. They are bound by contracts that require them to protect the data. The categories are: - **Cloud hosting and databases:** Railway (railway.com), which hosts our application and data in the United States. - **Content delivery and security:** Cloudflare, which serves our website and protects it from attacks. - **Payment processing:** a third-party payment processor that handles card payments and subscriptions. - **AI providers:** providers of AI models that generate message drafts you request. They process the content needed for each draft. - **Email and communication tools:** services we use to send transactional emails and handle support. We may also disclose data if required by law, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of assets, in which case we will tell you before your data becomes subject to a different privacy policy. A current list of sub-processors is available on request at [hello@salesmix.com](mailto:hello@salesmix.com). ## International transfers SalesMix is hosted in the United States. If you are in the European Economic Area, the United Kingdom or Switzerland, your data will be transferred to and processed in the United States and possibly other countries where our service providers operate. Where required, we protect these transfers with appropriate safeguards, such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum, or an adequacy mechanism such as the EU-U.S. Data Privacy Framework where a provider is certified. ## How long we keep data - **Account and Customer Data:** kept while your account is active. After you close your account, you can export your data, and on request we delete it within 30 days, except where we must keep it by law. - **Billing records:** kept for as long as tax and accounting laws require, typically up to 7 years. - **Logs and technical data:** kept for a limited period for security and troubleshooting, then deleted or anonymized. - **Backups:** deleted data may remain in encrypted backups for a short period until those backups are overwritten in the normal cycle. ## How we protect data We use reasonable technical and organizational measures to protect personal data, including encryption in transit (TLS), access controls limited to staff who need access, hashed passwords, and infrastructure run by established providers. No system is perfectly secure, so we cannot guarantee absolute security. If we become aware of a data breach that affects your personal data, we will notify you and the relevant authorities as the law requires. ## Your rights Depending on where you live, you may have the right to: - Access the personal data we hold about you and get a copy. - Correct inaccurate data. - Delete your data. - Restrict or object to certain processing, including direct marketing. - Receive your data in a portable format. You can also export your data yourself through the app and API. - Withdraw consent where we rely on it. - Complain to your local data protection authority. In the UK, that is the Information Commissioner’s Office. **California residents (CCPA/CPRA):** you have the right to know what personal information we collect, use and disclose, to request deletion or correction, and to not be discriminated against for exercising your rights. We do not sell or share personal information for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics about you. **How to exercise your rights:** email [hello@salesmix.com](mailto:hello@salesmix.com). We may need to verify your identity before acting. We respond within one month, or within the time the law requires. You can use an authorized agent where the law allows. If your request is about Customer Data held by one of our customers, we will refer it to that customer. ## Cookies The SalesMix marketing site (salesmix.com) uses Google Analytics 4 to understand which pages and features people find useful. In the EU, EEA, UK and Switzerland, analytics cookies are only set after you click Accept in the cookie banner, and you can change your choice by clearing your browser storage for salesmix.com. We do not use advertising cookies on the marketing site. The app at app.salesmix.com uses strictly necessary cookies to keep you signed in and secure. Cloudflare may set security cookies to protect the site. Google acts as our processor for analytics; see Google’s privacy policy for how it handles data. ## Children SalesMix is a business tool and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it. ## Changes to this policy We may update this policy from time to time. We will change the “last updated” date above, and if the changes are material we will notify customers by email or in the app before they take effect. ## Contact us For any privacy question or request, email [hello@salesmix.com](mailto:hello@salesmix.com). ## Related policies [Terms of Service The agreement that covers your use of SalesMix.](https://salesmix.com/terms)[Cancellation and refunds How trials, cancellations and refunds work.](https://salesmix.com/refund-policy)[Fair use policy What unlimited LinkedIn accounts means.](https://salesmix.com/fair-use)