Privacy Policy
SalesBullet.ai is operated by WarpLeads, Inc. ("WarpLeads", "we", "us"). This policy explains what personal data we handle, why, how long we keep it, and the choices and rights you have.
1. Who we are and what this covers
This policy covers four groups of people:
- Customers — people who have a SalesBullet account, and their teammates;
- Visitors — people who visit our website;
- People in our lead database — professionals whose work details our customers can find;
- Our customers' contacts — people our customers import, add to lists, contact or hear from through SalesBullet.
For customers, visitors and our lead database, WarpLeads decides how the data is used — we're the controller. For our customers' contacts, the customer decides and we process the data on its behalf — we're a processor, under our Data Processing Agreement.
2. Customers and visitors: what we collect
- Account data: your email address, your password (stored only as a secure hash), and, if you add them, your name and company; your workspaces, teammates and invitations.
- Billing data: your plan, add-ons, payments and invoices. Paddle, our Merchant of Record, collects your payment details and billing address; we never see or store full card numbers.
- Connected accounts: the email and LinkedIn accounts you connect, with the access needed to send, warm up and read replies for your campaigns. Passwords and access tokens are stored encrypted.
- Your content: the contacts, lists, messages, templates, labels, notes and files you keep in SalesBullet — see sections 5 and 6.
- Usage and device data: IP address, browser and device type, log records and the actions you take in the app.
- Support: what you write to us, and our answers.
When you visit our website we log technical data such as your IP address and browser, to deliver the pages and keep the site secure. We don't use advertising or analytics cookies.
3. Why we use it
| What we do | Legal basis |
|---|---|
| Provide SalesBullet: your account, workspaces, campaigns, connected accounts and support | Our contract with you |
| Bill you, keep invoices and meet tax rules (with Paddle) | Contract; legal obligation |
| Send service emails — a finished export, a failed payment, an account that needs attention | Contract; legitimate interests |
| Keep SalesBullet secure and prevent fraud, spam and abuse | Legitimate interests; legal obligation |
| Understand how SalesBullet is used and fix and improve it | Legitimate interests |
| Tell customers about new features and offers — you can unsubscribe at any time | Legitimate interests, or consent where the law requires it |
| Answer requests from authorities and establish or defend legal claims | Legal obligation; legitimate interests |
We don't sell your personal data, and we don't make decisions about you that have legal or similar effects by automated means alone.
4. People in our lead database
Our lead database holds work-related information about professionals: name, job title, seniority and department, company and its details, work email address, business phone numbers (which can include mobile numbers), location, LinkedIn profile and similar professional details. It comes from licensed business-data providers and from public sources such as company websites and professional profiles. It doesn't hold sensitive data such as health, religion or political views.
We make it available to our customers so they can find and contact people relevant to their business. That is a legitimate interest — ours and our customers' — which we balance against yours by keeping to professional details, by checking that email addresses are valid, and by making it easy to opt out. Customers who contact you decide how to use your details and are responsible for doing it lawfully.
If you're in our database you can ask to see your record, have it corrected, or have it removed and not offered to our customers again — write to support@salesbullet.ai. A record you ask us to remove is kept on a suppression list, so it doesn't come back from our sources.
When a customer looks for the followers of a company's LinkedIn page, a provider collects the followers' public profile details for that customer, and we match them with our lead database. The results stay in that customer's account.
5. Our customers' contacts
For the contacts, messages and replies our customers keep in SalesBullet, the customer is the controller: it decides whom to contact and why. We process that data only on its behalf, to run SalesBullet for it — for example to send its campaigns, check email addresses it asks us to verify, research and personalize leads with AI, and show replies in its MasterInbox.
If you're one of those contacts, please contact the company that wrote to you. If you write to us, we'll pass your request on and help them answer it; if you ask not to be contacted, we can add you to that customer's do-not-contact list.
6. Connected email and LinkedIn accounts
When a customer connects an email account, SalesBullet sends the customer's campaign emails from it and reads its mail folders to find the replies, bounces and auto-replies to those campaigns. It keeps only messages about the customer's campaigns — everything else in the mailbox is never stored. Connected email accounts can also take part in warm-up, which exchanges emails with other accounts in a warm-up network.
We don't track whether emails are opened or links are clicked. For LinkedIn, SalesBullet carries out the actions a customer sets in their campaigns — profile visits, invitations, messages, InMails and likes — and reads the replies.
7. AI features
Our AI features send AI providers only the data each task needs: lead and company details and web research for Automatic Enrichment and Automatic Personalization, the text of a reply for labels and suggested replies, and the script, photo or voice sample for AI avatar videos. The results are kept in the customer's account, and a workspace can switch AI reply labels off. We don't use customers' content or our leads' data to train AI models.
8. Who we share data with
We share personal data only as needed to run SalesBullet, with:
- Teammates in the same workspace, who see its data;
- Our providers ("sub-processors"), which handle data only to provide their part of SalesBullet, under contracts that protect it — listed below;
- Authorities, when the law requires it, or to protect our rights, our customers or the public;
- A buyer or successor, if our business is merged, acquired or sold — this policy would still protect your data;
- Anyone else only with your permission.
| What our providers do | What we send them |
|---|---|
| Cloud hosting, database and file storage | All SalesBullet data |
| Business-data providers (the lead database) | Search filters; LinkedIn profile addresses to match |
| AI model providers (research, personalization, labels, replies, avatars) | The lead and message details each task needs |
| Web research provider | Lead names, companies and websites |
| Email verification provider | Email addresses to check |
| LinkedIn integration provider | Connected LinkedIn accounts, campaign messages and replies |
| Email warm-up network | Connected email accounts taking part in warm-up |
| Email-account provider | The email accounts you buy from us, and their emails |
| Transactional email | Your email address; our emails to you, such as reply notifications |
| Paddle.com (Merchant of Record) | Billing details and payments |
A current list of our named providers and where they process data is available on request.
9. International transfers
SalesBullet's servers and database are hosted in Germany, in the European Union. We and our providers also process data in other countries, including countries outside the EU, EEA, UK and Switzerland. When personal data from those places goes to a country without an adequacy decision, we protect it with safeguards such as the European Commission's Standard Contractual Clauses and the UK's addendum to them.
10. How long we keep data
- Account and workspace data: while your account exists. When you delete your account, we delete or anonymize its data within 30 days, except what the law requires us to keep, such as invoices.
- Contacts, campaigns and messages: until you delete them, or your account.
- Lead research by Automatic Enrichment: 30 days.
- Export files: 30 days.
- Logs: up to 30 days, longer only to investigate a security problem.
- Billing records: as long as tax and accounting law requires.
- Lead database records: while they're relevant and accurate.
- Suppression and do-not-contact lists: as long as needed to keep honoring the request.
11. Your rights
Depending on where you live — for example under the GDPR or UK GDPR — you can ask to access your personal data, correct it, delete it, restrict or object to its use (including for direct marketing, which you can always stop), receive a copy in a portable format, and withdraw consent you gave. You can also complain to your data-protection authority.
If you live in California you can ask to know, correct and delete the personal information we hold about you, and we won't treat you differently for asking. We don't sell personal information, or share it for cross-context behavioral advertising.
Write to support@salesbullet.ai. Customers can also change most of their data in the app. We may ask you to confirm who you are, and we answer within 30 days — longer only where the law allows, and we'll tell you why. If your request is about a customer's contacts, we'll pass it to that customer.
12. Cookies
We use only the cookies SalesBullet needs: to keep you logged in, to protect forms and to remember settings. The app also keeps a few settings in your browser's storage, such as which panels you left open. Paddle sets its own cookies when you open a checkout. We don't use advertising or analytics cookies, so we don't ask for cookie consent.
13. Security
Connections are encrypted with HTTPS, passwords are hashed, and the credentials of connected accounts are stored encrypted. Each workspace's data is kept apart from every other's, and access to our systems is limited to the people who need it. We choose our providers carefully and check that they protect data. No system is perfectly secure, but if a breach affects your personal data, we'll tell you without undue delay and do all we can to limit the harm.
14. Children
SalesBullet is a business service and isn't meant for anyone under 18. We don't knowingly collect children's data.
15. Changes
We'll post changes here with a new date. For important changes we'll tell customers in the app or by email at least 14 days before they take effect.
16. Contact
WarpLeads, Inc. is responsible for SalesBullet.ai. Questions or requests: support@salesbullet.ai.