PRIVACY POLICY
Privacy Policy
1. Purpose and scope
This policy explains what personal data HireSalesAI collects, why we collect it, how long we keep it, and what rights you have. It covers our website and the HireSalesAI AI sales subscription service. Where you are a business customer, the handling of your buyers' personal data is governed primarily by the data-security and confidentiality agreement between us, and this policy sits alongside it.
2. Who we are
ASTRUM AI SOLUTIONS PTE. LTD., a company incorporated in Singapore, is the controller of the personal data described in this policy. Contact: liangziqian@saleforteai.com.
3. What we collect
- Account data — name, business name, work email, phone or messaging handle, billing country, and login credentials.
- Billing data — subscription plan, invoices, payment status, and the last digits of a payment method where a payment provider processes it. We do not store full card numbers ourselves.
- Service data you load — product lists, prices, stock rules, sales scripts, and the buyer conversations you connect to the service.
- Buyer conversation content — the messages, attachments and metadata that flow through a channel you have connected.
- Usage and technical data — configuration changes, feature usage, error logs, IP address, and device or browser information.
- Support correspondence — what you send us when you ask for help.
4. How and why we use it
- To provide, operate and maintain the service you subscribed to.
- To answer buyer messages inside the channels you connected and the rules you approved.
- To process subscription payments and issue invoices.
- To provide support, diagnose faults and prevent misuse.
- To meet legal, tax and accounting obligations.
- To improve our own product using de-identified or aggregated information.
We do not sell your data. We do not share it with competitors. We do not use your raw customer data to train a shared model without your written authorisation.
5. Legal bases
Where the GDPR or UK GDPR applies, we rely on: performance of our contract with you; our legitimate interest in operating and securing the service; your consent where we ask for it; and compliance with legal obligations. You can withdraw consent at any time, without affecting processing already carried out.
6. AI processing and your buyers' data
When a buyer message reaches HireSalesAI, it is processed so that the service can answer it. We apply these rules:
- Customer data belongs to the customer.
- Customer data is used only to serve that customer's own account, knowledge base and sales flow.
- Any use, access or optimisation is authorised, de-identified where appropriate, and logged.
- Sensitive fields such as phone numbers, email addresses, messaging handles and delivery addresses are encrypted at field level or de-identified.
- Model calls are made through official API channels, not unofficial or unknown model services.
- Our default position is: invisible unless authorised, visible only with authorisation, and always logged when visible.
Where you are the controller of your buyers' data and we process it on your behalf, the written data-processing terms in your agreement govern that relationship.
7. Sharing
We share personal data only in these situations:
- Sub-processors — cloud hosting, model inference, messaging channels, email delivery and analytics providers that we need in order to run the service. The current list is maintained in your data-security agreement and is available on request.
- Payment providers — to take subscription payments and manage billing.
- Professional advisers — auditors, insurers and lawyers, under confidentiality.
- Authorities — where the law requires it, and only to the extent required.
- A business transfer — if the business is sold or merged, subject to this policy.
8. Retention
We keep personal data only as long as it is needed. Our standard periods are:
| Data | Retention period |
|---|---|
| Buyer conversation content and connected message history | For the subscription term. Deleted within 30 days after termination or after your deletion request. |
| Product, price and rule configuration | For the subscription term. Deleted within 30 days after termination. |
| Account and contact records | Subscription term plus 24 months, then deleted. |
| Invoices and billing records | Up to 7 years where tax and accounting law requires it. |
| Server and security logs | 90 days, then deleted or overwritten. |
| Encrypted backups | Overwritten on a rolling basis, fully purged within 90 days. |
| De-identified or aggregated analytics | Retained, because it no longer identifies a person. |
When you ask us to delete data, we acknowledge within 7 days, complete the deletion within 30 days, and give you written confirmation. Backups containing that data are purged within the following 90 days.
9. International transfers
Customer data for the service is stored on servers in Silicon Valley, United States. Where personal data moves out of the EEA, the UK or Switzerland, we rely on an appropriate transfer mechanism such as the standard contractual clauses, together with the technical measures described above.
10. Security
We protect data with encryption in transit, field-level encryption or de-identification for sensitive fields, role-based access control, logging of access and changes, and vendor review of the providers we rely on. If a personal-data breach occurs that is likely to result in a risk to your rights, we notify you without undue delay, and within 72 hours where the GDPR requires it.
11. Your rights
Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to processing, receive it in a portable format, and withdraw consent. Write to liangziqian@saleforteai.com and we will respond within 30 days. If you are in the EEA or the UK, you also have the right to complain to your local supervisory authority.
12. California residents
If you are a California resident, you may request to know what personal information we collect, to delete it, and to correct it, and you may ask us not to sell or share it. We do not sell personal information. Requests can be made through the contact address above.
13. Children
The service is for businesses. It is not directed at children, and we do not knowingly collect personal data from anyone under 16.
14. Changes and contact
If we change this policy in a material way, we will tell account holders before the change takes effect. Questions, requests and complaints: liangziqian@saleforteai.com.