Privacy Policy

This Privacy Policy explains how SalesNav Ltd, a company registered in England and Wales under company number [Company Registration Number], with its registered office at [Registered Office Address] ("SalesNav", "we", "us", "our"), collects, uses, and protects personal data when you visit our website or use SalesNav (the "Service"). We are the data controller for the personal data described in this policy, unless stated otherwise.

This policy is written to comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

• Account & contact data: name, work email address, company name, job title, phone number, and password (stored in hashed form).
• Billing data: billing address and transaction history. Card details are collected and processed directly by our payment processor, Stripe, and are not stored on our servers.
• Usage data: pages viewed, features used, log data, device and browser type, IP address, and approximate location, collected via analytics tools such as PostHog.
• Support data: messages, attachments, and metadata you share with us through our support chat (Chatwoot) or by email.
• Uploaded business data: location, address, territory, and related business data that you or your organisation upload to design and run territories ("Customer Data"). Where Customer Data includes personal data about your own employees, customers, or contacts, you remain the data controller of that data and we process it on your behalf as a data processor, under instructions set out in our Terms & Conditions.

• To create and administer your account, and to provide the Service you have requested — necessary for the performance of our contract with you.
• To process payments and manage billing — necessary for the performance of our contract with you and to comply with legal obligations (e.g. tax and accounting records).
• To provide customer support and respond to enquiries — necessary for the performance of our contract, or our legitimate interest in resolving issues you raise with us.
• To monitor, maintain, and improve the Service, including analysing usage patterns and diagnosing technical issues — our legitimate interest in operating a reliable, secure product, balanced against your rights.
• To send you service-related communications (e.g. security notices, billing notices, and material changes to these policies) — necessary for the performance of our contract or to comply with a legal obligation.
• To send you marketing communications about product updates or offers, where you have consented, or where permitted under PECR as an existing customer for similar products or services. You can opt out at any time using the unsubscribe link in any marketing email.
• To comply with our legal and regulatory obligations, and to establish, exercise, or defend legal claims.

We do not knowingly collect or process special category data (e.g. health, racial or ethnic origin, religious beliefs) about you, and we ask that you do not include such data in Customer Data you upload unless it is strictly necessary for your own lawful business purposes and you have your own valid legal basis for processing it.

We use strictly necessary cookies to operate the website and keep you signed in, and, where you consent, analytics cookies (such as PostHog) to understand how the Service is used. You can manage or withdraw your cookie consent at any time through your browser settings or our cookie banner. Blocking strictly necessary cookies may affect the functioning of the Service.

We share personal data with trusted third-party service providers who process it on our behalf, subject to written data processing terms, including:

• Stripe, Inc. — payment processing and billing;
• Amazon Web Services — hosting, storage, and infrastructure;
• PostHog — product analytics;
• Chatwoot — customer support messaging;
• Mapping and geolocation data providers, to render maps and territory boundaries;
• Professional advisers, auditors, and regulators, where necessary to comply with the law or to establish, exercise, or defend legal claims; and
• A buyer or successor entity, in the event of a merger, acquisition, financing, or sale of business assets.

We do not sell your personal data to third parties for their own marketing purposes.

Some of our service providers may process personal data outside the UK, including in the United States. Where we transfer personal data outside the UK, we rely on adequacy regulations, the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or other lawful transfer mechanisms recognised under UK GDPR, and we take steps to ensure your data continues to receive an equivalent level of protection.

We retain personal data for as long as your account is active and for a reasonable period afterwards to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. Uploaded Customer Data is retained in accordance with your instructions and is deleted or returned within a reasonable period after account closure, unless we are required by law to retain it for longer.

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and regular security reviews. No method of transmission or storage is completely secure, and we cannot guarantee absolute security, but we work to protect your data against unauthorised access, loss, or misuse.

Under UK GDPR, you have the right to:

• Request access to the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request erasure of your personal data, in certain circumstances;
• Request that we restrict or object to certain processing of your data;
• Request a copy of your data in a portable format, where technically feasible;
• Withdraw consent at any time, where we rely on consent; and
• Lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113, although we would welcome the chance to address your concerns directly first.

To exercise any of these rights, contact us at support@salesnav.ai. We may need to verify your identity before responding, and we will respond within one month as required by law.

The Service uses algorithms to suggest balanced sales territory boundaries based on the business data you upload. These outputs are designed to support your own business decisions and are not used to make automated decisions that produce legal or similarly significant effects about identifiable individuals.

The Service is intended for business use by adults and is not directed at, nor knowingly used to collect personal data from, children under 18.

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal or regulatory reasons. Where changes are material, we will notify you by email or through the Service before they take effect.

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at support@salesnav.ai.