Privacy Policy

This Privacy Policy explains how CargoScope LLC handles personal data in SalesScope and on salesscope.io. Here is the short version; the numbered sections below give the full detail.

1. Who we are

SalesScope is a product of CargoScope LLC (“SalesScope”, “we”, “us”), a Georgia (USA) limited liability company. This Privacy Policy explains how we handle personal data when you visit salesscope.io, ask for early access, use the SalesScope app, contact us, or receive an email that one of our customers sent through SalesScope.

For any question about this policy or your data, write to privacy@salesscope.io.

2. Our two roles

Data protection laws distinguish between a controller, which decides why and how personal data is used, and a processor, which handles it on a controller’s behalf. We are each of these for different data:

• We are the controller of account data (the people who use SalesScope, their sign-in details and settings), billing data, data from our website, early-access requests and support conversations. This policy mainly describes that data.
• We are a processor — a “service provider” under US state laws — for the data our customers put into SalesScope or collect through it: their contacts and prospects, notes, calls, the emails they send and receive through connected mailboxes, and email events. Each customer is the controller of that data and decides what goes in and how it is used. Our Data Processing Addendum sets out our commitments as a processor.

If you received an email from one of our customers, the section “If you received an email sent through SalesScope” below explains what that means for you.

3. What we collect

Account details

When you create an account or accept an invitation: your name, work email address and password (stored by our authentication provider only as a one-way hash, which nobody can read back), your company and workspace names, your role, your time zone and preferences, and who invited you and when you joined. Each account keeps an audit record of administrative actions, which its admins can see.

Workspace content

What you and your team put into SalesScope: contacts and their details (such as names, email addresses, phone numbers, companies, job titles, locations and anything else in your sheet’s columns), notes, pipeline stages, tasks, meetings and reminders, call outcomes, templates, campaigns and sequences, and images you add to emails. We process this as a processor for our customers.

Data from connected mailboxes

When you connect a mailbox, we store its address, its provider, and the credentials SalesScope needs to use it: OAuth tokens for Google or Microsoft, or the server, username and password for SMTP. Credentials are encrypted with AES-GCM before they are stored. We keep copies of the emails sent through SalesScope, and of the replies, bounce notices and auto-replies to those emails that SalesScope finds in connected Gmail, Google Workspace, Outlook.com and Microsoft 365 mailboxes. The sections on Google user data and Microsoft user data below explain exactly what we access in each.

Email events

To show results and to stop sending at the right moment, SalesScope records what happens to the campaign and sequence emails our customers send:

• Opens, through a tiny invisible image (a tracking pixel) in the email;
• Clicks, through links that pass via SalesScope on their way to the address the email pointed to;
• Replies, bounces and auto-replies, found in connected Gmail, Google Workspace, Outlook.com and Microsoft 365 mailboxes;
• Unsubscribes, through the unsubscribe link and the one-click unsubscribe headers in every campaign and sequence email.

An open or click record holds the type of event, the time, the link (for a click) and the user-agent string of the mail app or browser that made the request. We do not store the reader’s IP address with these records. Open and click tracking is on by default, and customers can switch it off for any campaign or sequence. One-off emails and replies written by hand carry no tracking.

Billing data

When a company buys a plan, payment details are collected by Stripe on its own page: card numbers never reach us. We receive and keep the billing contact’s name and email, the billing address, the tax ID if one is given (such as a VAT number or GSTIN), and the plan, seats, invoices and payment status. We also use the country your connection comes from, as our hosting provider reports it, to decide which currency to offer, because rupee prices are for companies in India.

Support emails

When you write to us, we keep your message, your email address, our replies, and anything you choose to include, such as screenshots.

Early-access requests

If you ask for early access on our website, we collect your name, work email and company, and, if you give them, your team size, the plan you are interested in, the tool you use today and your message. We also record the page you sent the form from, the page that referred you to our site, and the country your request came from, which our hosting provider works out from your IP address; we do not keep the IP address itself with the request. We also use your IP address and email address to limit how often the form can be sent; that record is deleted within about a day. We do not add you to a mailing list, and the form never emails the address you type into it.

Technical data

Our servers and hosting providers process IP addresses, user-agent strings, the addresses requested, timestamps and error details whenever you load the website or the app, sign in, or follow a link in an email sent through SalesScope. We use this data to deliver the Service, keep it secure, prevent abuse, apply rate limits (for example, how often an invitation link can be tried from one IP address) and fix problems.

Browser storage

The app keeps your sign-in session and preferences in your browser’s local storage, and a cache of your sheet’s rows in IndexedDB so large sheets open quickly. Signing out removes the session and the cached rows. We use no advertising or analytics cookies and load no third-party trackers. Our Cookie Policy has the details.

4. How we use personal data

• To provide SalesScope: run accounts and workspaces, send the emails customers schedule, find replies and bounces, show results, ring reminders, and everything else the app does.
• To keep it safe: authenticate users, enforce roles and permissions, detect and stop spam, abuse, fraud and security threats, and apply rate limits and sending guardrails.
• To bill: take payments, issue invoices, collect tax, and manage trials and plan limits.
• To communicate: send invitations, password resets and service notices (for example, that a mailbox was put on hold because too many of its emails bounced), and answer support requests. We do not send marketing to the contacts in your workspace, ever. If we send account holders occasional product news, each email lets you opt out.
• To improve the Service: understand which features are used and where things go wrong, from our own logs and aggregate statistics. We use no third-party analytics.
• To comply with the law: keep tax and accounting records, respond to lawful requests, and establish or defend legal claims.

We do not use personal data for advertising, and we do not make decisions about people based solely on automated processing that have legal or similarly significant effects on them. SalesScope does classify some incoming messages automatically — for example, recognizing an auto-reply or a reply asking to be removed — so that it can stop sending. Unclear cases are held for a person to review.

5. Legal bases under the GDPR

Where the EU or UK General Data Protection Regulation applies to the data we control, we rely on these legal bases:

Where we rely on legitimate interests, we have weighed them against your rights, and you can object. For the data we process for customers, each customer decides, and is responsible for, the legal basis.

6. Google user data

When you connect a Gmail or Google Workspace mailbox, you sign in with Google and grant SalesScope three permissions, known as OAuth scopes. We ask for nothing more. Each scope below begins with https://www.googleapis.com/auth/.

What SalesScope reads, and what it keeps

• SalesScope looks only at messages that arrive in the connected mailbox’s inbox after you connect it. It does not import your existing email.
• Each new message is checked by software, not by people, to see whether it answers or bounces an email sent through SalesScope. Only those messages — replies, bounce notices and auto-replies — are kept, together with Gmail’s notices that a sending limit was reached. Everything else is left where it is and not stored.
• The text of a kept reply is checked automatically for requests to be removed, such as “please take me off your list”, so that the person is not emailed again. Unclear cases are shown to your team to decide.
• SalesScope cannot delete, move, label or change anything in your mailbox. Its access for reading is read-only.

How we store and protect it

OAuth access and refresh tokens are encrypted at rest with AES-GCM before they reach our database, and only SalesScope’s server code can decrypt them. Kept messages are stored in your workspace in our database, hosted in the USA, where row-level security makes them visible only to people in your workspace who are allowed to see them. Data moves between Google, SalesScope and your browser only over encrypted (TLS) connections.

Limits on use and sharing

• We do not sell Google user data.
• We do not use it for advertising, including retargeting and personalized or interest-based ads.
• We do not use it to develop, improve or train generalized artificial intelligence or machine-learning models.
• We do not transfer it to anyone else, except as needed to provide or improve the features described here (for example, to the hosting and database providers that process it for us), to comply with the law, for security purposes, or as part of a merger, acquisition or sale of assets after obtaining your prior consent.
• People at SalesScope do not read your Google user data unless you give us your consent for specific messages (for example, to troubleshoot a problem you report), it is necessary for security purposes such as investigating abuse, it is needed to comply with the law, or the data has been aggregated and anonymized for internal operations.

SalesScope’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Your controls

You can disconnect a mailbox in SalesScope at any time, and its stored tokens are deleted straight away. You can also remove SalesScope’s access from your Google Account, as Google explains here. Emails and replies already recorded in your workspace stay part of your contacts’ history until you or an admin delete them, and are deleted with the rest of the workspace’s data within 30 days after the account is closed. To have them deleted sooner, write to privacy@salesscope.io.

7. Microsoft user data

When you connect an Outlook.com mailbox (including Hotmail and Live addresses) or a Microsoft 365 mailbox, you sign in with Microsoft and grant SalesScope the permissions below, which it uses through Microsoft Graph. They are delegated permissions: they act only for the person who signs in, and only on that person’s own mailbox. SalesScope never asks for application permissions, which would reach every mailbox in an organization, and we ask for nothing more than these.

What SalesScope reads, and what it keeps

• SalesScope looks only at messages that arrive in the connected mailbox’s Inbox after you connect it and, in a mailbox an admin marks as a test inbox, at the test messages SalesScope itself sent. It does not import your existing email.
• Each new message is checked by software, not by people, to see whether it answers or bounces an email sent through SalesScope. Only those messages — replies, bounce notices and auto-replies — are kept, together with Microsoft’s notices that a sending limit was reached. Everything else is left where it is and not stored.
• The text of a kept reply is checked automatically for requests to be removed, such as “please take me off your list”, so that the person is not emailed again. Unclear cases are shown to your team to decide.

What SalesScope writes, and what it deletes

• Each email SalesScope sends from the mailbox is first saved there as a draft and then sent.
• If Microsoft refuses to send it, or the send is stopped before the draft is submitted, SalesScope deletes that draft. Its own unsent drafts are the only messages it ever deletes.
• SalesScope never moves, changes or deletes any other message in your mailbox.

How we store and protect it

OAuth access and refresh tokens are encrypted at rest with AES-GCM before they reach our database, and only SalesScope’s server code can decrypt them. Kept messages are stored in your workspace in our database, hosted in the USA, where row-level security makes them visible only to people in your workspace who are allowed to see them. Data moves between Microsoft, SalesScope and your browser only over encrypted (TLS) connections.

Limits on use and sharing

• We do not sell Microsoft user data.
• We do not use it for advertising, or to develop, improve or train generalized artificial intelligence or machine-learning models.
• We share it only as section 8 describes, for example with the hosting and database providers that process it for us.
• People at SalesScope do not read it unless you give us your consent for specific messages (for example, to troubleshoot a problem you report), it is necessary for security purposes such as investigating abuse, it is needed to comply with the law, or the data has been aggregated and anonymized for internal operations.

Your controls

You can disconnect a mailbox in SalesScope at any time, and its stored tokens are deleted straight away. You can also remove SalesScope’s access on Microsoft’s side. For a personal Outlook.com, Hotmail or Live account, use the app permissions page of your Microsoft account. For a work or school account, use the My Apps portal, as Microsoft explains here, or ask an administrator, who can remove SalesScope for your whole organization in Microsoft Entra. Emails and replies already recorded in your workspace stay part of your contacts’ history until you or an admin delete them, and are deleted with the rest of the workspace’s data within 30 days after the account is closed. To have them deleted sooner, write to privacy@salesscope.io.

8. How we share personal data

We share personal data only in these cases:

• With our subprocessors and service providers, which host, store and transmit data for us: Cloudflare, Supabase, Stripe, Resend, Google and Microsoft, and public DNS services, which only ever receive domain names. Each must protect the data and use it only to provide its service, except that Stripe also uses payment data for its own purposes, such as fraud prevention and meeting financial regulations, under its own privacy policy. Our subprocessors page lists them all, with what each one receives and where.
• Within your account. People in your workspace see what their role allows, and admins can see the account’s activity.
• When the law requires it, for example to comply with a valid court order. Where the law allows, we tell the customer concerned first.
• To protect people and the Service, for example by sharing information about a spam campaign with an affected mail provider.
• In a business transfer. If CargoScope LLC is involved in a merger, acquisition or sale of assets, personal data may transfer as part of it, still protected by this policy. We will tell you before it becomes subject to a different privacy policy, and Google user data transfers only with your prior consent.
• With your consent, or when you ask us to.

We do not sell personal data, and we do not share it for cross-context behavioral advertising, as California law defines those terms. We do not give personal data to data brokers or advertising networks.

9. International transfers

CargoScope LLC is based in the United States. SalesScope’s database is hosted in the USA, by Supabase on Amazon Web Services in Northern Virginia (us-east-1). Our website and app are served from Cloudflare’s global network, so each request is handled in a data center near the person making it. Some providers process data in other countries; the subprocessors page shows where.

When we transfer personal data from the European Economic Area, the United Kingdom or Switzerland to a country that does not have an adequacy decision, we use the European Commission’s Standard Contractual Clauses, with the UK Addendum and the Swiss adjustments where they apply, or another valid transfer mechanism, such as a recipient’s certification under the EU-U.S. Data Privacy Framework. Our Data Processing Addendum incorporates the Standard Contractual Clauses for customers. You can ask for a copy of the relevant safeguards at privacy@salesscope.io.

10. How long we keep data

We keep data longer only where the law requires it or where it is needed to establish or defend a legal claim, and then only for that purpose.

11. Security

We protect personal data with measures that include:

• encryption in transit (TLS) for every connection, with HSTS, and encryption at rest by our database provider;
• AES-GCM encryption of mailbox tokens and passwords before they are stored;
• row-level security in the database, so that every row belongs to one workspace and is visible only to its members;
• least-privilege access for our own systems and staff;
• a strict Content-Security-Policy and no third-party scripts in the app;
• passwords of at least 12 characters, and an audit record of administrative actions.

No system is perfectly secure. If a breach affects your personal data, we will notify you and the authorities as the law requires. Our security overview has more detail. To report a vulnerability, write to security@salesscope.io.

12. If you received an email sent through SalesScope

Our customers use SalesScope to email people they want to do business with. If you received one of these emails, the company that sent it decided to contact you and is responsible for having your details and a lawful basis to use them. We process your data on its behalf.

What a customer holds about you in SalesScope can include your name, business email address, phone number, company, job title and location, notes the customer added, the emails it sent you and your replies, and whether you opened an email, clicked a link, replied, bounced or unsubscribed.

To stop receiving its emails, you can:

• use the unsubscribe link in the email, which stops further campaign and sequence emails to you from that sender’s SalesScope workspace;
• reply asking to be removed — SalesScope recognizes such replies and stops the emails, or flags the reply for the sender to act on;
• contact the sender directly; or
• write to privacy@salesscope.io with the email you received, or with the sender’s name and your email address. We will pass your request to the company concerned and, where we can, make sure SalesScope stops sending you its emails.

To see, correct or delete what a company holds about you, contact that company: it decides how to handle your request, and we help it respond. If you are not sure who sent an email, write to us and we will forward your request. If you think an email sent through SalesScope was spam, report it to abuse@salesscope.io.

13. Your rights in the EEA, the UK and Switzerland

If the EU GDPR, the UK GDPR or Swiss data protection law applies, you have the right to:

• access the personal data we hold about you and receive a copy;
• rectification of inaccurate or incomplete data;
• erasure of your data in certain circumstances;
• restriction of our processing in certain circumstances;
• portability: to receive data you gave us in a structured, machine-readable format, or have it sent to another controller;
• object to processing based on legitimate interests, and to direct marketing at any time;
• withdraw consent where we rely on it, without affecting processing that happened before;
• complain to a supervisory authority: in the EU, the authority where you live or work, listed by the European Data Protection Board; in the UK, the Information Commissioner’s Office; in Switzerland, the Federal Data Protection and Information Commissioner. We would appreciate the chance to address your concern first.

14. Your rights in the United States, including California

Residents of California and of other US states with comprehensive privacy laws, such as Colorado, Connecticut, Oregon, Texas and Virginia, have rights over their personal information. Subject to the exceptions in those laws, you can:

• know and access the personal information we have collected about you, including the categories, sources, purposes and the categories of recipients;
• delete it;
• correct inaccurate information;
• receive a portable copy of it;
• opt out of the sale or sharing of personal information and of targeted advertising — we do none of these, so there is nothing to opt out of;
• limit the use of sensitive personal information — the only sensitive information we collect is account login credentials, which we use only to let you sign in;
• not be discriminated against for using these rights: we will not deny you the Service, charge you a different price or give you a different quality of service because you used them;
• appeal our decision on your request, where your state law gives that right.

California notice at collection

In the past 12 months we have collected these categories of personal information, from you, from your employer (our customer) and from your use of the Service: identifiers (name, email address, IP address, account ID); customer records and commercial information (billing details and purchase history); internet or network activity (request logs and email engagement events); professional information (your company and its team size); account login credentials, which are sensitive personal information; and the content of messages you send us or send through SalesScope. We use them for the purposes in section 4, disclose them for business purposes only to the service providers in section 8, and keep them for the periods in section 10. We do not sell or share personal information, and we have no actual knowledge of selling or sharing the personal information of anyone under 16.

We treat a Global Privacy Control signal as a request to opt out of sale and sharing, although we do neither. Because we do not track you across other websites, we do not respond differently to Do Not Track signals.

15. Your rights in India

If you are in India, the Digital Personal Data Protection Act, 2023, as its provisions come into force, gives you the right to obtain a summary of the personal data we process about you and of our processing; to have it corrected, completed, updated or erased; to withdraw consent where we rely on it; to nominate someone to exercise your rights if you die or become incapacitated; and to have your grievances addressed. Write to privacy@salesscope.io. If you are not satisfied with our response, you may complain to the Data Protection Board of India.

16. How to exercise your rights

Email privacy@salesscope.io from the address linked to your account or your data, and tell us what you would like us to do. We may need to verify your identity before we act, usually by confirming that you control that email address. Someone you authorize may make a request for you with your signed permission, and we may still ask you to confirm your identity.

We respond within one month, or within the time your law sets (for example, 45 days under California law), and we will tell you if we need longer and why. Requests are free, unless they are clearly unfounded or excessive. To appeal a decision we made on your request, reply to our response with “Appeal” in the subject line. If we deny your appeal, you may contact your state attorney general.

If your request concerns data that a customer controls — for example, you are a contact in a customer’s workspace — we will pass it to that customer and help it respond. Account users can update most of their own details in the app, and admins can export their workspace’s data.

17. Children

SalesScope is a business service for people aged 18 and over. It is not directed at children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, write to privacy@salesscope.io and we will delete it.

18. Changes to this privacy policy

We update this policy when our practices change. If a change is material, we will tell account admins by email or in the app before it takes effect, and we will ask for consent where the law requires it. The effective date at the top of this page shows when the policy last changed.

19. Contact

CargoScope LLC handles all correspondence by email:

• Privacy questions and data requests: privacy@salesscope.io
• Security reports: security@salesscope.io
• Spam or misuse sent through SalesScope: abuse@salesscope.io
• Legal notices: legal@salesscope.io