Privacy Policy

1. Who we are

The data controller is PE “Klimenko Iurii”, a sole proprietorship registered in the Republic of Armenia, registration no. 264.1297939, Tax ID 72978355, address: RA, Yerevan, Kievyan str. 2, apt. 18.

Contact for any privacy request: [email protected] or Telegram @nmamizerov.

2. Data we collect

We collect only what the service needs:

• Account data from Google sign-in: name, email address, profile picture. We do not receive your Google password.
• Workspace data: workspace name, members, roles, invitations.
• Product data you give us: your product website URL and the text we read from public pages of that site, text you paste, PDF files you upload (we keep the extracted text).
• Practice data: buyer personas, trainings, call transcripts (text you type, and speech converted to text during voice calls), scores, debriefs and notes.
• Voice audio: during a voice call your microphone audio is streamed to our speech-to-text provider and the buyer's reply is generated by our text-to-speech provider. We do not store call audio; we store the transcript.
• Calendar data, only if you connect a calendar: see section 4.
• Messaging connections, only if you connect them: Slack user and workspace IDs, Telegram chat ID, so we can send you reminders.
• Billing data: plan, seats, subscription status and invoices from Paddle. Card details are handled by Paddle and never reach our servers.
• Technical data: IP address (used for rate limiting and security), browser user agent, session records, error logs.

3. Why we use it

• To provide the service: build personas, run practice calls, score them and show debriefs.
• To prepare you for meetings on your calendar and send the reminders you turned on.
• To manage accounts, workspaces, plans and limits.
• To keep the service secure and to debug failures.
• To answer support requests and send service notices (for example, billing or security changes).

We do not sell personal data, do not use it for advertising, and do not use your data or calendar data to train AI models.

4. Google and Microsoft calendar data

If you connect Google Calendar or Microsoft Outlook, SalesLab Center requests read-only access to your calendars. We read the list of your calendars (their names, so you can choose which ones we read) and, for events in a short window around today, the event title, start and end time, attendees (names and email addresses) and the meeting link. We use this only to show your upcoming meetings, build a brief and a practice persona for a meeting, and send the prep reminders you turned on.

We never create, change or delete calendar events. Your calendar data is not shown to other users, including the managers of your workspace (they only see how many of your meetings were prepared), and it is not sold, not used for advertising and not used to train AI models. Event details may be sent to our AI provider only to generate the brief and persona for that meeting, under the provider terms described in section 5.

No person at SalesLab Center reads your calendar data, except with your explicit permission (for example, to answer your support request), when needed for security (for example, investigating abuse), or to comply with the law.

SalesLab Center's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

You can disconnect a calendar at any time in Settings → Integrations. We then delete the stored access token, stop reading the calendar and cancel prep for upcoming meetings; meetings you already prepared for stay in your history until you delete them. You can also revoke access in your Google Account or Microsoft account settings.

5. Who processes data for us

We share data only with providers that run parts of the service, under contracts that limit use to providing the service:

• Hosting and database: our cloud server and managed PostgreSQL provider.
• AI models: Google (Gemini), OpenAI and Anthropic process prompts and transcripts to generate personas, buyer replies, briefs and debriefs. These providers do not train their models on API data.
• Speech: ElevenLabs and Deepgram convert speech to text and text to speech during voice calls.
• Langfuse: stores AI request and response traces so we can debug quality issues.
• Paddle: payments, invoices, taxes; Paddle is the Merchant of Record.
• Email delivery provider: sends invitations, sign-in links and reminders.
• Umami: privacy-friendly website analytics on saleslabcenter.com, without cookies and without personal profiles.
• Slack and Telegram: deliver reminders, only if you connect them.

6. Cookies

We use only the cookies needed to keep you signed in and to protect forms (a session cookie and a security token) on saleslabcenter.com and its subdomains. We do not use advertising or tracking cookies. Website analytics (Umami) is cookieless.

7. How long we keep data

• Account, workspace and practice data: while your account is active. You can delete products, personas and calls in the app.
• Anonymous previews from the website (product summary and the IP address used for rate limiting): deleted automatically after 7 days of inactivity if you do not sign in.
• Calendar data: when you disconnect a calendar we delete its access token and stop syncing; past meetings stay in your history until you delete them or your account.
• Logs and AI traces: kept for a limited time for debugging, then deleted.
• Billing records: as long as tax law requires.
• When you ask us to delete your account, we delete your personal data within 30 days, except where the law requires us to keep it.

8. Your rights

You can ask us to access, correct, export or delete your personal data, and withdraw any consent you gave. Write to [email protected] or Telegram @nmamizerov; we answer within 30 days. If you are in the EU/EEA or the UK, you also have the right to object to processing and to complain to your local data protection authority.

9. Security

Data is sent over HTTPS. Integration tokens (calendar, Slack) are stored encrypted. Access to production systems is limited to the operator.

10. Applicable law and changes

This policy is governed by the laws of the Republic of Armenia. We may update this policy; the date at the top shows the latest version, and we notify account owners by email about material changes.