Privacy Policy

1. Introduction

This Privacy Policy explains how Sales Workshop (“Sales Workshop”, “we”, “us”) collects, uses, discloses and safeguards personal data when you visit https://salesworkshop.ai, contact us, or use our AI sales agent platform (the “Service”).

We act in two different capacities. For our website, marketing and our own customer relationships we are the controller of personal data. When our customers use the Service to run conversations with their own leads and customers, our customer is the controller and we act as their processor, handling that data only on their documented instructions and under a data processing agreement. Sections 11 to 13 describe rights you exercise against us as controller; where we act as processor we will route your request to the responsible customer.

2. Information we collect

• Contact data — name, company, role, email address, phone number and messenger handle, provided when you submit a form, request a demo, apply to the pilot programme or contact us.
• Account data — login credentials, workspace settings, team roles and billing details of customers using the Service.
• Conversation data — call recordings, transcripts, chat messages and their outcomes, processed on behalf of the customer whose agent held the conversation.
• Voice data — audio of a call and the text transcription derived from it. We process voice as ordinary personal data to deliver and review the conversation. We do not create voiceprints and do not use voice for biometric identification or authentication.
• Usage and device data — IP address, browser and operating system, pages viewed, referring source, and sign-in events (date, time, IP), collected automatically.
• Data from third parties — information passed to us by a customer’s connected CRM or messaging channel, and payment status from our payment provider.

3. How we use your information and our lawful bases

• To provide the Service — creating accounts, running agents, holding and recording conversations, delivering support. Lawful basis: performance of a contract.
• To respond to enquiries — answering forms, demo requests and pilot applications. Lawful basis: steps taken at your request before entering a contract, or your consent.
• To improve and secure the Service — diagnostics, abuse prevention, capacity planning, aggregate analytics. Lawful basis: our legitimate interests, balanced against your rights.
• To send service and marketing messages — product updates and, where you have opted in, commercial email. Lawful basis: legitimate interests or consent, and you can opt out at any time.
• To meet legal obligations — accounting, tax, responding to lawful requests. Lawful basis: compliance with a legal obligation.

4. Data processing services we use

4.1. We rely on the providers below to operate the Service. Each is bound by contract to process personal data only on our instructions, to keep it confidential and to apply appropriate security measures. Depending on the channels, telephony and CRM a customer connects, further providers may be engaged on that customer's instructions; the customer is told which ones as part of onboarding.

4.2. We keep this list current. If we add a provider that materially changes where or how personal data is processed, we will update this Policy and, where we act as processor, notify customers as their data processing agreement requires.

5. AI processing and automated calls

5.1. The Service uses large language models and speech technology to hold conversations. Conversations may be recorded and transcribed so the customer can review outcomes and improve scripts.

5.2. Where local law requires notice or consent for call recording or for automated and pre-recorded calls — for example the TCPA in the United States, or telemarketing rules in the EU and UK — obtaining that consent is the responsibility of the customer operating the agent. We provide the configuration tools to give notice and to honour opt-outs.

5.3. The agent identifies itself as a company assistant and does not present itself as a human being when asked directly.

5.4. We do not use customer conversation data to train foundation models for other customers, and our model providers are engaged under terms that exclude training on data submitted through their APIs.

5.5. We do not make decisions producing legal or similarly significant effects about you based solely on automated processing.

6. Data sharing and disclosure

6.1. We share personal data with the providers listed in section 4, each bound by contract to process it only for us.

6.2. We share data with the customer whose agent held a conversation with you, and with the CRM or other system that customer has connected.

6.3. We may disclose data where required by law, to enforce our terms, or in connection with a merger or acquisition, in which case you will be notified.

6.4. We do not sell personal data and we do not share it for cross-context behavioural advertising.

7. International data transfers

7.1. We operate internationally, and several providers in section 4 are established in the United States. Personal data — including call audio and transcripts sent to model and speech providers — may therefore be transferred to and processed in countries other than your own, including countries without an adequacy decision.

7.2. Where we transfer personal data out of the EEA, the UK or Switzerland, we rely on appropriate safeguards — the European Commission’s Standard Contractual Clauses or the UK Addendum — together with a transfer risk assessment. A copy of the relevant safeguards is available on request at ai@workaishop.com.

8. Data storage and security

8.1. We use encryption in transit, access controls scoped by team role, audit logging, regular backups and periodic review of our providers. Access to conversation data is limited to staff who need it to run and support the Service.

8.2. Data is held with cloud hosting providers under contract. Customers subject to a data residency requirement should confirm the applicable hosting region with us before onboarding.

8.3. No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authority where the law requires it.

9. Data retention

9.1. We keep personal data only as long as needed for the purposes above. Account data is kept for the life of the account; enquiry and marketing data for up to 24 months after the last interaction; billing records for the period required by tax law.

9.2. Conversation data processed on a customer’s behalf is retained according to that customer’s settings and deleted on their instruction or on termination of their contract.

10. Your rights

10.1. Depending on where you live, you may have the right to access, correct, delete or receive a portable copy of your personal data; to object to or restrict processing; to withdraw consent; and not to be discriminated against for exercising these rights.

10.2. To exercise any of these rights, write to ai@workaishop.com. We respond within the period the applicable law requires, normally within one month.

10.3. If your data was processed by an agent operated by one of our customers, we will forward your request to that customer, who is the controller for that data.

10.4. If you are in the EEA or the UK you also have the right to lodge a complaint with your local data protection authority.

11. California privacy rights

11.1. If you are a California resident, the CCPA as amended gives you the right to know what personal information we collect and disclose, to request its deletion or correction, and to opt out of any sale or sharing of personal information.

11.2. We do not sell or share personal information as those terms are defined by the CCPA, so no opt-out is required. We do not use or disclose sensitive personal information beyond the purposes permitted by the statute.

11.3. We will not deny service, charge a different price or provide a different level of quality because you exercised a privacy right. Submit CCPA requests to ai@workaishop.com; we verify requests by matching the details you give us against the account or enquiry they concern.

12. Your choices

• Update your account details and workspace settings at any time from within the Service.
• Ask us to delete your data by writing to ai@workaishop.com, subject to records we must keep by law.
• Unsubscribe from marketing email using the link in any such message; service and billing notices continue while your account is open.
• Limit cookies through your browser settings. Disabling some cookies may reduce site functionality.
• Decline call recording by ending the call and contacting us by email or through a form on the site instead.

13. Children’s privacy

The Service is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.

14. Updates to this policy

We may update this Policy. The current version always sits at https://salesworkshop.ai/privacy with the date of the revision. Material changes will be announced in the Service or by email before they take effect.

15. Contact us

15.1. Questions, requests and complaints about this Policy or about how we handle personal data: ai@workaishop.com.

15.2. This address is also our contact point for data protection matters, including requests from supervisory authorities.