LEGAL

Privacy & Compliance

Updated October 2026

GDPR Compliance

We are committed to protecting privacy and personal data and to complying with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), to the extent applicable to our activities.

Our approach is based on the principles of transparency, purpose limitation, data minimization, appropriate security, and responsible use of information.

Where we process personal data, we do so for specified and legitimate purposes and on an appropriate legal basis under applicable law. Depending on the circumstances, the applicable legal basis may include the performance of a contract, compliance with a legal obligation, our legitimate interests, or consent where consent is required.

We seek to collect and use only information that is reasonably necessary for the relevant business, contractual, operational, analytics, security, fraud-prevention, attribution, and marketing purposes.

Where applicable, individuals may have rights under the GDPR, including rights of access, rectification, erasure, restriction of processing, objection to certain processing, data portability, and withdrawal of consent where processing is based on consent.

We implement reasonable technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, destruction, or other unlawful processing.

Where third-party providers process personal data on our behalf, we seek to establish appropriate contractual, confidentiality, security, and data protection safeguards consistent with applicable law.

Where applicable, international transfers of personal data are carried out using legally recognized transfer mechanisms and appropriate safeguards.

Further information concerning our privacy practices, cookies, analytics, data recipients, retention, international transfers, and individual rights is available in our Privacy Policy and Cookie Policy.

Nothing in this notice is intended to exclude, restrict, or waive any right, obligation, or liability that cannot lawfully be excluded, restricted, or waived under applicable law.

California Privacy

We respect the privacy rights of California residents and are committed to complying with the California Consumer Privacy Act (“CCPA”), as amended by the California Privacy Rights Act (“CPRA”), to the extent applicable to our business and activities.

Depending on the circumstances and subject to applicable law, California residents may have rights concerning their personal information, including the right to know and access personal information collected about them, the right to request deletion or correction, and the right to opt out of certain sales or sharing of personal information.

Where applicable, California residents may also have rights concerning certain uses and disclosures of sensitive personal information and other rights provided by California law.

We do not discriminate against individuals for exercising privacy rights available to them under applicable California law.

Where required or applicable, we provide mechanisms through which California residents may exercise their privacy rights, including applicable opt-out mechanisms and recognized opt-out preference signals.

We may take reasonable steps to verify the identity and authority of a requester before fulfilling certain requests, where permitted or required by applicable law.

Our Privacy Policy provides additional information concerning the categories of personal information we collect, the purposes for which information is collected and used, the sources from which information is collected, the categories of recipients to whom information may be disclosed, applicable retention practices, and the rights available to California residents.

Where applicable, privacy requests may be submitted through the methods identified in our Privacy Policy.

Nothing in this notice is intended to limit, waive, or otherwise affect any right or obligation that cannot lawfully be limited, waived, or affected under California law.

Anonymous & Aggregated Data

We may use information in aggregated, statistical, anonymous, or otherwise de-identified form to understand general trends and patterns relating to our website, digital services, marketing activities, and campaign performance.

Such information may include aggregated measurements relating to website activity, engagement, traffic patterns, campaign performance, conversion trends, and other general performance indicators.

We use this information to measure and improve the effectiveness of our digital services and marketing activities, optimize campaigns, evaluate performance, improve user experience, detect irregular activity, and support business decisions.

Where information has been rendered anonymous or aggregated in a manner that does not identify, and is not reasonably capable of being used to identify, an individual, we do not use such information for the purpose of identifying individual users.

Where information remains capable of being associated with an identifiable individual, or may constitute personal data or personal information under applicable law, we treat and protect it in accordance with the applicable legal requirements and our Privacy Policy.

We do not seek to identify individual users through information that is genuinely anonymous or aggregated.

We apply reasonable measures designed to maintain the security and integrity of information used for analytics, measurement, reporting, attribution, and fraud-prevention purposes.

Website & Marketing Analytics

We use website and marketing analytics to understand how visitors interact with our website, digital services, and marketing activities and to measure campaign and business performance.

Depending on the technologies used, analytics may involve information relating to website activity, traffic sources, engagement, conversion events, campaign performance, attribution, technical performance, traffic quality, and fraud indicators.

We use this information to improve our digital services, evaluate and optimize campaigns, measure performance, attribute results, identify irregular or potentially fraudulent activity, and support informed business decisions.

Analytics and measurement technologies may include cookies, pixels, tags, identifiers, server-side technologies, affiliate tracking technologies, or similar technical mechanisms.

Where a particular technology involves personal data or personal information, we handle the relevant information in accordance with applicable privacy and data protection laws.

Where consent is required for a particular analytics, tracking, or marketing technology, we will obtain or manage such consent in accordance with applicable law.

Certain analytics, measurement, security, verification, tracking, or fraud-prevention services may be provided by third-party technology providers. The role of each provider may vary depending on the service, contractual arrangement, and applicable law.

Further information concerning cookies and similar technologies, including available choices and controls, is provided in our Cookie Policy.

Contact

For privacy-related questions or requests, please contact help@sales-machine.ai.