Your data, in plain English.

SalesWitness is operated by [entity name and registration to be inserted].

This policy covers the personal information we handle when you visit this website, enrol, use the client portal, or when we audit your business on your instructions. We keep it short and in plain English. If anything here is unclear, ask us through our contact page or by email to hello@saleswitness.com.

When you enrol or contact us:

• Your business details: company name, website address, industry, the channels and plan you choose, and any audit brief, notes or files you add in the portal.
• Your contact details: your name, job title and contact email, and the name and title of the person who signs the audit authorisation.
• Your portal sign-in: the email you log in with and a session so you stay signed in.
• Billing records: what you bought, invoices and payment status. If you pay by card, Stripe handles the card — we never see or store card numbers.

When we audit your business (only after you authorise it):

• The evidence of how your channels responded: screenshots of your enquiry form and chat, email threads, chat transcripts, and recordings and transcripts of phone calls with your own staff.
• Timings (when we asked, when you replied, how often you followed up), the prices quoted, and the names, email addresses or phone numbers your team replied from.
• A health check of your public website, including screenshots of the pages and forms we test.
• Review data from public platforms such as Google, Trustpilot, Facebook and Yelp: the reviewer’s public display name, rating, text and date, and any public reply.

When you browse this website: your approximate country (worked out by our host from your IP address, only to show prices in your currency), the standard technical logs every web host keeps, and — only if you choose to talk to it — your conversation with the voice assistant on our pages.

If you leave the enrolment form part-way through without submitting it, we don’t keep what you typed.

• To run what you bought: send the enquiries, capture the evidence, score it, and publish your report and review alerts in your portal.
• To email you reports, alerts, digests and sign-in links, and to answer your questions.
• To invoice you and keep the records tax law requires.
• To analyse evidence and draft review replies with the help of AI models (see below).
• To build industry benchmarks, such as typical response times — only from anonymised, combined figures that identify no business and no person.
• To keep the service secure and to meet our legal obligations.

We do not sell personal information, and we do not use it for advertising. Where a law such as the UK or EU GDPR needs a legal basis, ours is the contract with you (running the service), our legitimate interest in running and securing our business, and our legal obligations (such as keeping tax records).

Every audit runs under a written authorisation from the owner or an authorised officer of the business, given when you enrol. In it, you authorise us to contact your own sales channels as a prospect, to record those calls and chats as evidence, and to monitor your public review profiles. Nothing runs until that authorisation is on file, and you can withdraw it at any time.

• We contact only the channels of your own business that you authorised, as an ordinary prospect using a shopper persona. Some channels, such as phone calls, may use an AI-generated voice for that persona.
• We never contact your customers, suppliers or anyone else while presenting ourselves as you, and we never post, buy or solicit reviews.
• If your plan includes a competitor benchmark, we make ordinary enquiries to the rival businesses in the benchmark, as any member of the public could — never in your name — and use what we find only in your benchmark report.
• Findings describe what the evidence shows. We make no claim about anyone’s intent.

The evidence often involves your own staff. You are responsible for telling them about the audits where the law where you operate requires it — see our terms.

We use a small number of service providers to run SalesWitness. They handle data only to provide their service to us, under their own security and data-protection commitments.

Supabase

Our database and private file storage (evidence, report PDFs, your uploads) and portal sign-in.

Vercel

Hosts this website and the client portal, and gives us your approximate country for currency.

Railway

Runs our audit worker: form, chat and email audits, report PDFs and website uptime checks.

Resend

Sends our emails: reports, alerts, digests and sign-in links.

Google (Gmail)

The mailbox our shopper persona uses for email enquiries, so your team’s replies arrive there.

ElevenLabs and Twilio

Phone audits, when your plan includes them: placing the calls, the recordings and the transcripts. ElevenLabs also runs the voice assistant on this website.

Bright Data, Apify and Google Places

A hosted browser for form and chat audits, and collecting your public reviews.

AI model providers

Scoring transcripts, summarising evidence and drafting review replies, through our AI gateway (Experiential Labs) or Anthropic.

Stripe

Card payments, when you pay by card.

Some of these providers store or process data outside your country, including in the United States.

Only the service providers listed above, and only so they can run their part of the service. Your reports and evidence are visible to you and to the people you give access to your portal.

Beyond that, we would share information only if the law requires it, or with a buyer of our business under this same policy — and we would tell you.

• Audit evidence and reports: for as long as your subscription runs, plus 12 months (for a one-time audit, 12 months after we deliver it). Then we delete it — sooner if you ask us to.
• Review data: on the same timetable as your evidence.
• Your account and contact details: while you are a client, then as long as we need them for the billing records below.
• Invoices and billing records: as long as tax and accounting law requires.
• Messages you send through our contact page: as long as we need to reply and follow up, or until you ask us to delete them.
• Anonymised benchmark figures: these identify no business and no person, so we may keep them.

You can ask us for a copy of the personal information we hold about you, to correct it, to delete it, or to stop using it for a particular purpose. Contact us through our contact page or by email to hello@saleswitness.com. We reply within one month.

If you work for one of our clients and your replies appear in their evidence, you can contact us too; we may involve the client, because the audit runs on their instructions.

If you are unhappy with how we handled your information, you can complain to your local data-protection authority.

We use only what the site needs to work. There are no advertising cookies and no analytics or tracking tools.

md_currency cookie

Remembers the currency prices are shown in, for up to a year.

Portal sign-in cookies

Keep you signed in to the client portal.

md_billing (local storage)

Remembers whether you chose monthly or annual billing on the pricing page.

md_roi_v3 (session storage)

Keeps your calculator answers while the tab is open.

md_tour_done (local storage)

Remembers that you finished the portal tour.

The voice assistant on our pages is provided by ElevenLabs and loads from their servers.

Evidence, uploads and report PDFs sit in private storage, and the links we create to them expire within minutes (report links in digest emails last up to 14 days). Access inside SalesWitness is limited to the people running your audits. No system is perfectly secure, but we take care and will tell you promptly if a problem affects your data.

SalesWitness is a service for businesses. It is not meant for anyone under 18, and we don’t knowingly collect their information.

When we change this policy we update the date at the top. If a change matters to how we handle your data, we email our clients before it takes effect.