Privacy Policy

GreatSales AI™ is a brand and product of Novapro Lab LLC ("Novapro Lab," "we," "us," or "our"). This Privacy Policy describes how we collect, use, disclose, and protect information when you visit our websites, create or use an account, subscribe to our services, or otherwise interact with GreatSales AI™ (collectively, the "Services"). This Privacy Policy applies to information we process as the operator of GreatSales AI™. It does not apply to third-party websites, applications, or services that may link to or integrate with the Services, except as described below.

1. Scope and roles

1.1 Business customers

GreatSales AI™ is designed for use by businesses and organizations. When you register on behalf of an organization, you represent that you have authority to bind that organization to our Terms of Use and this Privacy Policy.

1.2 Controller and processors

Novapro Lab LLC is the data controller (or "business" under applicable U.S. state privacy laws) for personal information we collect through the Services, except where we act as a processor or service provider on behalf of a business customer with respect to that customer's end-customer or lead data ("Customer Business Data"). Certain third parties process information on our behalf as subprocessors, as described in Section 8.

1.3 Customer Business Data

Information your organization uploads, connects, or generates through the Services about your leads, contacts, appointments, sales activities, and commercial operations is Customer Business Data. Your organization controls this data. We process Customer Business Data only to provide the Services, as instructed by authorized users, and as described in our Terms of Use, this Privacy Policy, and any applicable data processing addendum.

2. Information we collect

We collect information in the following categories:

2.1 Account and authentication information

When you create or access an account, we and our authentication provider collect information such as:

• Name
• Business or organization name
• Email address
• Password (stored by our authentication provider in hashed form; we do not store plaintext passwords)
• Multi-factor authentication and verification codes
• Invitation or registration tokens (for invitation-based registration)
• Session and login metadata

Provider note: We use Clerk, Inc. to provide authentication services. Clerk processes account credentials and session data as our service provider.

2.2 Business and organization information

• Company name, business profile details, industry, service area, and commercial preferences
• Team member names and roles (when added to an account)
• Billing contact and billing address information (when provided)
• Tax identification or business registration information (when provided)

2.3 Customer Business Data

Depending on how you use the Services, Customer Business Data may include:

• Lead and contact records (names, phone numbers, email addresses, notes, and status)
• Appointment and calendar-related information
• Sales, pipeline, and outcome records
• Communications drafts, templates, and execution logs (when features are enabled)
• Connected third-party account metadata (not provider passwords or OAuth secrets)
• Market, channel, and commercial intelligence inputs you provide or authorize

We treat Customer Business Data as confidential business information subject to tenant isolation controls.

2.4 Payment-related information

When live billing is enabled, payments for GreatSales AI™ are processed by Novapro Lab LLC through Stripe and/or PayPal, depending on the payment method you select. Those payment processors collect and process payment card or payment account information according to their own privacy policies. We do not store full payment card numbers on our systems when payment processing is handled by Stripe or PayPal in accordance with industry-standard integrations. We may receive limited payment-related information from processors, such as:

• Transaction identifiers
• Payment status
• Last four digits of a card (if provided by processor)
• Billing address and payer name
• Subscription and invoice metadata

2.5 Communications and support information

• Support requests, feedback, and correspondence
• Survey responses
• Records of your communications with us

2.6 Device, browser, log, and usage information

When you use the Services, we automatically collect certain technical information, including:

• IP address
• Browser type and version
• Device type and operating system
• Pages viewed, features used, and interaction events
• Referring URLs and timestamps
• Error logs and diagnostic data
• Language and locale preferences

2.7 Cookies and similar technologies

We use cookies, local storage, session storage, and similar technologies as described in our Cookie Policy, incorporated by reference.

2.8 AI-related information

When AI features are enabled, we may process:

• Prompts, instructions, and contextual inputs submitted to AI features
• AI-generated outputs, recommendations, and drafts
• Approval, rejection, and execution records
• Feedback on AI outputs
• Internal outcome and performance records used to improve service quality within your organization's account

The treatment of AI inputs, outputs, and learning records is further described in our AI Data and Customer Content Schedule and Terms of Use.

2.9 Information from third-party services

If you connect third-party services (such as advertising platforms, analytics tools, calendars, or messaging systems), we may receive information authorized by you through those connections. We do not receive or store provider OAuth secrets, refresh tokens, or access tokens in customer-facing interfaces. Third-party services are governed by their own privacy policies.

3. Sources of information

We collect information from:

• You and authorized users on your account
• Your organization's use of the Services
• Authentication and payment processors acting on our behalf
• Third-party services you connect (with authorization)
• Automatic logging and security systems
• Public or licensed sources where permitted and configured

4. How we use information

We use information for the following purposes:

4.1 Provide and operate the Services

• Create and manage accounts and organizations
• Authenticate users and maintain security
• Provide workspace features, onboarding, and plan entitlements
• Process subscriptions and billing (when live)
• Provide customer support

4.2 AI-assisted commercial intelligence and execution

• Generate recommendations, drafts, and workflow assistance
• Prepare approval-ready actions within configured boundaries
• Execute authorized actions where explicit approval or properly configured delegation exists
• Maintain commercial context and outcome records within your tenant

4.3 Improve, secure, and maintain the Services

• Monitor performance, troubleshoot, and debug
• Detect fraud, abuse, and security incidents
• Develop new features and improve existing functionality
• Conduct internal analytics in aggregated or de-identified form where appropriate

4.4 Legal and compliance

• Comply with law, regulation, legal process, and governmental requests
• Enforce our Terms of Use and Acceptable Use Policy
• Protect rights, property, safety, and security of Novapro Lab, our customers, and others

4.5 Marketing and communications (where permitted)

• Send service-related notices, billing communications, and security alerts
• Send product updates and informational communications with appropriate consent or lawful basis

5. Legal bases for processing (international users)

Where applicable law requires a legal basis (such as for individuals in the European Economic Area, United Kingdom, or Switzerland), we rely on one or more of the following:

• Contract: Processing necessary to provide the Services you request
• Legitimate interests: Securing and improving the Services, fraud prevention, and B2B communications, balanced against your rights
• Consent: Where required for optional cookies, marketing, or specific processing
• Legal obligation: Compliance with applicable law

6. How we disclose information

We may disclose information as follows:

6.1 Service providers and subprocessors

We use third parties that process information on our behalf, including:

6.2 Your organization and authorized users

Information may be visible to administrators and authorized users within your organization according to role and plan settings.

6.3 Business transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to continued protection.

6.4 Legal disclosures

We may disclose information when we believe disclosure is required by law, subpoena, or legal process, or to protect rights, safety, and security.

6.5 With your direction

We may disclose information when you or your organization instructs us to do so, including through connected integrations.

7. Data retention

We retain information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements.

8. Security

We implement administrative, technical, and organizational measures designed to protect information, including access controls, tenant isolation architecture, encryption in transit where supported by our infrastructure, and secure handling of credentials and secrets. We do not claim any specific certification (such as SOC 2, ISO 27001, or PCI DSS merchant certification) unless and until Novapro Lab publishes verified certification status. No method of transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for configuring appropriate access controls within your organization.

9. International transfers

Novapro Lab LLC is located in the United States. If you access the Services from outside the United States, your information may be processed in the United States and other countries where we or our service providers operate. Where required, we use appropriate transfer mechanisms such as standard contractual clauses or provider certifications (including Clerk's Data Privacy Framework certification for applicable transfers — verify current status at integration).

10. Your privacy rights

Your rights depend on your location and applicable law.

10.1 General rights

Subject to applicable law and exceptions, you may have the right to:

• Access personal information we hold about you
• Correct inaccurate information
• Delete certain information
• Obtain a portable copy of certain information
• Opt out of certain processing (including targeted advertising or "sale"/"sharing" where applicable)
• Limit use of sensitive personal information (where applicable)
• Appeal a denial of a request (where applicable)

10.2 How to submit a request

Submit privacy requests to: We may verify your identity before fulfilling requests. Authorized agents may submit requests where permitted by law with appropriate authorization documentation.

10.3 California residents

If the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), applies to our processing, California residents may have additional rights described in Section 10.1.

10.4 Other U.S. state privacy laws

Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws may have similar rights where those laws apply. Contact us using the information in Section 10.2.

10.5 Cookie and similar technology choices

You can manage optional cookies and similar technologies through our Manage privacy preferences control on this Privacy Policy, our Cookie Policy, and the site footer. When you first visit and no valid preference is stored, we will present a consent notice explaining essential and optional technologies. Optional analytics and marketing technologies remain disabled until you opt in. You may Reject non-essential technologies with the same ease as accepting them. Withdrawing optional consent stops future optional processing and removes or expires optional storage where technically possible. Withdrawing consent does not by itself delete personal information that was lawfully processed before withdrawal, but you may exercise applicable deletion rights separately. See our Cookie Policy for category descriptions and the technology inventory.

11. Sensitive information

We do not intentionally collect sensitive personal information (such as government ID numbers, precise geolocation for consumer tracking, or health information) except where you choose to include such information in Customer Business Data. You are responsible for ensuring you have appropriate legal basis and notices for any sensitive information you upload.

12. Automated decision-making

GreatSales AI™ may use automated processing to generate recommendations, prioritize leads, suggest actions, or prepare drafts. Consequential actions that affect customers of your business (such as outreach, pricing commitments, or provider changes) require human approval or properly configured delegated authority within limits you establish, as described in the Terms of Use and AI Disclaimer.

13. Children's privacy

14. Third-party links and integrations

The Services may contain links to third-party websites or enable integrations with third-party platforms. We are not responsible for the privacy practices of third parties. Review their privacy policies before providing information.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice by posting the updated policy, updating the "Last updated" date, and providing additional notice where required by law (such as email or in-product notice). Your continued use of the Services after the effective date of an updated Privacy Policy constitutes acceptance of the changes, except where further consent is required by law.

Related documents

• Terms of Use and SaaS Subscription Agreement
• Cookie Policy
• AI and General Legal Disclaimer
• AI Data and Customer Content Schedule
• Cancellation and Refund Policy
• Acceptable Use Policy