Privacy Policy

1. Scope and Role

For personal information we collect directly from users, we act as a data controller.

For Customer Data processed on behalf of business customers, we act as a data processor/service provider.

2. Categories of Information We Collect

We may collect the following categories of personal information:

• Identifiers (name, email address, IP address, account username)
• Commercial Information (subscription details, billing information)
• Internet or Network Activity (browser type, usage logs, device information)
• Professional Information (company name, job title)
• Customer Data uploaded into the Services

3. Cookies and Analytics

We use first-party cookies that are necessary to authenticate users, maintain secure sessions, and remember whether a user chose a session-only or persistent login. These cookies are required for account features and are not controlled by the analytics preference.

• revenue_execution_auth_id authenticates requests and lasts for the browser session or up to approximately one hour.
• revenue_execution_auth_refresh securely renews a login and lasts for the browser session or up to 14 days when a persistent login is selected.
• revenue_execution_auth_expiry tells the application when to renew a login and lasts for the browser session or up to approximately one hour.
• revenue_execution_auth_session_type remembers the selected login duration and lasts for the browser session or up to 14 days.

With your permission, we use Google Analytics to measure use of our public website. Google Analytics may process the pages visited, visit times, referring source, approximate location, browser and device information, and an online identifier. We use this information to understand aggregate website usage and improve the Services, not for advertising personalization.

When allowed, Google Analytics generally sets _ga and _ga_<container-id> first-party cookies for up to two years to distinguish visitors and maintain session state. Analytics is disabled until you select "Allow analytics." You may reject analytics without affecting the Services and may change your choice at any time through the "Cookie settings" link in our website footer. When analytics is rejected or permission is withdrawn, we disable Analytics and remove the Analytics cookies accessible from our domain.

We store your analytics choice in your browser's local storage so we can respect it on later visits. The preference remains until you change it or clear your browser storage. For more information, see how Google uses information from sites that use its services.

4. How We Use Personal Information

We use personal information to:

• Provide, operate, and maintain the Services
• Authenticate users and secure accounts
• Process payments and manage subscriptions
• Improve and develop product features
• Comply with legal obligations

5. Hosting and Infrastructure (AWS)

Our Services are hosted on Amazon Web Services (AWS). We implement safeguards consistent with AWS best practices, including:

• Encryption in transit (TLS 1.2+)
• Encryption at rest (where applicable)
• Role-based access controls
• Network segmentation and monitoring

Data is stored in AWS data centers located in us-west-2.

6. Information Sharing

We do not sell personal information or share it for cross-context behavioral advertising. We may disclose information to service providers that process it on our behalf, including Google for consented website analytics, to legal authorities when required, or in connection with corporate transactions.

7. CCPA / CPRA Notice (California Residents)

California residents have the right to:

• Know what personal information we collect and use
• Access and request deletion of personal information
• Correct inaccurate information
• Opt out of sale or sharing (we do not sell or share personal information)
• Not be discriminated against for exercising privacy rights

Requests may be submitted to: privacy@hellosalt.ai

8. Data Security

We implement commercially reasonable administrative, technical, and organizational safeguards designed to protect personal information. However, no method of transmission or storage is completely secure.

9. Data Retention

We retain personal information only as long as necessary to provide Services, comply with legal obligations, resolve disputes, and enforce agreements. For more information on data handling upon termination, please see our Terms of Service.

10. International Data Transfers

Where required, we implement appropriate safeguards such as Standard Contractual Clauses for international data transfers.

11. Free, Trial, or Beta Services — Limited Liability

We may offer free, trial, or beta versions of the Services ("Beta Services"). Beta Services are provided "AS IS" and "AS AVAILABLE" without warranties of any kind. To the fullest extent permitted by law:

• We disclaim all warranties, express or implied.
• We are not responsible for loss, corruption, or unavailability of data.
• Users are responsible for maintaining independent backups.
• Our total aggregate liability for Beta Services shall not exceed the amount paid (which may be zero).

12. Children's Privacy

Our Services are not directed to individuals under 18. We do not knowingly collect personal information from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the Services constitutes acceptance of the revised policy.

14. Contact Information

Revenue Execution Company, L.L.C. D.B.A. Salt
8630 SW Scholls Ferry Road, #113
Beaverton, OR 97008

Email: privacy@hellosalt.ai