This explains what deepsales stores, who can see it, how long we keep it and how it is deleted.
Two kinds of people appear here. A customer of ours is a business using deepsales. An end user is the person who messages or calls that business. For end-user data, the business is the controller and deepsales is its processor — we hold the data on the business’s behalf and act on its instructions.
What we store
- Account data: names, email addresses and roles of the people who use a workspace.
- Customer records: the names, phone numbers, emails and notes a business enters or imports.
- Calls: recordings, transcripts and the AI analysis produced from them.
- Messages from connected channels: the text, any attached files, the sender’s profile name and username, the identifier the channel gives them, and the time each message was sent.
- Usage data: which features are used, for reliability and product decisions. This carries no message content.
Messages from connected channels
When a business connects a messaging account, we receive the conversations that account exchanges and store them so the business can read and reply from deepsales. Attached images, video, audio and documents are downloaded and kept on our servers, because the links the channel provides expire.
The first time someone writes in, a customer card is created for them from their profile so the business can reply and keep track. Replies a salesperson sends — from deepsales or from the channel’s own app — are stored the same way. If someone deletes a message on their side, we mark our copy deleted so it no longer reads as part of the conversation.
We use this for one purpose: showing the business its own conversations and producing the AI analysis it has enabled. We do not build profiles across businesses, we do not sell this data, and we do not use it for advertising.
Who can see it
Data is separated per workspace at the database level: one business cannot query another’s records, and that separation is enforced by the database itself, not only by application code. Inside a workspace, an owner sees everything and a salesperson sees the customers assigned to them. Our engineers can access data when needed to operate the service or investigate a fault.
Who else receives it
- Our AI provider — recordings, transcripts and message text are sent for transcription and analysis, and are processed to return a result, not to train models.
- A connected channel — only to send a reply you write, and to fetch the profile and attachments of an incoming message.
- Our hosting provider, which runs the servers the data sits on.
How long we keep it
We keep data for as long as the business keeps its account, because a CRM’s value is its history. There is no automatic expiry. It is deleted when the business deletes the record, when the workspace is closed, or on request as described below.
Deleting your data
See Data deletion. In short: ask the business you were in contact with, or email us and we will take it up with them.
Security
Traffic is encrypted in transit. Sign-in endpoints are rate-limited and lock out after repeated failed attempts. Access to production is limited to engineers who need it.
Contact
Privacy questions and requests: contact@deepsales.uz. If your request concerns data a particular business holds about you, tell us which business — they decide what happens to their own customer records, and we will pass the request on.