Privacy Policy

1. Introduction

This Privacy Policy explains how SalesTree collects, uses, stores, processes, shares, and protects personal information when you visit our website, create an account, use our customer relationship management (CRM) platform, or connect third-party services.

SalesTree is a software product owned and operated by ASAAN HOME (SMC-PRIVATE) LIMITED, Corporate Unique Identification No. 0228166, incorporated under the Companies Act, 2017 (XIX of 2017), in Pakistan.

In this Policy, “SalesTree,” “we,” “us,” and “our” refer to ASAAN HOME (SMC-PRIVATE) LIMITED acting as the operator of SalesTree.

Contact: support@salestree.app
Address: 74-B (2nd Floor), Sector C Commercial, Bahria Town, Lahore, Pakistan.

By using SalesTree, you acknowledge that you have had the opportunity to read this Policy. Where consent is legally required, we will obtain it separately.

2. Scope

This Policy applies to:

• Visitors to the SalesTree website.
• Individuals who register for or use a SalesTree workspace.
• Authorized users, employees, and team members of customer organizations.
• Personal information entered into SalesTree, including lead and contact records.
• Third-party integrations that customers choose to connect, including WhatsApp Business Platform when available and authorized.
• Communications with our support or business teams.

This Policy does not replace the privacy policies of third-party services. Those services may process information under their own terms and policies.

3. Information We Collect

3.1 Account and workspace information

We may collect:

• Name and business email address.
• Authentication and account identifiers.
• Company or workspace name and business details.
• Role, team, permissions, and workspace membership.
• Account settings, subscription status, and preferences.
• Information required to administer, secure, and support the service.

We do not intentionally collect more account information than is reasonably necessary for the relevant purpose.

3.2 CRM and customer information

SalesTree customers may enter information about their prospects, leads, clients, organizations, and business contacts. This may include:

• Names, telephone numbers, email addresses, and business contact details.
• Lead ownership, assignments, stages, notes, and activities.
• Follow-up schedules, tasks, meetings, and interaction histories.
• Communication records and customer-provided notes.
• Information about customer preferences, requirements, and business relationships.

The customer organization determines what information it enters into SalesTree and is responsible for ensuring that it has a lawful basis to collect and use that information.

3.3 Communications and integration information

When you use an available integration, we may process information needed to establish and maintain the connection.

For a WhatsApp Business Platform integration, where enabled and authorized, this may include:

• WhatsApp Business Account and phone-number identifiers.
• Business and account configuration information.
• Authorization and connection status.
• Message content and metadata processed through the integration.
• Delivery, read, failure, and webhook events where provided by Meta.
• Contact information and interaction history associated with customer conversations.
• Consent, opt-out, and messaging preference records maintained by the customer or through SalesTree.
• Technical information required to maintain the integration.

The exact information processed depends on the features enabled, the permissions granted, and the customer's configuration.

SalesTree does not obtain permission to access a business's WhatsApp information merely because the business subscribes to SalesTree. The customer must authorize the applicable connection through the supported onboarding process.

3.4 Usage, device, and technical information

We may collect technical information necessary to operate and secure SalesTree, including:

• IP address and session information.
• Browser, device, and operating system information.
• Login timestamps and security events.
• Application errors, performance information, and diagnostic logs.
• Feature usage and interaction events needed to improve the service.
• Audit logs of relevant account and workspace actions.

3.5 Billing information

We process subscription status, plan information, invoices, payment status, transaction references, and related billing records as required to administer paid services.

Where payment processing is handled by an external provider, that provider may separately process payment information under its own privacy policy. We do not claim to store complete payment-card details unless the relevant payment implementation actually requires and supports that processing.

3.6 Support and correspondence

We may process information you provide when contacting us, including support requests, feedback, troubleshooting details, and relevant communications.

Please do not submit passwords, access tokens, payment-card security codes, or unnecessary sensitive personal information through support channels.

4. How We Use Information

We use information for legitimate business and operational purposes, including:

1. Creating and administering accounts and workspaces.
2. Providing CRM, lead management, task, follow-up, and collaboration features.
3. Maintaining customer records and interaction histories.
4. Establishing and maintaining integrations that customers authorize.
5. Processing communications through enabled messaging integrations.
6. Providing AI-assisted features when enabled by the customer.
7. Managing subscriptions, trials, invoices, and payments.
8. Providing customer support and responding to enquiries.
9. Maintaining application security, preventing abuse, and investigating suspicious activity.
10. Diagnosing errors, monitoring reliability, and improving performance.
11. Maintaining audit records and enforcing access permissions.
12. Complying with legal obligations and responding to lawful requests.
13. Enforcing our Terms of Service and protecting our rights and the rights of others.

We will not use personal information for materially incompatible purposes without an appropriate legal basis or any required notice or consent.

5. Legal Bases for Processing

Where applicable law requires a legal basis, we process personal information under one or more of the following:

• Performance of a contract or steps requested before entering into a contract.
• Consent, where required.
• Legitimate interests, where permitted and balanced against individual rights.
• Compliance with legal obligations.
• Establishment, exercise, or defence of legal claims.

The applicable legal basis depends on the type of information and the purpose of processing.

6. Customer Responsibilities and CRM Data

SalesTree provides tools for customers to manage their own business relationships and communications.

When a customer organization uploads or enters information about its prospects, employees, customers, or contacts, that organization is responsible for determining the lawful basis for collecting, storing, and using the information.

Customers must ensure that they:

• Have the necessary rights and permissions to upload contact information.
• Provide appropriate privacy notices where required.
• Obtain consent or another valid legal basis for communications where applicable.
• Respect marketing preferences, opt-outs, and do-not-contact requests.
• Configure access permissions appropriately.
• Avoid uploading unlawful, confidential, or sensitive information without an appropriate basis and safeguards.
• Comply with applicable privacy, electronic communications, and marketing laws.

Depending on the processing activity and applicable law, the customer may act as the controller of its customer data and SalesTree may act as a processor or service provider. The roles may differ for account administration, billing, security, and other purposes.

7. WhatsApp and Third-Party Integrations

7.1 Authorized connections

When WhatsApp integration becomes available for a customer, the customer must authorize the connection through the supported Meta onboarding process.

SalesTree will process only the account information and permissions necessary for the configured integration and authorized functionality.

A connection may require additional steps by Meta, including account authorization, business verification, phone-number verification, or eligibility checks. Availability of particular features, including WhatsApp Business App Coexistence, depends on Meta's requirements and the customer's account.

7.2 Meta's role

Meta provides the WhatsApp Business Platform and related infrastructure. When customers use WhatsApp through SalesTree, Meta may independently process information under its own terms, policies, and technical requirements.

SalesTree does not control Meta's independent processing activities.

Customers are responsible for complying with applicable WhatsApp policies, obtaining the necessary messaging permissions and consent, and respecting recipients' opt-outs and preferences.

7.3 Other integrations

Where customers connect other third-party services, we may exchange information necessary to provide the requested functionality.

The information shared depends on the integration, permissions, and configuration selected by the customer.

Customers should review the relevant third party's privacy policy and terms before enabling an integration.

7.4 Disconnection

Customers may disconnect integrations through the available controls or request assistance where necessary.

Disconnecting an integration may stop future synchronization or messaging but does not necessarily delete information previously stored in SalesTree, Meta, or another third-party service. Those records are handled under the applicable retention and deletion rules.

8. AI-Assisted Features

SalesTree may provide AI-assisted features such as suggestions, summaries, classification, scoring, drafting, or automation, depending on the subscription and features enabled.

When an AI feature is used, relevant input may include CRM records, conversation content, task information, and instructions supplied by the user.

AI outputs may be inaccurate, incomplete, or inappropriate for a particular situation. Customers should review AI-generated outputs before relying on them or sending them to another person.

Customers must not use AI features to make unlawful decisions or to process sensitive information without an appropriate legal basis and safeguards.

Where an external AI provider processes information, that provider may process it under its applicable terms and data-processing arrangements. The information sent depends on the feature and configuration.

We do not promise that every AI provider has the same retention, training, or processing practices. Relevant provider terms and configurations apply to the service actually used.

9. Sharing and Disclosure

We do not sell personal information to data brokers.

We may disclose or make information available to the following categories of recipients when necessary:

9.1 Service providers and subprocessors

Providers supporting hosting, databases, authentication, storage, email delivery, monitoring, security, AI processing, payment processing, and customer support may process information on our behalf.

Access is limited to what is necessary for the relevant service, subject to applicable contractual and security requirements.

The specific providers used may change as SalesTree develops. We will update applicable disclosures where required.

9.2 Third-party services authorized by customers

We may exchange information with Meta and other connected services as necessary to provide features expressly enabled or authorized by the customer.

9.3 Legal and safety disclosures

We may disclose information when reasonably necessary to comply with law, respond to lawful requests, protect users, investigate fraud or security incidents, enforce our agreements, or protect legal rights.

9.4 Corporate transactions

Information may be transferred as part of a merger, restructuring, acquisition, or sale of relevant business assets, subject to applicable law and appropriate safeguards.

9.5 With customer direction or consent

We may share information where a customer or individual directs us to do so or provides the required authorization.

10. International Data Transfers

SalesTree and its service providers may process information in Pakistan or other countries where relevant infrastructure and providers operate.

Where personal information is transferred internationally, we will apply safeguards required by applicable law.

Customers should consider the data-processing locations and terms of any third-party services they connect.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the service, maintaining account history, resolving disputes, enforcing agreements, maintaining security, and meeting legal obligations.

Retention depends on the category of information:

• Account and workspace records: Retained while the account is active and for an appropriate period afterward.
• CRM and communication records: Retained according to the customer's use of the service, workspace configuration, and applicable retention settings.
• Integration records: Retained as necessary to operate the connection, maintain auditability, and address security or legal requirements.
• Security and audit logs: Retained for a period appropriate to security, fraud prevention, investigation, and compliance.
• Billing and transaction records: Retained as required for accounting, tax, contractual, and legal purposes.
• Support records: Retained as necessary to resolve issues and maintain relevant business records.
• Backups: May persist temporarily under the applicable backup rotation and recovery procedures.

We will not claim a fixed retention period unless it has been established for the relevant data category. Actual retention periods may be documented in the applicable service settings, data-processing terms, or retention schedule.

Customers remain responsible for managing the records they control and requesting deletion where appropriate.

12. Data Deletion and Account Closure

Customers may request account closure or deletion of personal information by contacting support@salestree.app.

We will assess and process valid requests in accordance with applicable law, contractual obligations, and technical limitations.

Where deletion is required and permitted, we will take appropriate steps to delete or de-identify the relevant information. Some information may need to be retained for legal obligations, dispute resolution, fraud prevention, security, or legitimate recordkeeping.

Information stored by Meta or another third-party provider may need to be deleted through that provider's own processes. Disconnecting an integration does not automatically delete all third-party records.

Backups may retain deleted information temporarily until the applicable backup cycle expires, subject to relevant safeguards.

We will explain any material limitations or lawful reasons for retaining information where applicable.

13. Security

We use appropriate technical and organizational safeguards designed to protect personal information against unauthorized access, loss, alteration, disclosure, and misuse.

Safeguards may include access controls, authentication, role-based permissions, encryption where implemented, secure credential handling, logging, monitoring, backups, and incident-response procedures.

No internet service or storage system can be guaranteed completely secure. We cannot promise that unauthorized access or data loss will never occur.

Customers must protect their credentials, manage user access responsibly, and promptly report suspected unauthorized access.

Where applicable law requires notification of a personal data breach, we will follow the applicable legal requirements.

14. Your Rights and Choices

Depending on applicable law, individuals may have rights to:

• Request access to personal information.
• Request correction of inaccurate information.
• Request deletion or restriction of processing.
• Object to certain processing.
• Withdraw consent where processing relies on consent.
• Request a copy of information where a portability right applies.
• Raise a complaint with a competent authority.

To exercise a right, contact support@salestree.app.

We may need to verify identity and clarify the request before acting. Certain requests may be limited by legal obligations, other individuals' rights, or applicable exemptions.

If your information is held within a customer's workspace, we may direct you to that organization or coordinate with its authorized administrator.

15. Cookies and Similar Technologies

SalesTree may use cookies or similar technologies necessary for authentication, session management, security, preferences, and service operation.

Additional analytics or optional technologies may be used where implemented and permitted by law.

Browser settings may allow you to restrict cookies, although disabling essential cookies may prevent some parts of the service from functioning correctly.

Where consent is required for optional technologies, we will obtain it through an appropriate mechanism.

16. Children's Privacy

SalesTree is a business-oriented service intended for users aged 16 or older.

SalesTree is not designed for children below this age. If we become aware that personal information has been collected from a child below the applicable minimum age without a lawful basis, we will take appropriate steps to address it.

Customers must ensure that their use of SalesTree complies with applicable age-related and data-protection requirements.

17. Changes to This Policy

We may update this Policy to reflect changes in the service, technology, legal requirements, or data-processing practices.

For material changes, we will provide notice by email, in-app notification, or another appropriate method where required.

The updated Policy will identify its effective or revision date. Continued use after the effective date is subject to applicable law and any consent or acceptance requirements that apply to the change.

18. Contact Information

For privacy questions, data requests, or concerns about this Policy, contact:

SalesTree is a product owned and operated by ASAAN HOME (SMC-PRIVATE) LIMITED.