Privacy Policy

1. Introduction

SalesXMachina ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website and platform. We comply with the General Data Protection Regulation (GDPR) and all applicable data protection laws.

2. Responsible Party

The party responsible for data processing on this website is:

Axel Metzger
Responsible Party: Axel Metzger
Munich, Germany
Email: axel@salesxmachina.ai
Website: https://salesxmachina.ai

3. Information We Collect

We collect the following types of data:

Information You Provide

• Account information: name, email address, phone number, company details
• Payment information for paid subscriptions
• Imported lead and campaign data
• Campaign content and outreach messages
• Support inquiries and communications
• Ratings, comments, and preferences regarding AI-generated content

Automatically Collected Data

• Usage data: pages visited, features used, time spent on platform
• Device information: browser type, operating system, screen resolution
• Server log files: IP address, referrer URL, access time
• Cookie and tracking data

Data from Third-Party Sources

• LinkedIn profile data (with your permission via Sales Navigator)
• Publicly available business information for lead enrichment

4. How We Use Your Information

We use your data for the following purposes:

• Providing and operating our platform
• Generating AI-personalized outreach messages
• Improving and developing our services
• Processing payments and billing
• Communicating about your account and service updates
• Analyzing platform usage for optimization
• Fulfilling legal obligations
• Ensuring platform security and fraud prevention

5. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds pursuant to Art. 6 GDPR:

• Contract performance (Art. 6(1)(b) GDPR): Processing necessary for providing our contractually agreed services.
• Consent (Art. 6(1)(a) GDPR): When you have given us your explicit consent for data processing, e.g., for marketing communications.
• Legitimate interest (Art. 6(1)(f) GDPR): Processing to protect our legitimate business interests, e.g., platform optimization and security.
• Legal obligation (Art. 6(1)(c) GDPR): Processing to comply with legal retention obligations and tax regulations.

6. Cookies and Tracking

Our website uses cookies and comparable technologies such as local storage. Cookies are small text files stored on your device. We distinguish between functions that are necessary to operate the site and services you are free to enable or disable.

Storing information on your device or accessing it is only permitted with your consent under Section 25(1) TDDDG. Exempt are functions strictly necessary to operate the website (Section 25(2) no. 2 TDDDG). We base the subsequent processing of your data on your consent under Art. 6(1)(a) GDPR.

On your first visit we ask via a banner which categories you want to allow. Without your consent we load neither reach measurement nor visitor identification. You can change your decision at any time with effect for the future.

Necessary functions

These functions are required to operate the website and the platform and cannot be disabled. They include the session cookie, authentication of your login, CSRF protection for our forms, and storing your light/dark preference and your cookie selection. No consent is required for these under Section 25(2) no. 2 TDDDG.

Reach measurement: Google Analytics

With your consent we use Google Analytics 4, a web analytics service provided by Google Ireland Limited. We use it to understand which content gets read and how we can improve our website. IP anonymisation is enabled, so your IP address is truncated before it is evaluated.

• Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
• Cookies: _ga and _ga_SG67PQE5ZG, lifetime up to 2 years
• Purpose: reach measurement, analysis of usage behaviour, improvement of our offering
• Legal basis: consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG
• Third country transfer: data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; the European Commission Standard Contractual Clauses apply in addition.
• More information: https://policies.google.com/privacy

Visitor identification: Leadinfo and SalesViewer

With your consent we use visitor identification services. They match your IP address against databases to determine which company our website was accessed from. The aim is to identify the company, not to identify you as an individual. Because IP addresses can constitute personal data, we obtain your consent for this.

• Leadinfo: Leadinfo B.V., Rotterdam, Netherlands. Sets the cookies _li_id and _li_ses (lifetime up to 2 years) and entries in local storage.
• SalesViewer: SalesViewer GmbH, Bochum, Germany. Delivered via the domain slsnlytcs.com. According to the provider it operates without cookies.
• Purpose: identification of visiting companies, sales and market research
• Legal basis: consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG
• Processing takes place in the EU. Data processing agreements under Art. 28 GDPR are in place with both providers.
• More information: https://www.leadinfo.com/en/privacy-statement/ and https://www.salesviewer.com/en/data-protection/

You can change or fully withdraw your consent at any time via the cookie settings. Withdrawal takes effect for the future and does not affect the lawfulness of processing carried out until then. Independently of this, you can delete or block cookies through your browser settings. Blocking necessary cookies may limit the functionality of the platform.

Open cookie settings

7. Data Sharing and Disclosure

We do not sell your personal data to third parties. Data may be shared in the following cases:

• Hosting and infrastructure providers: For the technical operation of our platform (data centers in the EU).
• Payment service providers: For secure payment processing.
• Email service providers: For sending transactional and service-related messages.
• Analytics and visitor identification services: Google Analytics, Leadinfo and SalesViewer, in each case only with your consent. See section 6 for details.
• Authorities: When we are legally obligated or to protect our rights.

We have concluded Data Processing Agreements (DPA) pursuant to Art. 28 GDPR with all data processors.

8. Data Security

We implement comprehensive technical and organizational measures to protect your data:

• TLS/SSL encryption for all data transmissions
• Strict access controls and permission management
• Regular security reviews and updates
• All data stored in EU data centers
• Regular encrypted backups

9. Data Retention

Your account data is stored as long as your account is active. After account deletion, your personal data will be removed within 30 days, unless legal retention obligations apply.

Certain data (e.g., invoices, contracts) may be retained for up to 10 years due to commercial and tax law requirements.

10. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: You can request information about your stored personal data, its origin, recipients, and the purpose of processing at any time.
• Right to rectification: You have the right to have inaccurate or incomplete data corrected.
• Right to erasure: You can request the deletion of your personal data, unless legal retention obligations apply.
• Right to restriction: You can request the restriction of processing of your data.
• Right to data portability: You have the right to receive your data in a common, machine-readable format or have it transferred to a third party.
• Right to object: You can object to the processing of your data at any time, especially when processing is based on legitimate interest.
• Right to withdraw consent: You can withdraw any given consent at any time. The legality of processing carried out before withdrawal remains unaffected.

To exercise your rights, contact us at axel@salesxmachina.ai.

You have the right to lodge a complaint with a supervisory authority. The competent authority is the Bavarian State Office for Data Protection Supervision (BayLDA).

11. International Data Transfers

Your data is primarily stored and processed in EU data centers. If a transfer to third countries is required, we ensure an adequate level of data protection through Standard Contractual Clauses (SCCs) or adequacy decisions of the European Commission.

12. AI Processing and LinkedIn Integration

SalesXMachina uses artificial intelligence to generate personalized outreach messages. This involves automated processing of your data, preferences, and target audience information. You have the right to review, modify, or reject any AI-generated content before it is sent.

Our platform integrates with LinkedIn via your provided Sales Navigator access. We use your LinkedIn access exclusively for the functions you have authorized. Your use of LinkedIn through our service is additionally subject to LinkedIn's Privacy Policy and Terms of Service.

When using the SalesXMachina platform, we process account information, campaign data, outreach texts, and performance metrics. All data is processed and stored in EU data centers.

13. Children's Privacy

Our service is not intended for persons under the age of 18. We do not knowingly collect personal data from minors.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our platform. The current version is always available on this page.

15. Contact

If you have any questions about data protection, please contact us at:

axel@salesxmachina.ai

As of: March 2026