Who we are
GNX Sales (gnxsales.com) is an AI sales agent built and operated by Globonexo India Private Limited, a company incorporated under the Companies Act, 2013, with its registered office at 44, Backary Portion, 2nd Floor, Regal Building, Connaught Place, New Delhi, Central Delhi - 110001, India. In this policy, "GNX Sales", "we" and "us" mean Globonexo India Private Limited.
This policy is published under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 ("DPDP law"), the Information Technology Act, 2000 and the rules made under it. Where we serve customers in the United States, Canada, the UK or the EU, we also honour the rights those laws give you, as set out in section 12.
What this covers, and our two roles
This policy covers our website, the GNX Sales app, and the emails and calls our agent makes. We hold two different roles, and it matters which one applies to you:
For your account, billing and usage data, we are the Data Fiduciary. We decide how that data is used, and this policy is our promise to you.
If a GNX Sales customer emailed or called you, that customer is the Data Fiduciary. We act as their Data Processor. Section 13 explains what you can do.
What we collect
We collect only what the product needs to run. Here is all of it.
| Category | Examples | Where it comes from |
|---|---|---|
| Account | Name, work email, password or sign-in token, role | You, at sign up |
| Business profile | Company name, website, offer, ideal customer, onboarding answers | You, during onboarding |
| Lead data | Names, job titles, companies, business emails and phone numbers of prospects | Your CSV uploads, or our lead data provider at your request |
| Campaigns | Sequences, call scripts, schedules, budgets, agent instructions | You and the agent |
| Conversations | Email threads the agent started, prospect replies, call outcomes and recordings | Your connected mailbox and our voice provider |
| Billing | Plan, invoices, billing address, payment status | You and Razorpay (we never see your full card number) |
| Support | Messages you send us and anything you attach | You |
| Usage and device | Pages viewed, features used, errors, browser, IP address | Cookies and product analytics |
We do not ask for, and you should not upload, sensitive data such as health, financial account, religion, caste or government ID details about your prospects.
How we use it, and on what basis
Every use below has a stated purpose. We do not use your data for anything that is not on this list.
- To run the service you signed up for: sign you in, build your agent, find and enrich leads, write and send emails, place calls, detect replies and book meetings.
- To alert you and hand over: when a prospect replies, we notify you so you can take over, or let the agent reply for you if you turned on auto-pilot.
- To bill you: process payments, issue invoices and keep the records Indian tax law requires.
- To keep things safe: prevent fraud, spam and abuse, enforce send and call limits, and investigate security issues.
- To support and improve: answer your questions and fix what breaks, using aggregated usage data.
- To meet the law: respond to lawful requests from Indian authorities and courts.
Under DPDP law, we rely on the consent you give when you create an account and accept this policy, and on the legitimate uses the Act allows, such as uses you voluntarily provide data for and compliance with law. You can withdraw consent at any time (section 12). Withdrawing it will stop the parts of the service that depend on it, but will not undo processing already done.
Gmail and Google user data
Connecting Google is optional. If you connect Gmail, we ask for three permissions, each for one job:
- gmail.send to send the outreach emails and follow-ups you approved, from your own address.
- gmail.readonly to read only the threads GNX Sales started, so we can spot replies, stop follow-ups and show the conversation in your Inbox.
- userinfo.email to know which Google account is connected.
We store OAuth tokens so campaigns keep running, plus the message metadata and reply content those features need. Disconnecting Google in Settings deletes the tokens. You can also revoke access any time at myaccount.google.com/permissions.
GNX Sales' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or use it to develop, improve or train generalised AI or machine learning models. People at GNX Sales can see it only with your permission, for security, to comply with law, or once it is aggregated and anonymised.
If you connect a custom mailbox instead, we use SMTP to send and IMAP to read replies to campaign messages. Mailbox passwords are encrypted before we store them.
AI voice calls
GNX Sales can call prospects and answer inbound calls with an AI voice agent. Every call opens with a clear statement that the caller is an AI, and calls end automatically after 20 minutes.
- Outbound calls: we store the recording, transcript and outcome (duration, disposition, meeting booked) so you can review them in Call History. Recording laws differ by place, and you are responsible for any notice or consent your prospects' location requires.
- Inbound calls: we use the caller's number and the details they confirm to route the call, and we store the recording, transcript and structured outcome so you can review them in Call History. The AI disclosure at the start of the call tells the caller it may be recorded.
AI processing
To write emails, replies, call prompts and summaries, we send the relevant campaign context, lead details and message history to AI model providers. They process it to return a result to your account. We do not use your workspace data to train models for anyone else, and we choose providers whose terms do not allow them to train on it.
AI can be wrong. That is why replies wait for your approval by default, unless you switch on auto-pilot.
Where your data is stored
Globonexo is an Indian company, but GNX Sales runs in the United States. Our database and backend servers are hosted in US data centres, so your account, lead, campaign and conversation data is stored and processed there.
Some providers in section 8 may process data in other countries to do their part of the job. If you are in India, your data is transferred out of India to the US. DPDP law allows this unless the Government of India restricts a country, and we will stop any transfer that becomes restricted. For customers in the EU or UK, we rely on standard contractual clauses or an equivalent safeguard. Our team in India accesses the data remotely, only as section 11 allows.
How long we keep it
We keep data only as long as its purpose lasts, then erase it, unless a law tells us to keep it longer.
| Data | How long |
|---|---|
| Account and workspace | While your account is open. Erased within 30 days of closing it. |
| Leads and campaigns | Until you delete them or close your account. |
| Google and mailbox credentials | Until you disconnect. Deleted at once when you do. |
| Outbound call recordings | Until you delete them or close your account. |
| Inbound call recordings | Until you delete them or close your account. |
| Security and access logs | At least one year, as the DPDP Rules require. |
| Invoices and tax records | Eight years, as the Companies Act, 2013 and GST law require. |
Security, and what happens if something goes wrong
We encrypt data in transit and at rest, encrypt stored mailbox passwords, limit staff access to what each job needs, and log access to production systems. These follow reasonable security practices under the IT Act and the DPDP Rules.
No system is perfectly safe. If a breach affects your personal data, we will tell you and the Data Protection Board of India without delay, in the form and time the DPDP Rules require, with what happened, what it means for you and what we are doing about it.
Your rights
Under DPDP law you have these rights. Email us to use any of them. We do not charge for it.
A summary of what we hold about you and who we shared it with.
Fix, complete or update anything that is wrong.
Have your data deleted once we no longer need it by law.
As easily as you gave it, at any time.
Raise a complaint with us and get an answer.
Name someone to act for you if you die or cannot act.
Outside India. If you are in the EU or UK, you also have the rights to data portability, to object, and to complain to your local supervisory authority. If you are in California, you can ask what we collect and ask us to delete it, and we confirm we do not sell or share personal information as the CCPA defines it. Canadian users have the access and correction rights PIPEDA gives. We will not treat you differently for using any right.
You can also ask for this policy in Hindi or any other language listed in the Eighth Schedule to the Constitution of India.
If a GNX Sales customer contacted you
Our customers use GNX Sales to email and call business contacts. If you received one of those emails or calls, the business that contacted you decides why, and you can ask them directly. You can also:
- Click the unsubscribe link or reply "stop" in any email, or tell the AI caller you do not want to be called.
- Email [email protected] with your email or phone number. We will block it across that customer's campaigns and tell them, and help you reach them.
Customers must have a lawful basis to contact you and must honour opt-outs. Our Terms of Service require it, and we suspend accounts that ignore it.
Children
GNX Sales is a business tool for people 18 and over. We do not knowingly collect data from anyone under 18. If you think a child has given us data, tell us and we will erase it.
Cookies
We use essential cookies to keep you signed in and secure, local storage for your interface preferences, and PostHog for product analytics. We do not use advertising cookies. The Cookie Policy has the full list and how to turn them off.
Changes to this policy
When we change this policy, we update the date at the top. If a change affects how we use your data in a meaningful way, we will email account owners at least 14 days before it takes effect, and ask for fresh consent where the law requires it.
Contact us
For any question, request or complaint about your data, write to us. Use the subject line "Privacy request" so it reaches the right person.
44, Backary Portion, 2nd Floor, Regal Building, Connaught Place, New Delhi, Central Delhi - 110001, India
We acknowledge within 2 business days and resolve within 30 days.
If you are not satisfied with our answer, you can complain to the Data Protection Board of India once you have used our complaint process.