1. Information We Collect
We collect account details, organization details, onboarding responses, campaign settings, lead data you upload or source through connected providers, support messages, and usage analytics.
2. Connected Services
If you connect Gmail, a custom SMTP/IMAP mailbox, Razorpay, our lead sourcing and enrichment provider, Retell, Supabase, PostHog, or other providers, we process the information needed to provide the requested workflow, such as sending emails, reading campaign replies, processing payments, enriching leads, and logging product events.
2d. Inbound AI Calls
When an organization enables inbound AI calling, we use the incoming phone number and caller-confirmed details to identify the caller, route the call, prevent abuse, and record structured outcomes such as duration, identity status, disposition, and meeting or follow-up requests. Inbound calls begin with an AI disclosure. GNX Sales configures these inbound calls not to retain recordings, transcripts, or provider call logs.
2a. Google User Data
Connecting a Google account is optional. When you connect Gmail, we request three permissions and use each for one purpose: gmail.send to send the outreach emails and follow-ups you have approved from your own Gmail account; gmail.readonly to read the message threads GNX Sales started on your behalf so we can detect prospect replies, cancel scheduled follow-ups, and show the conversation in your Inbox view; and userinfo.email to identify which Google account is connected. We store OAuth access and refresh tokens so campaigns can continue running, along with the message metadata and reply content needed for the features above. We do not read unrelated mail in your mailbox. You can disconnect Google at any time from Settings, which deletes the stored tokens, and you can revoke access from your Google Account permissions page at https://myaccount.google.com/permissions.
2b. Limited Use of Google User Data
GNX Sales' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. We do not sell Google user data, do not use it for advertising, do not transfer it except as necessary to provide or improve the features you requested, to comply with applicable law, or as part of a merger or acquisition, and do not use it to develop, improve, or train generalized AI or machine learning models. Human access to Google user data is limited to what you explicitly permit, what is needed for security purposes such as investigating abuse, to comply with applicable law, or where the data is aggregated and anonymized.
2c. Custom Email Credentials
If you choose a custom email provider, GNX Sales uses the SMTP credentials to send campaign messages and the IMAP credentials to poll the connected inbox for replies to those messages. Custom SMTP and IMAP passwords are encrypted before they are stored. We do not use them for Google Calendar access, and you can disconnect the mailbox from Settings at any time.
3. How We Use Information
We use information to operate the product, authenticate users, create AI agent configurations, generate outbound content, send and track campaign activity, provide support, improve reliability, prevent abuse, and comply with legal obligations.
4. AI Processing
Campaign context, lead details, message history, and onboarding inputs may be sent to AI model providers to generate emails, replies, voice prompts, summaries, and recommendations.
5. Sharing
We share data with service providers that help us run the product, including hosting, database, authentication, payments, analytics, email, voice, and AI infrastructure. We do not sell personal information.
6. Security and Retention
We use reasonable technical and organizational safeguards. We retain information while your account is active and as needed for product, legal, security, and operational purposes.
7. Your Choices
You can update account information, disconnect integrations, request deletion, and opt out of non-essential communications. Campaign recipients should use unsubscribe or reply instructions in outbound messages.
8. Contact
Privacy questions can be sent to support@gnxsales.com.