Privacy Policy

1. Who we are

Sales Commander is an AI sales trainer: you practice closing skills in conversations with AI characters. The service is operated by Sales Commander LLC (address: 1780 Overbrook Ave, Unit A, Clearwater, FL 33755, USA), which acts as the data controller. Contact for data matters: office@salescommander.ai.

2. What data we process

• Account: e-mail and password (stored securely) — on versions of the service with sign-in.
• Training: the text of your lines and the AI characters' lines, verdicts, coach debriefs, and your skill progress.
• Voice: in voice mode, audio is processed in real time for speech recognition and speech synthesis. We do not store audio recordings — only the text transcript of the conversation is kept.
• Technical data: an irreversibly hashed IP address (for free-access limits), a browser identifier in localStorage, a language cookie, and a sign-in cookie. After separate consent, Meta Pixel, TikTok Pixel and Google tags (Google Ads and Google Analytics) also receive page-view, registration, checkout-start, and confirmed-purchase events (amount and currency, but no card data). Along with these events the advertising platforms also receive your email address in hashed form — see section 3. The same consent enables our own acquisition statistics: a separate random identifier in localStorage, the page you arrived on, the referring domain, campaign tags from the link, and the country our hosting provider derives from your IP address (the address itself is not stored in these statistics). We use it to understand where visitors come from; our marketing agency sees it and may copy it, without names or e-mail addresses, into its own working tools — see section 3. The same choice governs the visit counter, which records clicks and scrolling on the site — see section 7.

3. Who we share data with

To run the AI buyer and the coach, and to host and store the service itself, data is shared with our processors. All of them are US companies and process data on our instructions:

• Anthropic (Claude models) — plays the buyer, issues the verdict, writes the debrief, and helps us investigate service failures.
• ElevenLabs — recognizes your speech and voices the buyer and the coach.
• Google (Gemini models) — the buyer's voice mode while it is switched on.
• Supabase — the service database: account, progress, and training transcripts.
• Vercel — hosting.
• Resend — service e-mail: address confirmation, password reset, digests.

Our processors may not train their models on your data: with Anthropic this follows from its commercial terms, with Google from the terms of paid access to the Gemini models (we switch the voice mode on only under paid access), and with ElevenLabs the use of data for training is switched off in our account settings. Anthropic deletes what we send within 30 days; longer only if it suspects a breach of its own rules.

Transfers to the United States rely on the European Commission's standard contractual clauses, which are part of our agreement with every processor (art. 46 GDPR). We will send you a copy on request at office@salescommander.ai.

After your consent, advertising events are sent to Meta Platforms, TikTok and Google to measure and optimize advertising. Registration and confirmed-purchase events carry your email address in hashed form (SHA-256), and the platforms' pixels and tags may add that hash to other events on the site; we do not send advertising platforms the address in plain text. The platform compares the hash with the hashes of its own users' addresses to link the event to an ad it showed. The registration event sent from our server to Meta Platforms and TikTok also carries your IP address, browser details (user agent), and the platform's own advertising cookie identifier. Payments are handled by payment services — see section 8. The visit counter's record of clicks and scrolling goes to the analytics application that our marketing agency runs for us — see section 7.

Our marketing agency, a company from the United States, works for us under a confidentiality agreement and only on our instructions. Inside our own systems it sees data about our users: name and e-mail address, the text of training conversations and the coach's debrief, the messages you send with the “Something's not working” button, payment records with the payer's name, e-mail address and billing address, and the steps from the first visit to the payment. The agency needs this data to analyze how people find the product, buy it and use it. It may open names, e-mail addresses, conversation texts and the coach's debrief for two purposes only: to find out why a payment did not go through or why someone is stuck, so that we can help, and to find where and why people leave a conversation. For its work the agency may copy into its own spreadsheets, reports and advertising accounts extracts in which a person is shown by a number, with no name, e-mail address, payment details or conversation text; it deletes such an extract when the task is done and may pass on from it to advertising platforms only conversion events. It may analyze conversation texts and the coach's debrief with Claude by Anthropic under a commercial agreement that does not allow the inputs to be used to train models; before that, it removes from the text any name, e-mail address, phone number or company name you mentioned in the conversation. Beyond that, it may not take the data outside our systems or enter it into any other tool, and it may not use it to train models, sell or share it, or contact you on its own initiative.

Do not enter real data about your clients or other people during training: names, phone numbers, addresses, contract numbers. The trainer does not need them: it builds a skill, and a description of your product and of the buyer's role is enough for that.

4. Why and on what legal basis

We process data to provide the service (performance of a contract), to prevent abuse and enforce limits (legitimate interest), to find and fix failures and improve the service (legitimate interest), and — where required — based on your consent.

To find the cause of a failure, we read the transcripts of the individual sessions where the service went wrong or that you reported with the “Something's not working” button. Training AI models on your data is not part of this purpose.

5. How long we keep it

Account data and progress — for as long as your account exists. Transcripts of training and anonymous challenge sessions — up to 12 months. We will delete data earlier at your request.

6. Your rights

You may request access to and a copy of your data, rectification, erasure, restriction of processing, and portability; withdraw consent; and lodge a complaint with a data-protection authority. Send requests to office@salescommander.ai — we respond within 30 days.

7. Cookies and local storage

The rule depends on your country. In the European Union, the European Economic Area, the United Kingdom and Switzerland we ask for consent BEFORE any counter is installed: until you accept, we use only the strictly necessary language and sign-in cookies plus a localStorage identifier for counting free attempts. In other countries Meta Pixel, TikTok Pixel, Google tags and our acquisition statistics start right away, and you can opt out at any time with the Cookie settings button; after opting out no new advertising events are sent. Some events (registration and confirmed purchase) are sent from our server rather than your browser and follow the same choice. You can change your choice using the Cookie settings button; after withdrawal no new advertising events are sent and the acquisition identifier is deleted from your browser. If Do Not Track or Global Privacy Control is enabled in your browser, acquisition statistics stay off whichever button you pressed.

The visit counter on the site follows the same choice. It counts visits and records where you click and how far you scroll on each page, so that we can see how the pages are used and improve them. The counter does not record text you type. Its record goes only to the analytics application that our marketing agency runs for us. After you opt out with the Cookie settings button, the counter stops.

Regardless of your choice, we count page loads and button clicks on the site: the date, the page, and the campaign tags from the link you followed. This count uses no cookies or localStorage and holds no identifier, IP address or device details, so its rows cannot be linked to each other or to you. With Do Not Track or Global Privacy Control enabled, it does not run either.

8. Payments

We never receive or store card data: payments go through external payment services governed by their own policies.

In the iPhone and iPad app, purchases are processed by Apple through the App Store. We receive only Apple's signed record of the purchase (transaction number, product, price, currency and date) so we can add the tokens to your account.

9. Business transfer

If the service or part of it passes to another owner — a sale, a merger, a reorganization — your data passes to the successor, who continues to process it under this policy. We will announce this in the service or by e-mail before the transfer; if advance notice is not possible, no later than seven days after it. You may delete your account before the transfer takes place.

If the service closes or its owners separate, we will write to you and ask you to choose which of them your account and training history goes to. Only the one you choose receives your data; if you do not answer, the data is deleted.

We may send you one message carrying the contact details of a person who has ceased to be an owner of the service, together with an invitation to subscribe to their mailing list. We send such a message ourselves, to our own list — your address is not passed to them, and you subscribe only by your own action.

10. Who the service is for

The service is intended for sales professionals and persons over 18.

11. Changes to this policy

If this policy changes, we will update this page and the date above; material changes will be announced in the service.