Your deletion options
You can request deletion of account, brand, media and connected-account data. Our dedicated page explains what to include.
View Data Deletion Instructions1. Who We Are
That company is the controller or business responsible for personal information covered by this policy, except where another party determines how information is processed.
2. Scope
This policy applies to the Sales Storm website, application, support interactions and related services. A third-party service or social platform has its own privacy practices, which also apply when you use that service.
3. Information We Collect
Information you provide directly
- Account and authentication information, such as name, email address, password credentials in protected form, role and account preferences.
- Business, brand and workspace information, including brand profiles, product details, audience descriptions and campaign settings.
- Prompts, scripts, captions, instructions and other text submitted to the service.
- Uploaded images, videos, logos, audio and other assets, together with related file information.
- Support, privacy and other communications sent to us, including messages submitted through our contact form.
- Billing and transaction information if paid features are offered. Payment providers may process payment-card details directly.
Information created through the service
- Generated campaigns, scripts, images, videos, voiceovers, captions and related media.
- Campaign configuration, job status, approval decisions, publishing schedules and publishing records.
- Performance or engagement information returned by a connected social platform where the account has granted relevant permission.
Connected social accounts
When you connect a social media or video account, we may receive an account identifier, display name, handle, granted permissions, access and refresh tokens, token expiry information and content or analytics made available under those permissions. Tokens are used to maintain the connection and perform actions you request. The application stores persisted OAuth tokens in encrypted form.
YouTube API Services
Sales Storm uses YouTube API Services. Google's handling of information is described in the Google Privacy Policy.
If you choose to connect YouTube, Sales Storm accesses and stores only the categories needed for the features and permissions you select:
- Channel identity: the YouTube channel ID, channel name and handle are used to verify the channel selected during connection and to show where a requested upload will be sent.
- Uploaded-video records: YouTube video identifiers, links, upload and processing status, and provider-reported privacy status are used to complete a user-requested upload, prevent duplicate uploads, reconcile uncertain provider responses and show the publication result.
- YouTube video statistics: provider-returned view, like and comment counts are used to show the connected channel owner performance information for that owner's uploaded videos.
- Optional YouTube Analytics data: if the user separately grants the YouTube Analytics read-only permission, Sales Storm may access views, estimated minutes watched, average view duration and average view percentage for the owner's uploaded videos. These values are shown only in that owner's account. Sales Storm does not put YouTube API-derived metrics into cross-customer or global AI learning.
- OAuth credentials and permission metadata: access tokens, refresh tokens, granted scopes and token-expiry information are used to maintain the authorised connection and make the YouTube requests the user initiates or permits.
YouTube-authorised data is stored in the Sales Storm application database. Persisted OAuth tokens are encrypted. Provider analytics are kept separate from cross-user global learning, and Sales Storm does not calculate or display a separate YouTube engagement score. We use lifecycle checks to refresh, revalidate or remove stored YouTube API data as required by the applicable YouTube API Services policies. General database, security and backup handling is described elsewhere in this policy; no additional product-specific retention promise is made here.
You can disconnect YouTube in Settings → Connected Accounts. Sales Storm then attempts to revoke the Google credential and, after revocation succeeds or Google confirms it is already invalid, removes the locally stored YouTube-authorised channel, video and analytics data for that connection. A provider failure remains visibly pending for reconciliation rather than being reported as completed. Disconnecting Sales Storm does not delete a video already stored by YouTube.
You can also review or revoke Sales Storm's access from your Google Account security permissions. Sales Storm periodically revalidates authorisation so an externally revoked connection stops further refresh and analytics work and its stored YouTube API data can be removed.
To request deletion, use the in-application account-deletion control, follow the Data Deletion Instructions, or email info@orpheo.space. Deleting data held by Sales Storm does not delete data held by YouTube; use YouTube itself or another authorised client that supports YouTube deletion for content stored by YouTube.
Technical and usage information
We may collect internet protocol addresses, timestamps, request and error logs, browser and device information, operating system details, page activity, authentication events, security signals and similar diagnostic information. We also use cookies and browser storage as described in our Cookie Policy.
4. How and Why We Use Information
| Purpose | Examples | Legal basis where GDPR applies |
|---|---|---|
| Provide the service | Create accounts, generate media, store projects, connect platforms and publish when instructed. | Performance of a contract; steps requested before entering a contract. |
| Operate and improve | Diagnose failures, understand feature use, improve workflows and maintain service quality. | Legitimate interests in operating and improving a SaaS service. |
| Protect users and the service | Authenticate accounts, investigate abuse, secure connections and enforce terms. | Legitimate interests; legal obligations where applicable. |
| Communicate | Provide support, respond to contact-form submissions, send operational notices and answer privacy requests. | Contract performance, legitimate interests or legal obligations. |
| Measure site performance | Cookieless, aggregated analytics on the public marketing pages to understand traffic and improve content — no personal profiles are built. | Legitimate interests in operating and improving the site. |
Where we rely on legitimate interests, we consider the nature of the information, the expected benefit and the potential effect on individuals. You may object where applicable. Where processing relies on consent, consent can be withdrawn for future processing.
5. Service Providers and Subprocessors
We use service providers to run the platform. Depending on the feature and deployment configuration, these may include providers of:
- cloud hosting, storage, content delivery, databases and backups;
- account authentication, email delivery, monitoring and customer support;
- AI-based text, image, audio and video generation or analysis;
- media processing and file transfer;
- cookieless website analytics;
- payment processing if paid services are offered; and
- professional, legal, security and operational support.
These providers may process information on our behalf under contractual or other appropriate restrictions. Sales Storm does not currently publish a detailed public subprocessor register; current information may be requested through our Contact page.
6. Social Platforms and Other Third Parties
Where a provider integration is enabled, connecting an account sends and receives information under the permissions you approve. YouTube connection and publishing are beta functionality and have not been represented as approved or audited by YouTube. Instagram and TikTok production publishing are not currently available. A supported publishing action may send media, captions, titles, thumbnails and scheduling or visibility choices to the selected platform. Those platforms act under their own terms and privacy policies. We may also disclose information when you direct us to, when needed to complete a transaction, or in a business reorganisation subject to appropriate protections.
7. Legal Disclosures
We may preserve, access or disclose information when reasonably necessary to comply with law or legal process; protect the rights, safety and security of users, the public, Sales Storm or others; investigate fraud or abuse; or establish, exercise or defend legal claims. We assess requests in light of applicable law.
8. International Data Transfers
Sales Storm and its providers may process information in the United States and other countries. Laws in those locations may differ from the laws where you live. Where required, we use an available lawful transfer mechanism or other appropriate safeguards. We do not represent that all data remains in one country.
9. Retention
We retain information for as long as reasonably needed to provide the service, maintain account and project history, fulfil user instructions, protect the platform, resolve disputes and meet legal, tax, accounting or reporting duties. Retention varies by data type, account status, system design and legal requirements. We may retain limited security logs, transaction records, backups or records of a request after other information is deleted. Information is deleted, anonymised or otherwise removed from active use when it is no longer needed, subject to technical and legal constraints.
10. Security
We use administrative, technical and organisational measures intended to protect information against unauthorised access, loss, misuse or alteration. Measures evolve with the service and may include access controls, authentication safeguards, protected token storage, operational logging and restricted server-side processing. No internet service or storage system is completely secure, so absolute security cannot be guaranteed. Visit the Trust Center for current posture information.
11. Your Choices and Rights
Depending on where you live and subject to legal conditions and exceptions, you may have rights to access, correct, delete, restrict or object to processing of personal information; receive portable data; withdraw consent; and appeal or complain to a regulator. You can disconnect supported social accounts in the application. Disconnecting limits future access but may not remove content already published to a third-party platform.
To make a request, email or follow the Data Deletion Instructions. We may request information needed to verify identity, authority or account ownership. An authorised agent may submit a request where permitted by law, and we may verify the agent's authority.
GDPR and related rights
If the GDPR, UK GDPR or a similar law applies, you may also have a right to lodge a complaint with the data protection authority in your country or region. You may contact us first so we can try to address the concern.
California privacy rights
California residents may have rights under California law to know about, access, correct or delete certain personal information and to receive information about disclosures. Sales Storm does not currently describe its ordinary service-provider disclosures as sales of personal information. Whether a particular legal obligation or opt-out right applies can depend on the business relationship, processing activity and applicable statutory thresholds. We will evaluate verified requests under the law that applies at the time.
12. Automated Processing and AI-Generated Content
Sales Storm uses automated systems and third-party AI services to analyse inputs and generate scripts, images, audio, videos, captions, predictions or recommendations. Outputs may be inaccurate, incomplete, biased or unsuitable. Users should review generated content before relying on or publishing it. The service is not intended to make legal or similarly significant decisions about individuals solely by automated means.
13. Children
Sales Storm is a business-oriented service and is not intended for children under 18. We do not knowingly invite children under 18 to create accounts. If you believe a child has provided personal information, contact us so we can review and take appropriate action.
14. Data Deletion
Account holders may request deletion of account profile data, brand information, uploads, generated assets, connected-account references, OAuth tokens, and campaign or publishing records, subject to legal and operational exceptions. Details are available at sales-storm.com/data-deletion.html.
15. Policy Updates
We may update this policy as the service, providers or legal requirements change. We will post the revised policy on this page and update the date above. Where required, we will provide additional notice or seek consent.