Privacy and Data Handling
Sales Storm processes account information, brand profiles, user prompts and uploads, generated campaign assets, operational logs and publishing records to provide the service. Information is shared with service providers and connected platforms only as needed for the relevant function, user instruction, security or legal requirement. The Privacy Policy describes these practices and applicable rights in more detail.
Account Security
Account access is protected by authentication controls. Passwords are stored using a one-way password-hashing process rather than in readable form. Users are responsible for protecting credentials, limiting access to authorised personnel and reporting suspected compromise. Administrative and application access should be limited according to role and operational need.
Connected Social Accounts
YouTube connection and publishing are beta functionality for accounts that have provider approval and grant the requested permissions. Instagram and TikTok production publishing are not currently available; any visible sandbox or simulation state is not a production connection. Platform rules and availability remain under each provider's control.
OAuth Token Handling
OAuth tokens are handled by the server for connected-account operations and stored in encrypted form where persisted by the application. Access is intended to be limited to service functions that require the tokens. Supported disconnect flows remove local connected-account references and attempt platform revocation where available. Token expiry and provider behaviour can affect the connection.
AI-Generated Media
Prompts, brand inputs and uploaded assets may be sent to AI and media-generation providers to perform requested analysis or generation. Generated scripts, images, voices and videos can contain errors, bias, unexpected similarities or unsuitable material. Users must review outputs, secure rights to inputs and comply with laws and platform policies before publication.
Infrastructure and Service Providers
Sales Storm uses providers for cloud infrastructure, storage, databases, email, AI and media generation, media processing and connected social services. Provider use can vary by feature and deployment. Service providers may process information in the United States and other countries. Sales Storm does not currently publish a detailed public subprocessor register.
Data Retention and Deletion
Retention is based on service delivery, account state, operational security and legal obligations. Users can request deletion of profile, brand, uploaded, generated, token and publishing data. Limited transaction records, security logs, legal records or backups may remain where required or reasonably necessary. See the public Data Deletion Instructions.
Responsible AI Principles
- Human review: generated content should be reviewed before use or publication.
- Transparency: users should make synthetic-media, advertising and sponsorship disclosures required by law or platform rules.
- Rights and consent: users must have permission for brands, media, personal information, likenesses and voices they submit.
- Safety and fairness: the service must not be used for unlawful discrimination, deception, abuse or rights violations.
- Accountability: users remain responsible for campaign claims, publishing choices and audience impact.
Incident Reporting
Available
Report a suspected security or privacy incident to . Include a concise description, affected account or workspace, relevant timestamps and a safe way to contact you. Do not email passwords, OAuth tokens or other secrets.
Compliance Documents
The statuses below describe current document availability; they are not certifications or assurances.
| Item | Status | Current position |
|---|---|---|
| Privacy Policy, Terms, Cookie Policy and deletion instructions | Available | Published in this Legal & Trust section. |
| Formal Data Processing Addendum (DPA) | Not published | Not yet published as a standard self-service document. |
| Detailed subprocessor register | Not published | Provider categories are described in the Privacy Policy. |
| Security white paper | Not published | Current posture is summarised on this page. |
| Service Level Agreement (SLA) | Not offered | No public SLA or guaranteed uptime is currently offered. |
| SOC 2 | Not certified | Sales Storm is not SOC 2 certified and no report is currently available. |
| ISO 27001 | Not certified | Sales Storm is not ISO 27001 certified. |
Subprocessors
Detailed register not published
The Privacy Policy lists relevant provider categories. B2B customers may ask for current information through Contact.
Service Status
No public status page
No public SLA or guaranteed service level is currently offered. For a current operational issue, contact .