Privacy Policy

Data Protection, Controller and Scope

We respect the privacy of our customers, users, and other interested parties and process personal data in accordance with applicable data protection laws. These include, in particular, the General Data Protection Regulation (GDPR) of the European Union and the UK Data Protection Act (including the UK GDPR), where applicable.

Scope of This Privacy Notice

This privacy notice applies to the processing of personal data in connection with the following:

Website(s):

• https://www.salesfrank.com

Service(s):

• SalesFrank B2B web application for configuring, managing, and operating AI-powered voice and telephony assistants

Categories of Data Subjects

This privacy notice applies in particular to the following categories of data subjects:

• Visitors to the SalesFrank website

• Employees, contractors, or representatives of SalesFrank customers

Controller

The controller responsible for the processing of personal data within the scope of this privacy notice is:

Another Side Ventures FZ-LLC

operating under the brand SalesFrank

Email: info@salesfrank.com

Content of This Privacy Notice

This privacy notice explains in particular:

• the purposes for which personal data is collected and processed,

• the categories of personal data affected by the processing,

• the legal bases on which personal data is processed,

• which third parties are involved as processors,

• to which third parties personal data may be transferred, and

• further relevant information, including storage periods, data subject rights, and other details necessary to understand the described processing activities.

Purposes of Processing on Our Website (salesfrank.com)

Website Hosting

Our website is created and operated using the online service Framer and is hosted via Framer’s infrastructure. Framer is a product of Framer B.V.

To ensure fast and secure delivery of website content, Framer may use content delivery network (CDN) providers.

Data Collected and Processed

• Technical information (e.g. IP address)

• Device information

• Browser information

• Website visit data

• Usage and interaction data

• Error and log data

• Cookies

Legal Basis

• Legitimate interest pursuant to Art. 6(1)(f) GDPR

• Consent pursuant to Art. 6(1)(a) GDPR (where required, e.g. cookies or CDN usage)

Our Processor

• Framer B.V.

Further Information

Legitimate interest: Provision, security, stability, and optimisation of the website.

Further information can be found in the Framer Privacy Policy.

Testing the AI Telephone Assistant

We offer a feature on our website that allows users to test an AI-powered telephone assistant. After providing the required information, the user receives a test call from the AI assistant.

Test calls may be recorded for quality assurance and service improvement.

Use of this feature may result in data transfers to third countries.

Data Collected and Processed

• Identification data

• Company information

• Contact details

• Voice data and information conveyed verbally to the AI assistant

Legal Basis

• Legitimate interest pursuant to Art. 6(1)(f) GDPR

• EU–US Data Privacy Framework

• Standard Contractual Clauses (SCCs), where applicable

Our Processors

• LiveKit Inc., USA

• Twilio Ireland Limited, Ireland

• ElevenLabs Inc., USA

• Deepgram, Inc., USA

• OpenAI, L.L.C., USA

• New Relic, Inc., USA

• PostHog Inc., USA

• Microsoft Ireland Operations Limited, Ireland

• Hetzner Online GmbH, Germany

Further Information

Legitimate interest: Provision, testing, and improvement of the AI telephony service.

We ask that you do not transmit special categories of personal data (Art. 9 GDPR) when using the test service, including in particular:

• ethnic origin

• political opinions

• religious or philosophical beliefs

• trade union membership

• genetic or biometric data

• health data

• data concerning sex life or sexual orientation

You may prevent data processing by not using the test service.

Contact by Email

We provide a contact email address on our website to allow users to contact us for inquiries, support requests, or feedback.

Data Collected and Processed

• Email address

• Content of the message

Legal Basis

• Legitimate interest pursuant to Art. 6(1)(f) GDPR

Further Information

Legitimate interest: Responding to inquiries and maintaining business communication.

We ask that you do not send special categories of personal data when contacting us by email.

Newsletter Distribution

Users may subscribe to our newsletter to receive updates about SalesFrank and our services.

Data Collected and Processed

• Identification data

• Contact details

• Newsletter interaction data

• Cookies

Legal Basis

• Consent pursuant to Art. 6(1)(a) GDPR

• EU–US Data Privacy Framework

• Standard Contractual Clauses, where applicable

Our Processor

• MailerLite, Inc., USA

Further Information

Further details are available in the MailerLite Privacy Policy and MailerLite Data Processing Addendum.

Consent may be withdrawn at any time.

Online Appointment Scheduling

Users may schedule appointments with us via our website. We use Cal.com for this purpose.

This may involve data transfers to third countries.

Data Collected and Processed

• Identification data

• Contact details

• Company information

• Information on expected telephone usage

• Free-text input provided by the user

• Technical data

• Cookies

Legal Basis

• Consent pursuant to Art. 6(1)(a) GDPR

• EU–US Data Privacy Framework

Our Processor

• Cal.com Inc., USA

Further Information

Further details are available in the Cal.com Privacy Policy.

Please do not submit special categories of personal data when using the appointment booking feature.

You may prevent processing by not using the booking service.

Analysis of User Behaviour

We use analytics and marketing technologies to analyse website usage, optimise our website and marketing campaigns, and attract new customers.

This may involve data transfers to third countries.

Technologies Used

• Google Analytics

• Google Tag Manager

• TikTok Pixel

• Meta Pixel

• LinkedIn Pixel

Data Collected and Processed

• IP address (shortened where applicable)

• Browser and device data

• User behaviour and interaction data

• Event and conversion data

• Cookies

Legal Basis

• Consent pursuant to Art. 6(1)(a) GDPR

• EU–US Data Privacy Framework

Our Processors

• Google Ireland Limited

• TikTok Technology Limited

• Meta Platforms Ireland Ltd.

• LinkedIn Ireland Unlimited Company

Further Information

Additional information can be found in the respective privacy policies of:

• Google

• TikTok

• Meta (Facebook / Instagram)

• LinkedIn

Consent can be withdrawn at any time via the cookie settings.

Displaying Third-Party Content via Plug-Ins and Widgets (Social Media)

We integrate third-party plug-ins and widgets on our website to display content that may be of interest to users, improve user experience, and optimise marketing activities.

The use of such plug-ins may result in the transfer of personal data to third countries.

Facebook Plug-Ins

Our website uses Facebook social plug-ins, identifiable by the Facebook logo or the label “Facebook Social Plug-in”.

When you visit a page containing such a plug-in, your browser establishes a direct connection to Facebook servers. Content is transmitted directly to your browser and embedded into the website.

If you are logged into Facebook, Facebook may associate your visit with your user account. To prevent this, please log out of Facebook before visiting our website.

YouTube Embeds

We embed YouTube videos on our website. YouTube is a service operated by Google.

When you visit a page containing an embedded video, your browser connects directly to YouTube’s servers. Depending on your settings, personal data may be transferred. If you are logged into YouTube, data may be associated with your account.

Data Collected and Processed

• IP address

• Browser information

• Website visit data

• Interaction data with plug-ins and widgets

• Location data

• Cookies

Legal Basis

• Consent pursuant to Art. 6(1)(a) GDPR

• EU–US Data Privacy Framework

Our Processors

• Meta Platforms, Inc. (Facebook), USA

• Google Ireland Limited, Ireland

Further Information

SalesFrank has no influence over the scope or use of data processed by these third-party providers.

Further details can be found in:

• Facebook Privacy Policy

• Google Privacy Policy

Google Fonts

We use Google Fonts, a font service provided by Google, to display fonts consistently on our website.

Data Collected and Processed

• IP address

• Browser information

• Font usage data

• Website visit data

• Cookies

Legal Basis

• Consent pursuant to Art. 6(1)(a) GDPR

• EU–US Data Privacy Framework

Our Processor

• Google Ireland Limited, Ireland

Further information is available in the Google Privacy Policy.

Processing Purposes in the SalesFrank Web Application

App Hosting

Our B2B web application for configuring and managing AI voice assistants is hosted on Microsoft Azure.

Data Collected and Processed

• IP address

• Device information

• Technical usage data

• Error and performance data

Legal Basis

• (Pre-)contractual obligations pursuant to Art. 6(1)(b) GDPR

Our Processor

• Microsoft Ireland Operations Limited (Azure)

Further Information

• Data region: Frankfurt, Germany

Provision of the Offered Service

SalesFrank provides a platform for configuring and managing AI-powered telephone assistants.

Data Collected and Processed

• AI prompts and AI-related configurations

• Technical access data (e.g. API keys)

• Telephone numbers

Legal Basis

• (Pre-)contractual obligations pursuant to Art. 6(1)(b) GDPR

Our Processor

• Microsoft Ireland Operations Limited (Azure)

Further Information

• Hosting region: Frankfurt, Germany

Customer Relationship Management (CRM)

We maintain customer relationship data to manage business communications.

Data Collected and Processed

• Identification data

• Contact details

• Email communication data

Legal Basis

• Legitimate interest pursuant to Art. 6(1)(f) GDPR

• Adequacy decision pursuant to Art. 45 GDPR (UK)

Our Processor

• Attio Limited, United Kingdom

Legitimate interest: Maintaining and managing customer relationships.

Customer Registration

Data Collected and Processed

• Identification data

• Contact details

• Authentication credentials

Legal Basis

• (Pre-)contractual obligations pursuant to Art. 6(1)(b) GDPR

Our Processor

• Microsoft Ireland Operations Limited (Azure)

Payment Processing and Invoicing

Payments are processed via Stripe, using its European entity.

Data Collected and Processed

• Payment and transaction data

• Invoice data

• Technical information

• Cookies

Legal Basis

• Legal obligation pursuant to Art. 6(1)(c) GDPR

• Contract performance pursuant to Art. 6(1)(b) GDPR

• EU–US Data Privacy Framework

• Standard Contractual Clauses

Our Processor

• Stripe Payments Europe Ltd., Ireland

Further information is available in the Stripe Privacy Policy.

Error Detection and System Monitoring

Data Collected and Processed

• Technical error data

• Application logs

• Usage and interaction data

Legal Basis

• Legitimate interest pursuant to Art. 6(1)(f) GDPR

Our Processors

• New Relic, Inc., USA

• PostHog Inc., USA

Legitimate interest: Ensuring system stability and reliability.

Analysis of User Behaviour in the App

Data Collected and Processed

• Usage and interaction data

Legal Basis

• Legitimate interest pursuant to Art. 6(1)(f) GDPR

Our Processor

• PostHog Inc., USA

Legitimate interest: Improving usability and product experience.

Sending Product News and Service Updates

Data Collected and Processed

• Identification data

• Contact details

Legal Basis

• Legitimate interest pursuant to Art. 6(1)(f) GDPR

Our Processor

• Twilio Ireland Limited, Ireland

Legitimate interest: Informing customers about new features and improvements.

Further Information

Transfer of Data to the United States and the Data Privacy Framework

We would like to inform you that on 10 July 2023, the European Commission issued an adequacy decision for the EU–US Data Privacy Framework pursuant to Article 45(1) GDPR.

Accordingly, organisations and companies in the United States that are self-certified under the EU–US Data Privacy Framework and listed in the official public register are deemed to provide an adequate level of data protection for personal data transfers from the European Union.

For processing activities described in this privacy notice that involve US-based service providers certified under the Data Privacy Framework, the legal basis for the data transfer is explicitly stated as “EU–US Data Privacy Framework”.

You may verify the certification status of individual service providers directly via the official Data Privacy Framework website.

Where a service provider is not certified under the Data Privacy Framework, this is explicitly stated in the relevant processing purpose and an alternative valid transfer mechanism is applied.

Standard Contractual Clauses (SCCs)

For data transfers to countries without an adequacy decision, the European Commission has adopted Standard Contractual Clauses (SCCs).

These SCCs contractually obligate the involved parties to maintain a level of data protection comparable to that required within the European Union.

The official SCC texts are published on the European Commission website.

Where applicable, data transfers are carried out on the basis of Standard Contractual Clauses in accordance with Articles 46 et seq. GDPR.

Cookies and Local Storage

This website uses cookies, session storage, and local storage to process personal data and technical information.

Processing is carried out on the legal basis specified for the respective service.

You can control how your browser handles cookies and local storage, including which storage processes are permitted or rejected and how long data is retained, via your browser settings.

Storage Period

We store personal data only for as long as necessary to fulfil the purposes described in this privacy notice or for as long as statutory or contractual retention obligations apply.

Data Transfers to Third Parties

Personal data is only transferred to third parties if:

• this is required by law,

• it is necessary for the provision of our services, or

• you have explicitly consented to the transfer.

SalesFrank does not sell personal data to third parties.

Where necessary, data may be transferred to the following categories of recipients:

• processors listed in this privacy notice

• banks and payment service providers (payment processing)

• shipping service providers (delivery of goods or invoices)

• tax advisors (accounting and financial reporting)

• debt collection agencies (debt enforcement)

• legal advisors (assertion or defence of legal claims)

Protection of Personal Data

We protect personal data using appropriate technical and organisational measures in accordance with current industry standards.

Where possible, this includes in particular pseudonymisation and encryption of personal data during transmission and storage.

Withdrawal of Consent

If you have given consent to the processing of your personal data pursuant to Article 6(1)(a) GDPR, you may withdraw this consent at any time.

Withdrawal does not affect the lawfulness of processing carried out prior to the withdrawal.

Mandatory Provision of Data – Website Use

The provision of personal data when visiting our website is neither legally nor contractually required.

You may avoid providing personal data by not visiting the website.

Certain website functions may not be available if required data is not provided.

Mandatory Provision of Data – Use of Services

There is no general legal or contractual obligation to provide personal data.

However, failure to provide required data may result in:

• no offer being made,

• no contract being concluded, or

• services not being available or usable in full.

In some cases, the provision of personal data is required by legal obligations (e.g. tax law) or contractual requirements.

Where processing is based on consent, there is no obligation to provide such data; however, refusal or withdrawal of consent may limit service availability.

Rights of Data Subjects

You may exercise the following rights at any time:

Right of Access

You have the right to request information about whether and which personal data is processed and to receive a copy of such data.

Right to Rectification

You may request correction of inaccurate or incomplete personal data.

Right to Data Portability

Where processing is automated and based on consent or contract, you may request your data in a structured, commonly used, machine-readable format.

Right to Restriction of Processing

You may request restriction of processing under certain legal conditions.

Right to Erasure

You may request deletion of your personal data where legally permissible.

Right to Object

You may object to the processing of your personal data for specific purposes.

This may result in certain services no longer being available.

Right to Lodge a Complaint

You may lodge a complaint with a competent supervisory authority if you believe your data is being processed unlawfully.

All rights may be exercised by contacting us at the email address stated at the beginning of this privacy notice.

Changes to This Privacy Notice

We reserve the right to update this privacy notice from time to time.

All changes will be published on this page with an updated revision date.

Date of publication of the current version:

14 January 2026