Privacy Policy
Last Updated: December 4, 2025
This Privacy Policy explains how SalesCakeCRM, LLC (“SalesCakeCRM,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit our website, use our software-as-a-service (SaaS) platform, or interact with us through SMS, MMS, phone calls, AI-powered agents, email, or social media.
This Privacy Policy is designed to comply with global data laws, including:
GDPR (EU/UK)
CCPA/CPRA (California)
ColoPA (Colorado)
PIPEDA (Canada)
LGPD (Brazil)
Australian Privacy Act
U.S. state privacy laws
CAN-SPAM, TCPA, CTIA, A2P 10DLC rules
PECR (UK), ePrivacy Directive (EU)
By using the Site or Services, you accept this policy.
1. Who We Are (Controller Information)
SalesCakeCRM, LLC
77711 Flora Rd
Palm Desert, CA 92211
United States
Phone: 760-904-4881
Email: [email protected]
For GDPR purposes, SalesCakeCRM acts as:
Data Controller for information we collect directly
Data Processor for CRM/contact data uploaded by customers
2. Scope of This Policy
This policy covers personal information collected from:
Website visitors
SalesCakeCRM account holders
Team members and administrators
Prospective customers
Individuals who interact with our SMS, calls, AI voice agents, or emails
End users whose data is stored by our customers
Customers are responsible for obtaining all required consents for the CRM data they upload.
3. Information We Collect
3.1 Information You Provide
Name, business name
Email, phone number
Payment information (processed by PCI-compliant processors)
CRM and contact data you upload
Messages, calls, recordings (where allowed), AI interactions
Account settings, form submissions, support communications
Surveys, testimonials, or feedback
3.2 Information Collected Automatically
IP address
Device identifiers and browser details
Usage patterns and clickstream behavior
Login events and security logs
Session recordings (where enabled)
Performance and diagnostic data
3.3 Cookies, Pixels & Tracking
We use:
Necessary cookies
Analytics cookies
Functionality cookies
Advertising/retargeting cookies
Third-party pixels (Meta, Google, TikTok, LinkedIn, etc.)
Consent is collected where required (EU/UK/Canada/Australia).
3.4 Information From Third Parties
Payment processors
Email/SMS/telephony partners
Analytics platforms
Identity verification tools
CRM integrations
Advertising and social media platforms
4. How We Use Personal Information
4.1 Service Delivery
Account creation and authentication
CRM functionality, pipelines, workflows
AI agents, SMS/MMS, emails, voice calling
Integrations, reporting, analytics
4.2 Communications
Support replies
Service updates
Onboarding and training
Security alerts
Billing notices
4.3 Marketing
With consent where required:
Email campaigns
SMS/MMS marketing
Retargeting ads
Lookalike audiences
Pixel-based advertising
Promotions and educational content
4.4 A2P Messaging and Calling Compliance
By providing your phone number, you consent to:
Receiving SMS/MMS
Receiving automated or AI-assisted phone calls
Message/data rates may apply
Messages may be recurring
Opt-Out: Reply STOP at any time.
Transactional messages may still be sent where permitted by law.
4.5 Improving the Platform
Detecting bugs
Optimizing system performance
Developing new features
Conducting analytics and research
4.6 Legal & Compliance
Enforcing agreements
Preventing fraud or abuse
Complying with laws and government requests
5. AI Systems & Automated Decision-Making
SalesCakeCRM uses AI-powered tools to support:
Conversation handling
Lead qualification
Appointment scheduling
Suggested responses
Workflow automation
These systems:
Do not make legally binding or financially significant decisions
Are supervised and may be overridden by humans
Are used to assist—not replace—human judgment
6. Sensitive Personal Data
SalesCakeCRM does not intentionally collect sensitive data, including:
Health information
Biometric identifiers
Government-issued IDs
Religious or political beliefs
Sexual orientation
Union membership
Users must not upload such data into the platform. If we discover such data, we may delete it.
7. Legal Bases for Processing (GDPR/UK)
We rely on:
Contract necessity
Legitimate interests (security, fraud prevention, product improvement)
Consent (cookies, marketing, recordings where required)
Legal obligations
8. How We Share Information
8.1 Service Providers
We disclose data to trusted third parties for:
Hosting
Telephony/SMS/email sending
Payment processing
Analytics
Support ticketing
Marketing
Security
They are contractually restricted to necessary processing only.
8.2 Customer-Uploaded Data
Customers acting as Data Controllers determine:
The data they upload
The purpose of processing
How long they retain data
SalesCakeCRM is not responsible for:
The accuracy
The legality
Or the content
of data uploaded by customers.
8.3 Business Transfers
Data may be transferred during mergers, acquisitions, or restructuring.
8.4 Legal Requirements
We disclose data to:
Comply with laws
Protect rights and safety
Respond to lawful requests
8.5 De-Identified Information
Aggregated or anonymized data may be used for analytics or research.
9. Cookies & Tracking Technologies
We provide:
Cookie banners where required
Consent management tools
Links to third-party ad preference tools
10. International Data Transfers
We store most data in the United States.
When transferring data internationally, we use:
Standard Contractual Clauses (SCCs)
UK Addendum
Data Privacy Framework (where applicable)
Other recognized safeguards
11. Data Retention
We retain data as long as necessary to:
Provide the service
Meet legal obligations
Resolve disputes
Enforce agreements
Data may be anonymized instead of deleted.
12. Data Security
We use industry-standard measures including:
Encryption in transit
Firewalls
Access controls
Secure hosting
Intrusion detection
Routine audits
No system is completely secure; users must secure their credentials.
13. Data Breach Notification
In the event of a data breach:
We will notify affected users without undue delay
We will notify regulators within 72 hours (if GDPR applies)
We will follow all applicable breach reporting laws
14. Your Rights
Depending on your region, you may have:
GDPR Rights
Access
Correction
Deletion
Restriction
Portability
Objection
Withdraw consent
California (CCPA/CPRA) Rights
Know
Delete
Correct
Opt-out of “sale/sharing”
Limit sensitive data
Brazil LGPD Rights
Confirmation
Access
Correction
Deletion
Portability
Information about sharing
Canada PIPEDA Rights
Access
Correction
To exercise rights, email: [email protected]
15. Supervisory Authority Complaints
EU/EEA/UK users may file complaints with their local data protection authority.
UK users may contact the ICO (Information Commissioner’s Office).
16. “Do Not Track” & “Global Privacy Control”
SalesCakeCRM honors Global Privacy Control (GPC) signals where required.
SalesCakeCRM does not respond to browser-based Do Not Track (DNT) signals at this time.
17. Children’s Privacy
Our services are not directed to children under 13 (or older where local law provides). We do not knowingly collect data from children.
18. Accessibility
If you require this Privacy Policy in another format due to disability or accessibility needs, contact us at [email protected].
19. Third-Party Links
We are not responsible for the privacy practices of third-party websites or services linked on our site.
20. Data Processing Agreement (DPA)
SalesCakeCRM offers a GDPR-compliant Data Processing Agreement containing:
Standard Contractual Clauses
Security controls
Controller/Processor obligations
Customers may request a copy at any time.
21. Changes to This Policy
We may update this Privacy Policy periodically. Updates will be posted with a new “Last Updated” date. Continued use of the service constitutes acceptance.
22. Contact Information
SalesCakeCRM, LLC
77711 Flora Rd
Palm Desert, CA 92211
United States
Phone: 760-904-4881
Email: [email protected]