Privacy Policy

SalesSprint ("we", "us") is an AI sales training platform. This policy explains what we collect, why, and what you can do about it. We wrote it in plain English on purpose.

What we collect

• Account info — your name, email, and profile picture from Google when you sign in with Google OAuth.
• Practice call transcripts— the text of what you say during a session. On browsers with built-in speech recognition (Chrome, Edge) this is transcribed on your device. On other browsers (Safari, Firefox) a short audio clip of your spoken turn is sent to our transcription provider (Groq) to convert it to text; we don't store the audio.
• Session metadata — which scenario/persona/difficulty you chose, your scores, grading feedback, timestamps, and streak/XP data.
• Technical logs — minimal request/error logs for debugging.
• Anonymous weekly challenge data includes an opaque browser credential and an encrypted copy of the active challenge transcript so you can safely resume after a refresh. We clear that transcript after grading or reset, then retain only the compact result and first-party funnel events described below.
• Abuse-prevention data includes one-way keyed hashes derived from the opaque browser credential and your network address so we can enforce reasonable individual and shared-network usage limits without storing either raw value in the challenge quota record.

What we don't collect

• Stored audio recordings.When your browser can transcribe speech on-device, we receive only text. When it can't, your spoken turn is sent to Groq for transcription and discarded right after — we never keep audio recordings.
• We don't use your data to train AI models. Your transcripts are used for your grades and your dashboard only.
• No card numbers. Paid subscriptions are processed by Stripe. Card details go directly to Stripe and never touch our servers.

Teams: what your manager can see

If you join a team on SalesSprint (via an invite link from your employer or manager), the owners and managers of that team can see your practice activity: how often you practice, your scores and skill progress, and the transcripts and grading feedback of practice sessions you run while a team member. This is the point of the team product (it is how managers coach), and we want it to be zero surprise:

• The invite page tells you this before you join, not after.
• Only your own team's managers see your data. Practice history from before you joined stays out of team reporting.
• These are practice roleplays with an AI, never recordings of real customer calls.
• If you leave a team (or it is deleted), its managers lose access to your future practice data.

Third-party services we use

• Google (Sign in with Google) — to authenticate you. They see that you signed into SalesSprint.
• Anthropic (Claude API)— to grade your call transcripts and drive the AI prospect's replies. Anthropic processes the text of signed-in sessions and anonymous weekly challenges, but does not train on it under their API terms.
• Groq (speech-to-text) — on browsers without built-in speech recognition, transcribes your spoken turns into text. They process the audio to return text and do not train on it under their API terms.
• OpenAI (text-to-speech)— generates the prospect's spoken voice from the AI's lines. They receive the text to be spoken, not your account data.
• Stripe processes subscription checkout, billing details, payment methods, invoices, and subscription management. We receive identifiers and status updates needed to activate your plan, but not your full card number.
• Railway — hosts our application and Postgres database in the US.

Our subprocessors page lists each of these with exactly what it receives, plus how we handle security and data processing agreements.

We don't sell your data

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are used under California law. We don't run ad networks or third-party analytics on the site, and we don't hand your transcripts to anyone except the service providers listed above that are needed to run the product. The only other times we would disclose data are when the law requires it, to protect someone's safety or our rights, or if the business is ever acquired, in which case this policy travels with the data and we'll say so before anything changes.

Cookies

We use a session cookie (NextAuth) to keep signed-in users authenticated. The public weekly challenge uses an opaque, HttpOnly browser cookie to resume one attempt each week. A second encrypted, HttpOnly cookie keeps the compact result until the next reset. Weekly history and streaks are stored locally in that browser. We do not use advertising or third-party analytics cookies.

How long we keep your data

Your practice sessions and account are kept until you delete them. You can delete any individual session from the dashboard at any time. To delete your entire account, use the delete controls on your profile page: that removes your practice sessions and team memberships and cancels any active subscription. If you own a team with other members still in it, transfer or close the team first, or email us and we'll help. For the anonymous weekly challenge, the encrypted active transcript expires at the weekly reset and is cleared immediately after grading. We retain compact, non-audio challenge results and first-party funnel events for up to 400 days to provide weekly history and understand whether the challenge works. Anonymous funnel events do not contain transcript text, audio, email, or a raw IP address. Minimal billing records may be retained when required for tax, accounting, fraud prevention, or payment-dispute obligations.

Your rights

Depending on where you live (GDPR for the EU/UK, CCPA for California, etc.), you may have rights to:

• Access the data we have about you
• Correct inaccurate data
• Delete your account and data
• Export your data in a portable format
• Object to how we process your data

To exercise any of these, email hello@salessprint.ai and we'll respond within 30 days.

How we protect your data

The site is served over HTTPS, and we reach every provider above over encrypted connections. Authentication and weekly-challenge cookies are HttpOnly, so page scripts can't read them, and the weekly-challenge transcript we hold for resume is encrypted. Access to production data is limited to staff who need it, and API credentials live as environment secrets. No system is perfectly secure, so please don't put recordings of real customer calls, health data, or payment card details into a practice session. See the subprocessors and security page for detail, including the certifications we do not currently hold.

International users

SalesSprint is operated from the United States and your data is stored and processed there. If you use the Service from the EU, UK, or elsewhere, you understand that your data is transferred to the US, where privacy laws differ from your own. If your company needs a data processing agreement to cover that, email us and we'll sort one out.

Children

SalesSprint is not intended for users under 13. We don't knowingly collect data from children under 13.

Changes to this policy

If we update this policy, we'll change the date at the top. Material changes will be flagged on the site before they take effect.

Contact

Questions about privacy or your data: hello@salessprint.ai