Privacy Policy

TellUS, a California corporation ("TellUS," "we," "us," or "our"), respects the privacy of Customers, Authorized Users, business contacts, website visitors, and other individuals whose information may be processed through salesHum. This Privacy Policy explains how information is collected, used, disclosed, stored, retained, transferred, and otherwise processed through salesHum and related services (the "Services").

salesHum is designed for business and organizational use, including use by distributors, dealers, independent contractors, sales organizations, and other businesses that review sales interactions, manage recordings, generate transcripts, obtain AI-supported coaching insights, and analyze performance trends.

Because salesHum is a configurable platform used by different organizations in different jurisdictions, the actual processing activities for any given Customer may vary depending on Customer settings, enabled features, and Customer instructions.

1. Who We Are

TellUS is the owner and operator of salesHum. References to "TellUS" mean the legal entity responsible for operating the platform, managing customer relationships, administering subscriptions, providing support, maintaining infrastructure, and overseeing the data-processing activities described in this Policy. salesHum is the software platform and service offering through which recordings, transcripts, analytics, AI-generated outputs, dashboards, and related functionality are made available.

TellUS uses employees, contractors, affiliates, and third-party service providers (our "subprocessors") to help operate the Services. The categories and identities of our subprocessors are described in Section 19 and Appendix B.

2. Scope of This Privacy Policy

This Privacy Policy applies to information processed through:

• salesHum mobile and web applications;
• salesHum websites and administrative dashboards;
• audio recording and transcription functionality;
• artificial intelligence, coaching, and analytics functionality;
• billing, account, and customer-support communications; and
• other services provided by TellUS.

This Privacy Policy does not apply to third-party websites, software, or services that are not owned or controlled by TellUS, even where they connect to salesHum. Information transmitted to third-party systems is governed by those third parties’ own policies.

3. Relationship Between This Policy, the Terms, and the DPA

This Privacy Policy should be read together with the salesHum Terms of Service (the "Terms"), the salesHum Data Processing Agreement (the "DPA"), and any applicable order form. Capitalized terms not defined here have the meanings given in the Terms.

Where TellUS processes personal information on a Customer’s behalf (see Section 4), the DPA governs that processing. If a direct conflict exists between this Privacy Policy and the DPA with respect to TellUS’s processing of Customer Personal Data, the DPA controls.

4. Our Roles: When We Act as a Processor and When We Act as a Controller

Privacy laws distinguish between the party that determines the purposes and means of processing personal information (a "controller" under GDPR and most U.S. state laws, or a "business" under California law) and the party that processes personal information on another’s behalf (a "processor," or a "service provider" or "contractor" under California law). salesHum involves both roles, depending on the data:

For the Customer Personal Data we process as a processor, our handling is governed by the DPA and by Customer instructions. For the data we process as a controller, our handling is governed by this Privacy Policy, including the legal bases described in Section 14.

5. Categories of Information We Process

Depending on configuration and use, the Services process the following categories of information:

• Account Information — names, business names, distributor/dealer affiliations, email addresses, usernames, account identifiers, role assignments, permissions, and account settings.
• Contact Information — business contact details provided by Customers or Authorized Users.
• Billing and Transaction Information — subscription records, invoices, payment status, plan selections, and usage/overage records. Payment-card details are handled by our payment processor, not stored by TellUS.
• Audio Recordings — audio captured by, uploaded to, or processed through salesHum.
• Transcripts — text generated from Audio Recordings, including edited, summarized, or tagged text.
• AI Output — summaries, coaching observations, scores, classifications, and analytics generated by the Services.
• Usage Information — feature use, login activity, administrative actions, and support interactions.
• Device and Technical Information — IP addresses, browser/OS information, device identifiers, session data, authentication logs, and diagnostic/error logs.
• Approximate Location — coarse location (such as country/region) derived from IP address for security and login-notification purposes.
• Support Information — information submitted through support, onboarding, and troubleshooting.
• Aggregated and De-Identified Information — statistical and benchmarking information derived from the above in a form not intended to identify an individual.

6. Information We Collect Directly

We collect information directly from Customers and Authorized Users when they create accounts, purchase or renew subscriptions, complete onboarding, configure settings, record or upload audio, submit support requests, or otherwise interact with the Services. Customers are responsible for ensuring that information they submit has been collected lawfully and may be processed in accordance with applicable law.

7. Information Collected Automatically; Cookies and Similar Technologies

When the Services are used, we and our service providers automatically collect login timestamps, authentication records, session identifiers, device and browser information, IP addresses, approximate location, feature-usage information, diagnostic information, and security and audit logs. We use this information for authentication, security, fraud prevention, troubleshooting, operational analytics, and compliance.

salesHum uses cookies and similar technologies that are strictly necessary to operate the Services — principally secure, HTTP-only session cookies used to keep you signed in. The salesHum web application does not use third-party advertising cookies or cross-site tracking technologies, and the mobile application uses secure on-device storage for session tokens rather than advertising identifiers. Because we do not use non-essential tracking cookies, we do not display a cookie consent banner; you can control cookies through your browser settings, though disabling essential cookies will prevent the Services from functioning.

8. Audio Recordings and Transcripts

salesHum enables Customers and Authorized Users to record, upload, store, transcribe, summarize, and review audio. salesHum processes audio only; it does not capture video. Audio Recordings may contain information relating to Authorized Users, consumers, prospects, household members, and other individuals present during an interaction.

TellUS processes Audio Recordings and Transcripts as a processor, on behalf of and on the documented instructions of the Customer, in accordance with Service functionality, the DPA, and applicable law. TellUS does not independently verify whether recording is lawful, whether required consent was obtained, whether participants were informed, whether minors are present, or whether the Customer has authority to record or upload a given conversation. Those responsibilities rest with the Customer (see the Terms, "Recording Consent").

Audio Recordings and Transcripts may be processed by the subprocessors identified in Appendix B (for example, our cloud-hosting, transcription, and AI providers) solely to provide the Services.

For each recording, salesHum also stores a consent-confirmation record — the date, time, and version of the in-product consent attestation the Authorized User confirmed before recording. This record is associated with the recording and retained as part of the Customer’s account data and audit logs.

9. Voice Data and Biometric Identifiers

salesHum processes the content of spoken conversations to produce transcripts and coaching insights. To attribute speech within a single recording, the Services may distinguish between speakers (for example, labeling "Speaker 1" and "Speaker 2"). salesHum does not create or store voiceprints or other biometric templates, does not use voice to identify or authenticate individuals across recordings, and does not sell or share voice data. We do not knowingly use any feature of an individual’s voice as a unique biometric identifier within the meaning of biometric-privacy laws.

10. Household Participants, Incidental Participants, and Minors

salesHum is often used for in-home demonstrations and similar interactions where individuals other than the primary participants may be present, including spouses, family members, guests, caregivers, or children. As a result, Audio Recordings may incidentally capture such individuals.

TellUS does not intentionally collect information relating to minors and does not verify the age, identity, or guardianship status of persons appearing in recordings. The Services do not guarantee that any technology will identify, redact, or exclude information relating to minors or incidental participants. Customers are responsible for determining whether recording is lawful, whether consent requirements apply, and whether minors may be present. Information about incidental participants is processed in the same manner as other recording content, subject to Customer settings and applicable law.

11. Artificial Intelligence Processing and AI Output

salesHum uses artificial intelligence, machine learning, speech recognition, and related technologies to generate transcripts, summaries, coaching observations, classifications, and analytics. When a Customer uses AI-enabled features, information is processed by TellUS and by authorized AI and transcription subprocessors acting on TellUS’s behalf.

Translation. Where a Transcript contains speech in a language other than English, salesHum may send the Transcript text to our AI subprocessor to produce an English translation shown beside the original.

AI Output may be incomplete, inaccurate, biased, or otherwise imperfect and should be reviewed by trained personnel before being relied upon for any significant decision. TellUS does not represent that AI Output is correct, complete, or suitable for any particular purpose, or that it can replace human judgment.

We use Customer conversation content — Audio Recordings, Transcripts, and the AI Output generated from them — only to provide the Services to the Customer, such as to produce transcripts and coaching insights. We do not use this Customer Personal Data to train generalized or third-party generative AI models, and our transcription and AI subprocessors process it under terms that prohibit using it to train their general models. Separately, we create and use aggregated and de-identified data to develop, train, improve, and optimize our products, Services, and AI and machine-learning features, as described in Section 15.

12. Automated Processing and Evaluation of Authorized Users

A core function of salesHum is to generate coaching observations, scores, and performance insights about the Authorized Users (such as sales representatives and dealers) whose conversations are recorded. This involves automated processing and profiling of those individuals’ work performance.

salesHum is a decision-support tool. AI Output is intended to assist human coaches and managers, not to make automated decisions that produce legal or similarly significant effects without human involvement. The Customer (as the employer or engaging organization) determines how AI Output is used in coaching, evaluation, or other decisions, and is responsible for providing any notices and for the human review that applicable employment and automated-decision-making laws may require. Where required by law, individuals may have rights regarding automated processing; such requests are handled as described in Section 25.

13. How We Use Information

We use information to:

• Provide and operate the Services — create and manage accounts, authenticate users, process recordings, generate transcripts and AI Output, and provide support.
• Administer the relationship — manage billing, subscriptions, renewals, and permissions.
• Secure the Services — monitor for and investigate suspicious activity, prevent fraud and misuse, and protect data and systems.
• Improve the Services — develop, train, improve, and optimize our products, functionality, and AI and machine-learning systems using account, usage, device, and aggregated and de-identified data (Section 15), and for other lawful business purposes; we do not use Customer conversation content for this purpose.
• Comply with law — meet legal obligations and respond to lawful requests and legal process.
• Enforce agreements and protect rights — investigate violations, resolve disputes, and protect TellUS, Customers, and others.

14. Legal Bases for Processing (Data We Control)

This Section applies to the personal information for which TellUS acts as a controller (see Section 4) — principally account, billing, usage, security, and de-identified data. For Customer Personal Data that we process as a processor, the legal basis is established by the Customer as controller, not by TellUS. Where data-protection laws require a legal basis, TellUS relies on one or more of the following for the data it controls:

• Contract — to provide the Services and administer the subscription.
• Legitimate interests — to secure and improve the Services, prevent fraud, and operate our business, balanced against individuals’ rights.
• Legal compliance — to meet legal obligations and respond to legal process.
• Consent — where we elect to rely on, or are required to obtain, consent.
• Protection of rights and safety — to protect the rights, safety, and property of TellUS, Customers, Authorized Users, and others.

15. Aggregated, De-Identified, and Benchmarking Data

TellUS creates, retains, and uses aggregated, de-identified, anonymized, and statistical information derived from use of the Services. TellUS acts as a controller of this derived data. Such data is processed so that it is not intended to, and does not reasonably permit, identification of a specific Customer, Authorized User, consumer, or household participant.

We use aggregated and de-identified data for product and AI improvement — including to develop, train, tune, and optimize our AI and machine-learning features — and for analytics, benchmarking, industry and regional trend analysis, security, the development of current and future products and services, and any other lawful business purpose. We may retain and continue to use such data after a subscription ends.

Our de-identification commitments. Where we maintain de-identified data, we (a) take reasonable measures to ensure it cannot be associated with an individual, (b) publicly commit to maintaining and using it only in de-identified form, (c) do not attempt to re-identify it except to test our de-identification, and (d) contractually obligate recipients to the same. We will not intentionally publish reports that identify a Customer by name without that Customer’s authorization, except where the information is already public or disclosure is required by law.

16. Third-Party Integrations

Where the Services offer integrations, Customers may choose to connect salesHum to third-party systems and to transmit information to them. When a Customer enables an integration, information is transmitted as directed by the Customer and becomes subject to the third party’s own privacy and security practices, which TellUS does not control. Customers are responsible for reviewing integrations before enabling them.

17. Finance Integrations and Lending-Related Data Sharing

salesHum may, where offered and enabled by a Customer, provide optional functionality to transmit selected information to a finance provider, lender, or payment provider chosen by the Customer. The Customer decides whether to enable any such integration, what information is shared, and with whom, and is responsible for obtaining any legally required permissions and disclosures.

TellUS and salesHum do not determine creditworthiness, perform underwriting, approve or deny financing, issue credit decisions, act as a lender or loan broker, or act as a consumer reporting agency, and do not provide consumer reports under the Fair Credit Reporting Act. Any financing or credit decision is solely the responsibility of the applicable finance provider.

18. No Sale or Sharing of Personal Information; Opt-Out Signals

TellUS does not sell Customer Data, Audio Recordings, Transcripts, AI Output, or consumer information, and does not "share" personal information for cross-context behavioral advertising, as those terms are defined under applicable U.S. state privacy laws. When a Customer enables an integration or export, information is transmitted to a third party at the Customer’s direction; that Customer-directed transmission is not a sale by TellUS.

Because we do not sell or share personal information or engage in targeted advertising, there is no advertising-related opt-out to exercise. Where required, we will honor recognized opt-out preference signals (such as Global Privacy Control) consistent with applicable law.

19. Subprocessors and Service Providers

TellUS engages third-party subprocessors to provide the Services. We require each subprocessor to process information only as needed to perform its services and subject to appropriate contractual obligations. A current list of subprocessors by name and function is set out in Appendix B. The specific subprocessors may change over time; where we act as a processor, the DPA describes how we provide notice of changes and how Customers may object.

20. Data Retention

We retain information for as long as needed to provide the Services and for the additional periods described below and in Appendix A. Retention of Audio Recordings and Transcripts is controlled by the Customer: they remain available for the duration of the Customer’s subscription unless the Customer deletes them earlier. salesHum does not automatically delete Audio Recordings, Transcripts, or AI Output after a set period. When a recording is deleted, its Transcript and AI Output are deleted with it.

After an account is closed or a subscription ends, Customer Data is deleted in accordance with the wind-down and deletion process described in the Terms and the DPA. We may retain information longer where reasonably necessary to comply with legal obligations, resolve disputes, enforce agreements, maintain security, or satisfy a legal hold. Deletion may not be immediate across backups and disaster-recovery systems, which cycle out over time.

When you delete your account through the in-app or web account-deletion control, we sign you out and lock the account immediately, and we permanently delete the account and its associated data after a 30-day period. If an account owner deletes their account, the organization and all of its Authorized Users and Customer Data are deleted on the same basis. After that permanent deletion we keep only a minimal deletion record for security and audit purposes; this record contains no personal information (for example, no name, email, recordings, or transcripts).

21. Data Deletion and Recovery Limitations

Customers and Authorized Users may delete information through available Service controls — including deleting an individual account (which, for an owner, deletes the organization) through the in-app or web account-deletion control — and may request deletion of information through the channels in Section 25, subject to legal, contractual, and technical limitations and to the role-based permissions of organizational accounts (Section 28). Once information is deleted, it may be unrecoverable. Customers are responsible for exporting or preserving information they wish to keep before deletion, cancellation, downgrade, suspension, termination, or expiration of a retention window. TellUS is not responsible for information lost due to Customer deletion choices or retention settings.

22. Legal Holds, Government Requests, and Litigation Preservation

TellUS may preserve, retain, or disclose information where it reasonably believes doing so is necessary to comply with law or legal process (such as subpoenas, court orders, and regulatory or law-enforcement requests) or to protect legitimate rights and interests. When a legal hold applies, TellUS may suspend ordinary deletion and retention schedules for the affected information until the obligation concludes. If information was permanently deleted before a preservation obligation arose, TellUS may be unable to recover it.

23. Security Practices

TellUS maintains administrative, technical, and organizational safeguards designed to protect information against unauthorized access, disclosure, loss, or misuse. These include access controls and role-based permissions, tenant isolation enforced at the database layer (row-level security), encryption of data in transit and at rest through our infrastructure providers, authentication controls, audit logging, rate limiting, monitoring, and backup and disaster-recovery processes. No method of transmission or storage is completely secure, and TellUS cannot guarantee absolute security. Customers are responsible for safeguarding their own credentials, managing user access, and promptly notifying TellUS of suspected compromise.

24. Security Incident Notifications

If TellUS becomes aware of a confirmed unauthorized acquisition of Customer Data resulting from a compromise of TellUS-controlled systems, TellUS will notify affected Customers without undue delay after confirmation, and within any timeframe required by applicable law, subject to the needs of investigation, remediation, and law-enforcement or legal requirements. Notice may be provided by email, dashboard or website notice, or other reasonable means, and may be updated as more facts become available. Notification is not an admission of fault or liability.

25. Your Privacy Rights and How to Exercise Them

Subject to applicable law and to the organizational-account structure described in Section 28, individuals may have the right to request: confirmation of, and access to, personal information we process; correction of inaccurate information; deletion of personal information; a portable copy of certain information; and information about our retention practices and the categories of recipients.

How to make a request. Submit a request to support@saleshum.co or through any in-product control we make available. For requests about Customer Personal Data we process as a processor on a Customer’s behalf, we will refer the request to the relevant Customer (the controller) and assist that Customer in responding, as described in the DPA.

Verification. To protect your information, we may require verification of identity and authority before we act on a request, and we may decline or limit a request where permitted by law (for example, where it would compromise security, the rights of others, a legal hold, or an investigation). We do not discriminate against individuals for exercising their rights.

26. California Privacy Rights

Under the California Consumer Privacy Act (as amended by the CPRA), California residents may, subject to verification and legal exceptions, request: the categories and specific pieces of personal information we have collected; the categories of sources, the business or commercial purposes for collection, and the categories of third parties to whom information is disclosed; correction of inaccurate personal information; and deletion of personal information. As stated in Section 18, TellUS does not sell or share personal information.

California residents may exercise these rights as described in Section 25. We will not discriminate against you for exercising your rights. Where TellUS acts as a service provider to a Customer, we process personal information only for the business purposes specified in our agreement with that Customer and will assist the Customer in responding to consumer requests.

27. Other U.S. State Privacy Rights

Residents of other U.S. states with comprehensive privacy laws — including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and others as such laws take effect — may have rights to access, correct, delete, and obtain a portable copy of their personal information, and to opt out of targeted advertising, sale, or certain profiling. As described in Section 18, we do not sell personal information, share it for cross-context behavioral advertising, or engage in targeted advertising. To exercise available rights, use the process in Section 25. Where a law provides an appeal of our decision on a request, we will describe how to appeal in our response.

28. Organizational Accounts and Account Ownership

salesHum is primarily a business-to-business platform. Many accounts are established and controlled by an organization — a distributor, company, or dealer — rather than by an individual user. Where an account is owned by an organization, that organization (through its authorized administrators and owners) may grant and remove access, configure settings and retention, and access, manage, export, and delete recordings, transcripts, and other Customer Data associated with the account. Authorized Users should understand that information associated with an organizational account may be accessible to the organization’s administrators.

Where an Authorized User’s request conflicts with the instructions of the organizational account owner, TellUS may defer to the party that controls the account, except where applicable law requires otherwise. Nothing in this Section limits the rights individuals may have under applicable privacy laws with respect to their own personal information, including Authorized Users who are employees or independent contractors of a Customer.

29. International Processing and Transfers

salesHum is operated from the United States, and information is processed in the United States. If TellUS makes the Services available outside the United States, or transfers information across borders, it will implement the safeguards required by applicable law for such transfers. By using the Services, Customers acknowledge that information may be processed in the United States.

30. Business Transfers and Corporate Transactions

TellUS may participate in mergers, acquisitions, financings, reorganizations, or asset sales. In connection with such a transaction, information may be reviewed by and transferred to participants and successors, subject to reasonable confidentiality obligations and applicable law. Information will remain subject to this Privacy Policy or to a materially consistent policy.

31. Marketing Communications

TellUS sends communications necessary to operate the Services — account, billing, security, support, and service notices — which continue regardless of marketing preferences. Today, salesHum sends only such transactional communications. If TellUS sends promotional communications (such as newsletters or product announcements) where permitted by law, it will include a means to opt out, and opting out will not affect transactional communications.

32. Children’s Privacy

salesHum is intended for business and organizational use and is not directed to children, and TellUS does not knowingly collect personal information directly from children. Because Audio Recordings may be captured in homes, recordings may incidentally include minors. TellUS does not verify the age of individuals appearing in recordings and relies on Customers to comply with applicable laws governing recording and the collection of information relating to minors. If TellUS learns that information has been processed in a manner requiring action under applicable law, it will take steps it reasonably believes appropriate.

33. Changes to This Privacy Policy

TellUS may update this Privacy Policy from time to time. Material changes may be communicated by email, dashboard or website notice, or other reasonable means. Continued use of the Services after the effective date of an updated Privacy Policy constitutes acceptance to the extent permitted by law.

34. Contact Information

Questions, requests, and privacy-related communications may be directed to:

TellUS, 8 Corporate Park, Suite 130, Irvine, CA 92606

Privacy Requests, Legal Notices, and Support: support@saleshum.co

We may request information needed to verify identity and authority before responding to a request.

Appendix A — Retention Schedule

The periods below describe typical practices and may vary based on Customer settings, legal obligations, and backup cycles. They are not guarantees.

Appendix B — Subprocessors and Service Providers

The following third parties process information on TellUS’s behalf to provide the Services. We may update this list as our infrastructure evolves; where we act as a processor, change-notice is governed by the DPA.