Privacy Policy

1. Who We Are

SalesFinderAI (AI Setter / SmartLeads) provides AI-driven automation that helps businesses communicate with inbound leads via Instagram Direct Messages and email, qualify leads, and, where enabled, process payments or subscriptions for the Service.

We are not affiliated with Meta Platforms, Inc. or Google LLC; we use their authorized APIs and services pursuant to their policies.

Contact:
📧 salesfinderai@gmail.com
📱 @ghazoliy
🌐 https://salesfinderai.com

2. Information We Collect

• Account information — name, email address, username, password (stored as hashed/encrypted), and profile data when you create or manage an account.
• Payment information — billing name, email, and transaction details processed by trusted payment processors (e.g., Stripe, PayPal). We do not store full credit card numbers or bank data on our servers.
• Business and lead data — public profile information, message content, and metadata associated with messaging activity (as defined below).
• Technical data — IP address, device identifiers, browser type, and usage statistics for security and analytics.
• AI interaction data — messages generated or logged by our AI systems to maintain context and improve performance.

We do not intentionally collect sensitive categories of data (such as health information or government identifiers).

3. How We Use Information

• Provide and operate the Services, including account creation, authentication, and payment processing.
• Respond to messages and emails on behalf of client businesses.
• Manage lead interactions and appointment bookings.
• Improve and customize AI responses and user experience.
• Communicate Service updates or billing notices.
• Enforce our Terms of Service and comply with applicable laws.

We do not sell or rent personal data to any third parties.

4. Third-Party Services

Data may be processed by authorized service providers that enable the Services, including but not limited to:

• Meta Platforms, Inc. — Instagram Graph API for messaging.
• Google LLC — Google Cloud Platform / OAuth / Gmail APIs for email integration.
• OpenAI, LLC — natural language processing for message generation.
• Stripe, Inc. / PayPal Holdings, Inc. — payment processing and billing.
• Render and other hosting providers — secure cloud hosting.

All data is transmitted securely and handled in accordance with each provider’s privacy policy.

5. Google User Data & OAuth

Scopes We Use

• https://www.googleapis.com/auth/gmail.modify (Gmail Modify)
  Purpose: Read inbound messages and apply labels so our assistant can (a) detect new customer messages, (b) prepare a draft/recommended reply, and (c) mark/label threads to prevent duplicate responses and maintain state.
  Data we access/process: message headers, body text, attachments metadata, thread IDs, labels, history IDs.
  What we store: minimal thread/label metadata (IDs, timestamps, participants), our generated reply text, and state flags strictly needed to operate the Service. We do not persist full message bodies long-term unless you enable debug logging; if enabled, logs auto-expire within 30 days.
• openid, profile, email
  Purpose: Authenticate your account, associate your Google user ID/email with your SalesFinderAI workspace, and display your profile name/email in settings.
  What we store: Google user ID and email address for login and account association.

We do not request broader Gmail scopes. If a narrower mechanism becomes available that supports the same functionality, we will adopt it.

Token Storage & Security

OAuth access/refresh tokens are stored encrypted at rest and used solely to perform the actions you enable (read relevant messages, apply labels). Tokens are rotated per Google standards and are deleted within 24 hours after you disconnect your Google account.

Google API Services User Data Policy (Limited Use)

• We only use Google user data to provide user-facing features that you enable.
• We do not sell Google user data.
• We do not use Google user data for ads or to build advertising profiles.
• We do not allow human access to Google user data except: (a) with your explicit consent, (b) for security/abuse, compliance, or legal obligations, or (c) to debug an issue you report.
• We share data only with subprocessors necessary to provide the Service, under confidentiality and security obligations.

Revoking Access & Disconnecting

You can revoke our access at any time at https://myaccount.google.com/permissions (remove “SalesFinderAI / AI Setter”). You may also email salesfinderai@gmail.com to request disconnection.

Data Retention & Deletion (Google Data)

After revocation or a deletion request, we delete OAuth tokens immediately and remove Gmail-derived content/metadata within 30 days, except where retention is required by law or necessary to resolve active abuse/security issues. De-identified, aggregate analytics (with no personal or message content) may be retained.

User Controls

At any time you may: (i) disconnect Google, (ii) request a copy of your data, or (iii) request deletion by emailing salesfinderai@gmail.com. We respond within applicable statutory timelines (e.g., GDPR/CCPA).

6. Security

We use industry-standard encryption (TLS/HTTPS), access controls, and token-based authentication to protect data. Passwords are stored only as hashed values. However, no system is completely secure; use of the Services is at your own risk. If you believe your account or data has been compromised, please contact salesfinderai@gmail.com immediately.

7. Data Retention and Deletion

We retain data as long as necessary to provide the Services, fulfill legal obligations, and resolve disputes. Clients may request deletion of their account or data by contacting salesfinderai@gmail.com. Upon confirmation, we will delete or anonymize data except where retention is required by law.

8. User Accounts and Passwords

Users are responsible for maintaining the confidentiality of their login credentials and for all activity under their account. We cannot access your password in plaintext and cannot recover it without your assistance. Refer to our Terms of Service for account responsibility details.

9. Intellectual Property and Ownership

All software, workflows, prompts, and branding associated with SalesFinderAI / AI Setter / SmartLeads are the exclusive property of Youssuf Tamer Elghazouli. Unauthorized copying, reverse engineering, resale, or redistribution is prohibited. See the Terms of Service for additional license and usage provisions.

10. Liability Disclaimer

The Services are provided “as is” and “as available.” We are not responsible for client-directed messages or AI output. Clients must ensure their use of the Services complies with all platform policies and laws. To the maximum extent permitted by law, we disclaim all warranties and limit our liability as set out in the Terms of Service.

11. Your Rights

• Request access to, correction of, or deletion of your personal data.
• Withdraw consent or revoke API permissions at any time.
• Receive a copy of your data in portable format (GDPR portability right).

Requests can be made by emailing salesfinderai@gmail.com. We will respond within the time frames required by GDPR, CCPA, and other applicable laws.

12. Children’s Privacy

The Services are not intended for children under 16 years of age. We do not knowingly collect data from minors. If such data is identified, we will delete it promptly.

13. International Transfers

Data may be processed in multiple countries where our service providers operate. When required, we use Standard Contractual Clauses or other lawful mechanisms to ensure adequate protection.

14. Changes to This Policy

We may update this Policy periodically. The updated version will be posted on our website with a new “Last updated” date. Continued use of the Services after changes constitutes acceptance of the revised Policy.

15. Contact

Owner / Founder: Youssuf Tamer Elghazouli
📧 salesfinderai@gmail.com
📱 @ghazoliy
🌐 https://salesfinderai.com