Privacy Policy

Who we are and how to contact us

This policy explains how ТОО «QAVERA», a company registered in the Republic of Kazakhstan (BIN to be confirmed, address: to be confirmed; "we", "us"), processes personal data of visitors to salesei.ai and users of the Salesei service: the workspace, CRM add-ons, the browser extension, the public API and all related tools.

For any question about your data, to exercise your rights or to withdraw consent, write to info@salesei.ai.

We serve customers in different countries and have written this policy to be clear wherever you are. Where the law of your country gives you more rights than described here, we honour those rights. Our home law is the law of the Republic of Kazakhstan.

What data we collect and where it comes from

There are two groups of data: what you give us on the website, and what flows into the service from your company when you connect a workspace.

On the website:

• Request forms: your name, a contact for reply (phone, email or messenger), the size of your sales team and whatever you write in the message. With the request we store the page language, the referral source, the moment of consent and an anonymised Yandex.Metrica visit identifier, which tells us which ads bring people.
• Public call review: the uploaded recording or pasted transcript is processed only to show you the result. We do not keep the recording, the transcript or the review; our technical logs retain only the file size and word count.
• Trial call with the AI trainer: your voice is streamed in real time to a speech recognition and synthesis service so the "customer" can reply. Audio is never stored; the text of the exchange and the review are kept for 24 hours and then deleted automatically. We do not count or store your IP address for this feature.

In the workspace and connected tools:

• User data: work email, name, phone (if provided), role in the company, password (as an irreversible hash), login codes and an activity log.
• Data from sources you connect: CRM systems (amoCRM, Bitrix24, Kommo) — users and groups, pipelines and stages, deals, contacts and companies, call records and links to recordings, CRM chats; telephony — call events and recordings; messengers (Telegram via a partner messaging service) — customer chat messages; recordings uploaded manually or through the public API.
• Recordings and transcripts of conversations, including personal data of your company's customers (name, phone number, what was said) and the voices of your staff. We process these on your instructions — see "Roles".
• AI prompter: during a call, audio from a browser tab, microphone or PBX is streamed in real time for transcription and prompts. The browser extension hears only the tab with the call and the microphone, and only when the user has switched it on.
• Trainer, courses and assessment: recordings and transcripts of practice conversations, answers, scores and results. For candidates taking an assessment by link — name, contact and the recording of the practice call.
• Technical data: IP address, browser and device type, request times, errors. These are needed for security and reliability.

Roles: controller and processor

For website visitors and workspace users, we are the controller of their data.

For personal data of your staff and customers that enters the service from your CRM, telephony, messengers and uploads, your company is the controller and we act as a processor on your documented instructions, only for the purposes described here and in the Terms of Use. You are responsible for having a lawful basis to record conversations and share them with us, and for notifying participants that calls are recorded, as required by your local law. A data processing agreement (DPA) is available on request.

Why we process data

• To answer your request: show the product, discuss a pilot, reply to a question.
• To provide the service: transcribe conversations, score them by sales stage, show reports, prompt during calls, run practice sessions, courses and assessments, and write results back to your CRM if you enable it.
• To run your account: register users, confirm sign-in, send service emails — codes, notifications, invoices.
• To keep the service secure: prevent unauthorised access and abuse, investigate incidents.
• To improve the service: understand which features are used and find errors, using anonymised events and statistics. We do not train machine-learning models on your data.
• To compute industry benchmarks — only if your company opted in within the workspace, and only in anonymised form: numbers leave the workspace, never names, companies or texts.
• To comply with the law: accounting, lawful requests from public authorities.

Legal bases

• Your consent — for website requests, registration and website analytics. You may withdraw it at any time by writing to info@salesei.ai; this does not affect processing carried out before withdrawal.
• Performance of a contract with you (the Terms of Use and, where signed, a written agreement) — to run the workspace and the service.
• Your instructions as controller — for the data of your staff and customers.
• Our legitimate interests — security, abuse prevention and protection of rights, to the extent they do not override your rights.
• Legal obligations under applicable law.

Who we share data with

We do not sell personal data and do not share it for anyone else's purposes — not with advertisers, not with partners. Data goes only to contractors that help us run the service, and only to the extent their task requires. Each of them is bound by a contract with data-protection obligations.

• Speech recognition, text-to-speech and language models: Yandex Cloud services — speech recognition, the "customer" voice in the trainer, scoring and prompts; and a specialised speech-recognition provider under contract. Conversations are sent to them only for processing, are not used to train their models and are not kept longer than needed to return a result.
• Website analytics: Yandex.Metrica (see "Cookies and analytics").
• Payments: the CloudPayments payment service. Card details are entered on the payment provider's side and never reach us; we receive only the fact of payment and the invoice number.
• Email delivery: a transactional email service or mail server — for login codes, notifications and invoices.
• Request handling: a copy of each website request is mirrored to our internal spreadsheet (Google Sheets) and the team's work chat so nothing gets lost.
• Hosting: the servers the service runs on (see "Where data is stored").
• Your own systems: your CRM, telephony and the partner messaging service receive data from us only on your command — for example, when you enable writing review results into a deal card.
• Public authorities — only on a lawful request.

Where data is stored and international transfers

Workspace and request data are hosted on servers in the jurisdiction designated for your domain. The current hosting location for salesei.ai is confirmed in your agreement and on request at info@salesei.ai.

Some processing takes place with contractors that may be outside your country: speech recognition and language models run in Yandex Cloud, whose servers are located in the Russian Federation and the Republic of Kazakhstan. Only the data needed for processing is transferred, under a contract that requires protection at least at the level required by our home law.

If you are in the European Economic Area, the United Kingdom or another jurisdiction that restricts international transfers, we put in place the safeguards required there (such as standard contractual clauses) as part of the DPA. Write to info@salesei.ai to arrange this.

How long we keep data

• Website requests — as long as the conversation needs, and no longer than one year from the request. On your request we delete sooner — within three business days.
• Public call review — not stored. Trial call with the trainer — 24 hours.
• Call recordings received from CRM, telephony and uploads — for the duration of transcription; the audio is deleted afterwards. Transcripts, scores and reports stay in the workspace while your account is active or until you delete them. Raw transcripts and detailed technical logs — 14 days.
• Practice recordings in the trainer — 90 days, then deleted automatically; text results stay in the workspace.
• Account data — while the account is active. After termination or account deletion, workspace data is deleted within 90 days, except what we must keep by law (for example, payment documents for the statutory accounting period).
• CRM and telephony access tokens — deleted immediately when an integration is disconnected or the app is removed from the CRM. The review history stays in the workspace until the workspace owner asks us to delete it.

Your rights and how to exercise them

Depending on where you are, you may have the right to access your data, to have it corrected or deleted, to restrict or object to processing, to receive it in a portable format, to withdraw consent and to complain to a data protection authority. We extend these rights to all users, wherever they are.

To exercise them, write to info@salesei.ai from the address your account or request is registered to. No justification is needed. We respond within 30 days; if a complex request needs more time, we will tell you. We may ask questions to verify your identity.

If you are a customer or employee of a company that uses the service and your data reached us through its CRM, telephony or chats, that company is the controller. Please direct your request to it; we will help it respond in time. If you do not know whom to contact, write to us and we will point you in the right direction.

A workspace owner can delete conversations, disconnect sources, exclude chats and remove users in the workspace settings, and can request an export or full deletion of workspace data at info@salesei.ai.

Cookies and analytics

The site uses Yandex.Metrica: it sets its own cookies and records anonymised on-page actions — clicks, scrolling, navigation between screens (session replay). Workspace content — call transcripts, customer phones and names, staff emails, keys — is excluded from recording, as is anything you type into fields: only what you clicked is recorded.

We also send Metrica events that happen without you present — for example, that a rep called you back. Only a visit identifier and the event name are sent, with no name or phone; this tells us which ads bring real customers.

You can opt out with the "Yandex.Metrica blocker" browser extension or by blocking third-party cookies. The site keeps working.

Apart from analytics, the service stores in your browser only housekeeping data: the interface language, the report role and period, and a session key that lets the workspace recognise you after sign-in. There are no advertising or third-party trackers on the site other than Metrica.

Security

Connections to the site and API are protected with TLS. CRM and telephony access tokens, call recordings and chats are stored encrypted. Every company has its own workspace: staff see only their workspace's data, a rep only their own conversations, a manager the conversations of their team. Our staff's access to workspace data is limited to support tasks. We notify the workspace owner of serious incidents affecting your data without undue delay.

Children

The service is built for companies and their employees. We do not address the site or the service to anyone under 18 and do not knowingly collect their data. If you believe such data has reached us, write to info@salesei.ai and we will delete it.

Changes to this policy

We may update this policy when the service, our contractors or the law change. The current version is always published at salesei.ai, with the update date at the top of the document. We give workspace owners advance notice of material changes by email or in the workspace.

Last updated: 26 September 2026.