Privacy Policy

Last updated October 24, 2026

This Privacy Policy explains what personal information SaleMag collects, why we collect it, who we share it with and the choices you have. It applies to our website at salemag.net, the SaleMag dashboard and apps, and the related services we provide (together, the "Service").

In short: we collect only what we need to run the Service, we never sell personal information, and you can export or delete your data at any time.

On this page

  1. 1. Who we are
  2. 2. Information we collect
  3. 3. How we use information
  4. 4. AI features
  5. 5. How we share information
  6. 6. Data from Meta, Google and other platforms
  7. 7. International transfers
  8. 8. How long we keep information
  9. 9. Security
  10. 10. Your rights
  11. 11. How to delete your data
  12. 12. Cookies
  13. 13. Children
  14. 14. Changes to this policy
  15. 15. Contact us

1. Who we are

The Service is operated by SaleMag, Level#3, House#1168, Road#10, Avenue#10, Mirpur DOHS, Dhaka-1216, Bangladesh ("SaleMag", "we", "us" or "our"). You can reach us about privacy at [email protected].

Our two roles

  • As a controller. For the information about you as our customer — your account, billing details and how you use the Service — we decide how it is used. This policy describes that use.
  • As a processor. When you use SaleMag to talk to your own customers, the contacts, conversations, orders and files in your workspace belong to you. We process them only on your instructions and to provide the Service to you. You are responsible for having a lawful basis to collect that data and for telling your customers how you use it.

If you are a customer of a business that uses SaleMag and you have a question about your data, please contact that business first. We will help them answer your request.

2. Information we collect

Information you give us

  • Account details: your name, email address, phone number, password (stored only as a secure hash), business name, and team members you invite.
  • Billing details: plan, invoices, billing address and tax details. Card payments are handled by our payment provider; we never see or store your full card number.
  • Support and communications: messages you send to our team, support tickets, contact-form submissions and survey answers.

Workspace data you store or process

  • Contacts and leads, including names, phone numbers, email addresses, tags and notes.
  • Conversations and messages sent or received through connected channels, including media, voice notes and attachments.
  • Products, orders, catalogues, broadcast lists, message templates, AI agent flows and knowledge-base documents.
  • Social media posts and media you schedule or publish.

Information from platforms you connect

When you connect an account such as WhatsApp, Facebook Messenger, Instagram, Telegram, a social network, an e-commerce store or Google Workspace, we receive the data needed to run that connection: account and page IDs, display names, access tokens, profile details of the people who message you, messages and delivery statuses, and, for stores, products and orders. We receive only the permissions you approve on the platform's own consent screen.

Information collected automatically

  • Usage and device data: IP address, browser and device type, pages viewed, features used, and the date and time of each request.
  • Logs: security, error and audit logs that help us keep the Service reliable and investigate abuse.
  • Cookies: see Cookies below.

3. How we use information

We use personal information to:

  • create and manage your account, and authenticate you and your team;
  • provide the Service — sending and receiving messages, running automations, AI agents and broadcasts, syncing stores and publishing posts you request;
  • process payments, issue invoices and prevent fraud;
  • provide support and send service messages such as security alerts, billing notices and changes to these terms;
  • send product news and offers, only where the law allows it — you can unsubscribe at any time;
  • monitor, secure and improve the Service, fix bugs and understand which features are used;
  • comply with law, enforce our Terms & Conditions and protect our users and the public.

Legal bases

Where data protection law requires a legal basis, we rely on: contract (to provide the Service you signed up for), legitimate interests (to secure and improve the Service and to market it in a way you would expect), consent (for optional cookies and some marketing — you can withdraw it at any time), and legal obligation (for tax, accounting and lawful requests).

4. AI features

Some features use artificial intelligence: AI auto-replies and AI agents, order and lead extraction, content suggestions and knowledge-base search. To produce a response, the relevant message, context and knowledge-base excerpts are sent to the AI provider that powers the feature, such as OpenAI, Anthropic or Google.

  • We use these providers' business APIs. Under their API terms they do not use the data we send to train their models.
  • We do not use your workspace data to train AI models of our own.
  • You decide whether AI features are switched on for your workspace and which channels they answer on.

5. How we share information

We do not sell or rent personal information, and we never use your workspace data or your customers' data for advertising. We share personal information only as follows:

  • Service providers (sub-processors) who help us run the Service, under contracts that require them to protect the data and use it only for us. They include:
    • cloud hosting and file storage providers (for example Amazon Web Services, DigitalOcean or Wasabi);
    • Stripe, for payment processing;
    • email and SMS delivery providers;
    • AI providers (OpenAI, Anthropic, Google), for the AI features described above.
  • Analytics and advertising partners. Google (Google Analytics, Google Ads) and Meta receive details of visits to our website and dashboard, such as pages viewed, sign-ups and purchases, through cookies and similar technologies. We use this to measure and improve our marketing and to show our ads to people who have visited us. An email address sent for ad measurement is hashed first. See Cookies for your choices.
  • Platforms you connect. When you send a message or publish a post, we pass it to the platform you chose — for example Meta (WhatsApp, Messenger, Instagram, Facebook), Telegram, LinkedIn, TikTok, X, YouTube, Shopify, WooCommerce or BigCommerce. Their own privacy policies apply to what they receive.
  • Your workspace. Workspace owners and admins can see the data in their workspace, including activity by team members.
  • Legal reasons. If we must by law, or to protect the rights, property or safety of SaleMag, our users or others. Where we can, we tell you before we disclose your data.
  • Business transfers. If SaleMag is involved in a merger, acquisition or sale of assets, your information may transfer to the new owner, who must keep honouring this policy.
  • With your consent, in any other case.

6. Data from Meta, Google and other platforms

Data we receive through Meta's platform (WhatsApp Business Platform, Messenger, Instagram and Facebook) is used only to provide the features you turned on, in line with the Meta Platform Terms. We do not use it for advertising or sell it.

SaleMag's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We access Google data (such as YouTube, Sheets, Docs, Calendar or Meet) only to perform the actions you ask for, and humans at SaleMag do not read it except with your permission, for security reasons, or where the law requires.

The same rules apply to data from LinkedIn, TikTok, X, Telegram and e-commerce platforms: we use it only to provide the connection you set up. You can disconnect an account at any time from your dashboard or from the platform's own settings, and we then stop collecting data from it.

7. International transfers

We are based in Bangladesh, and our service providers may store or process data in other countries, including the United States and the European Union. When we transfer personal information across borders, we use safeguards required by applicable law, such as the European Commission's Standard Contractual Clauses, and we choose providers with strong security commitments.

8. How long we keep information

  • Account and workspace data is kept for as long as your account is active.
  • After you delete your account or workspace, we delete its data from our live systems within 30 days, and from backups within a further 90 days.
  • Invoices and payment records are kept for as long as tax and accounting law requires.
  • Security and access logs are kept for up to 12 months, unless we need them longer to investigate abuse.
  • Workspace admins can delete individual contacts, conversations and files at any time.

9. Security

We protect information with encryption in transit (HTTPS/TLS), encryption of stored access tokens and API credentials, hashed passwords, role-based access for your team, and access controls and logging on our own systems. No service is completely secure, so please use a strong, unique password and keep your login details private. If we become aware of a breach that affects your personal information, we will notify you and the relevant authorities as the law requires.

10. Your rights

Depending on where you live, you may have the right to:

  • access the personal information we hold about you and get a copy of it;
  • correct information that is inaccurate or incomplete;
  • delete your information;
  • export your data in a portable format;
  • object to or restrict certain processing, including direct marketing;
  • withdraw consent at any time, where we rely on it;
  • complain to your local data protection authority.

Most of this you can do yourself: edit your profile in the dashboard, download a full copy of your workspace from Settings → Data export, or delete your account from your profile page. For anything else, email [email protected]. We answer within 30 days and may need to verify your identity first.

11. How to delete your data

You can delete your data at any time:

  1. Delete your account: sign in, open your profile, choose Delete Account and confirm with your password. This permanently deletes your account and all workspace data, as described in How long we keep information.
  2. Disconnect a channel: remove a WhatsApp, Facebook, Instagram or other connected account from your dashboard. You can also remove SaleMag from the platform itself — for Facebook and Instagram, go to Settings & privacy → Settings → Business integrations and remove SaleMag.
  3. Ask us: email [email protected] from the address on your account with the subject "Data deletion request". We will confirm when the deletion is complete.

If you messaged a business that uses SaleMag and want your messages deleted, contact that business. If you cannot reach them, write to us and we will pass your request on.

12. Cookies

We use cookies and similar technologies in three groups:

  • Essential cookies keep you signed in, protect forms against attacks, and remember your language and cookie choice. The Service does not work without them.
  • Analytics cookies, for example from Google Analytics, help us understand how our website and dashboard are used so we can improve them.
  • Advertising cookies, for example from Google Ads and Meta, measure which of our ads lead to sign-ups and purchases, and let us show our ads to people who have visited us.

We load these tags through Google Tag Manager. If you are in the European Economic Area, the United Kingdom or Switzerland, analytics and advertising cookies are set only after you accept them in the cookie banner. Elsewhere they are on by default, and you can switch them off with Reject in the banner.

You can change your choice at any time from Cookie settings at the bottom of our website, or block cookies in your browser settings. Blocking essential cookies may stop parts of the Service from working.

13. Children

The Service is for businesses and is not directed at children. You must be at least 18 years old to create an account. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.

14. Changes to this policy

We may update this policy as the Service or the law changes. The date at the top shows when it was last updated. If we make a material change, we will tell you by email or in the dashboard before it takes effect.

15. Contact us

Questions, requests or complaints about privacy: