Effective 5 October 2026
SalesGraph is operated by SalesGraph.dev ("SalesGraph", "we", "us"). This policy explains what personal data our products handle, where it goes, and what we do with it.
SalesGraph sells subscriptions through Creem, which acts as merchant of record for all payments. We never receive or store your card number, CVC, or expiry date.
SalesGraph is built local-first. The personal data it collects about other people — names, work emails, company affiliations, LinkedIn profiles — is written to storage on your own device and is not uploaded to us. Our servers hold only data about you: the email address on your purchase, a hashed identifier for your machine, your IP address, and LLM token counts.
We operate no analytics, no telemetry, no crash reporting, and no advertising or tracking cookies.
The desktop client stores research results locally, including:
When you connect a third-party account such as LinkedIn or Google, the app stores a full browser profile on your device, including session cookies and site storage, so it can act on your behalf without signing in each time. These session credentials remain on your device and are never transmitted to us.
When you use the cloud features, our servers receive:
Our servers hold no personal data about third parties. Every table that records discovered people or companies exists only on your device.
When you ask the agent to research, qualify, or draft outreach, the request includes the names, work email addresses, company details, and draft text of the people being researched. This context is sent through our server to third-party model providers, currently OpenRouter, OpenCode Zen, and Jev, so a model can produce an answer.
Those providers process this data under their own terms. We do not retain a copy of the prompt text. If you would rather not send third-party personal data to a model provider, use the local client configuration with your own model endpoint and disable cloud features.
SalesGraph does not send email on your behalf through our infrastructure. Outbound messages are sent directly from your device using an email account you configure. We store a local record of recipients and subjects for your own tracking, and never transmit those records to us.
Payments are processed by Creem as merchant of record. We receive your email address, order identifier, and subscription status. Card details are collected and stored by Creem and its payment partners, never by SalesGraph. Creem processes refunds and chargebacks on your behalf under its own terms.
Our website loads typefaces from Google Fonts, which means your browser contacts Google when loading a page. We set no cookies and run no analytics scripts.
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing.
Because most data lives on your device, you can access, export, or delete it directly — the data is in ordinary local database files you control. For data held on our servers, email [email protected] and we will respond within 3 business days.
Two limits are worth stating plainly. There is no self-service account: your identity on our servers is a machine identifier, not an account, so we verify requests by email. And for anti-fraud reasons we retain aggregate usage statistics even after a machine record is deleted, because those records contain no email address and cannot be traced back to you.
SalesGraph is a business tool and is not directed at children under 16. We do not knowingly collect personal data from them.
We are based in mainland China. Our infrastructure and third-party providers process data in other countries, including the United States and the European Economic Area. Where required, transfers rely on standard contractual or equivalent safeguards.
We will post any material change to this policy on this page with a revised effective date. Continuing to use SalesGraph after that date means you accept the updated policy.
Privacy questions, access requests, and deletion requests: