Sales Revolver

Privacy Policy

Effective date: 11 November 2026

In short: we keep the account details you give us and the contacts and notes you upload, only to run the Service for you. We use one necessary cookie to keep you signed in. No advertising and no sale of data. The app itself contains no analytics or tracking; on our public website we use analytics only if you agree in the cookie banner. You can export or delete everything yourself at any time.

1. Who is responsible

1.1 Sales Revolver (the "Service") is operated by Sales Revolver ℅ emit gmbh, Grabenstr. 18, 40789 Monheim ("we", "us"). We are the controller of the personal data described in sections 2 to 4. Contact: hello@sales-revolver.com.

1.2 This policy has two audiences. Most of it is addressed to users — people who hold an account. Section 5 is addressed to people who appear in a user's contact list.

2. Data we collect about users

2.1 Account data. Your name, your email address and a salted hash of your password. We never store your password itself. If you turn on address-book sync to your phone, we also store a hash of the separate sync password needed for it.

2.2 Session data. A record of each sign-in session, stored as a hashed token with its expiry date, so that you stay signed in on your devices.

2.3 Content you create. The contacts and lists you upload, and the outcomes, notes, callback times and call log you record. As far as this relates to you (for example, when you made a call entry), we process it as part of providing the Service. As far as it relates to other people, see section 5.

2.4 Technical data. When your device connects to the Service, our servers necessarily process your IP address, the date and time of the request and basic browser or device information. Our hosting provider keeps these connection logs for up to 30 days. Separately, we keep a security log of account events — sign-ins and failed sign-in attempts, changes to passwords, email addresses and two-factor settings, team changes, exports and deletions — together with the IP address and the time, for 12 months.

2.5 Messages you send us. If you write to us, we keep your message and contact details in order to answer.

2.6 Billing data. If you subscribe to a paid plan, we store which plan you have, the state of the subscription and the reference our payment provider uses for you. Payment itself happens on pages of the payment provider: your card or bank details go to them, not to us, and we never see a full card number.

2.7 We do not collect contact data from the web or from other sources. We do not record calls, and the Service does not have access to your phone's call history or microphone.

3. Why we use it and on what legal basis

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

We do not use your data for advertising, do not build marketing profiles, and do not make decisions about you by automated means that have legal or similarly significant effects. You must provide a name, email address and password to open an account; without them we cannot provide the Service.

4. Cookies and local storage

4.1 We set one cookie, sr_session. It is strictly necessary: it keeps you signed in. It is an httpOnly cookie, which means scripts in the page cannot read it, and it lasts up to 30 days or until you sign out.

4.2 Your browser's local storage holds a few small interface preferences so that the app looks the way you left it. They stay on your device.

4.3 Inside the app (after signing in) we use no advertising, analytics or tracking cookies and no third-party trackers.

4.4 On our public website (the pages describing the Service) we use analytics only with your consent, which we ask for in a banner at the bottom of the page. Until you click "Accept", none of the tools below is loaded and no analytics cookie is set. If you agree, we use:

4.5 The legal basis is your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). You can withdraw it at any time through "Cookie settings" at the bottom of the website; the tools are then switched off and their cookies deleted on your device. Your choice is remembered in your browser's local storage (sr_consent). Google may process data in the USA; it is certified under the EU–US Data Privacy Framework.

5. Contacts uploaded by users

5.1 Our role. Users upload business contacts into the Service — typically company, website, name, phone numbers, email address, position and notes — and record the outcome of their calls. The user decides which contacts to upload and what to do with them. For this data the user is the controller and we act only as a processor, on the user's instructions, under the data processing terms in our Terms of Service. We do not use this data for our own purposes, do not combine it across users, and do not sell or disclose it.

5.2 If someone using Sales Revolver has called you. We did not call you, did not provide your details to the caller and do not decide whether you are called. The person or company who called you is responsible for how your data is used. To find out what they hold about you, to have it corrected or deleted, or to ask not to be called again, please contact them directly — they are legally required to deal with your request.

5.3 If you cannot reach the caller, write to us at hello@sales-revolver.com with enough detail for us to identify the user (for example the caller's name or company, and the date and number of the call). Where we can identify the user, we will forward your request to them. We normally cannot search across all accounts for your details or act on your data ourselves without the user's instruction, unless the law requires us to.

5.4 Our Terms require users to have a lawful basis for every contact they upload and to comply with telemarketing and data-protection law. If you believe a user is misusing the Service, tell us; we can suspend accounts that breach our Terms.

6. Who receives data

6.1 We share personal data only with service providers that process it for us under contract and on our instructions:

6.2 We may also disclose data where the law requires it (for example a binding order from a court or authority), where needed to establish or defend legal claims, or to a successor if the Service is transferred — in which case this policy continues to protect your data and we will tell you beforehand.

6.3 We do not sell personal data and do not share it for advertising.

7. International transfers

7.1 The Service is offered worldwide, and data is stored on servers of Railway Corporation in the European Union (region EU West, Netherlands).

7.2 If personal data that is subject to the GDPR or UK GDPR is transferred to a country that has not been recognised as providing adequate protection, we rely on an appropriate safeguard — in general the European Commission's Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914; Module Two, controller to processor, and Module Three, processor to processor), supplemented by the UK International Data Transfer Addendum where the UK GDPR applies, together with additional measures where needed. You can ask us for a copy at hello@sales-revolver.com.

8. How long we keep data

We keep data longer only where the law requires it or where we need it to establish or defend legal claims. Inactive accounts: [state whether and when inactive accounts are deleted].

9. Security

9.1 The measures we have in place include:

9.2 No system is completely secure. Please use a strong, unique password, and tell us at once if you suspect unauthorised access to your account.

10. Your rights

10.1 Depending on where you live, and in particular under the GDPR and UK GDPR, you have the right to:

10.2 How to exercise them in the app. You can do most of this yourself, at any time:

10.3 For anything else, write to hello@sales-revolver.com. We may need to confirm your identity before acting. We answer within one month, or within the period the applicable law sets. Exercising your rights is free of charge, and we will not treat you less favourably for doing so.

11. Notice for residents of US states

11.1 Some US states, including California, give their residents rights over their personal information, such as the rights to know, access, correct and delete it, and to opt out of its sale or of its use for targeted advertising.

11.2 We do not sell personal information, do not share it for cross-context behavioural advertising, and do not use it for targeted advertising or for profiling with legal or similarly significant effects. We do not knowingly process sensitive personal information beyond the account credentials needed to sign you in.

11.3 The categories of personal information we collect, their sources, the purposes and the recipients are set out in sections 2, 3 and 6. You can exercise your rights as described in section 10, and may use an authorised agent where the law provides for it. If we decline a request, you may appeal by replying to our decision. For personal information contained in users' contact lists we act as a service provider or processor; see section 5.

12. Children

The Service is a business tool for adults. It is not directed at anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has opened an account, contact us and we will delete it.

13. Changes to this policy

We may update this policy when the Service or the law changes. The current version is always on this page, with its effective date at the top. We will tell you about significant changes by email or in the Service before they take effect.