Privacy Policy
REPS works by reading your real sales calls. That is a serious thing to ask of someone, so this page explains exactly what we hold, why we hold it, who else touches it and how to get rid of it. We have written it to the GDPR standard for everyone, wherever you live, because that is the strictest bar and applying two standards would mean some of our customers got the weaker one.
1Who controls your data
The data controller is Fornax Execution Consulting, a company licensed in the Sharjah Media City (Shams) free zone, operating REPS through its product arm Fornax OS.
Registered address: Sharjah Media City (Shams), Al Messaned, Al Bataeh, Sharjah, United Arab Emirates.
For anything about your data, write to legal@salesrepshq.com.
2What we collect
REPS is built on artificial intelligence. We use AI (large language models, together with speech-to-text and text-to-speech services) to: generate the AI buyer you practice against and hold that conversation with you in real time; transcribe your calls; analyse them and produce your scores, feedback and roadmap; and generate practice scenarios and coaching content. Section 5 names the specific AI providers this runs on. None of this is used to make a legal or similarly significant decision about you: see section 4.
Because you gave it to us:
- Your name and email address, and your phone number if you provide one.
- Details about what you sell: your company, offer, price and typical buyer, which you enter so practice calls can use your real situation instead of a generic one.
- Sales call recordings and transcripts you upload. See section 3.
Because you used the product:
- Your practice calls: the audio of what you said, and the transcripts of those sessions.
- Your scores, skill profile, roadmap, drill history, levels and rank.
- Basic technical records such as log entries and error reports, which we use to keep the service working.
Payment:
- Stripe processes your payment and holds your card details. We receive only the outcome, the last four digits and the billing country. We never see or store your full card number.
3Call recordings and other people’s voices
A sales call has a buyer on it. That buyer is a real person who is not our customer and who never came to this website. We take that seriously, and you should know exactly how it is handled.
When you upload a call, you confirm that you had the right to record it and the right to share it with us. The upload cannot proceed without that confirmation. That is the basis on which we process the other person’s voice, and it is why the confirmation is mandatory rather than a footnote.
What we do with the recording: transcribe it, analyse the conversation, identify where the deal broke, and build your training from it. The buyer’s speech is processed as part of the conversation, because a sales call cannot be understood by listening to one side of it.
What we never do: sell recordings, share them with other customers, use them to train general-purpose AI models, or contact anyone who appears on them.
If someone who appears on a recording contacts us and asks about their data, we will respond to them and will normally need to involve you, since you are the person who holds the relationship and the consent.
4Why we use it, and our lawful basis
- To provide REPS: analysing calls, running practice, tracking your progress. Basis: performance of our contract with you.
- To take payment and prevent fraud. Basis: performance of our contract, and our legitimate interest in not being defrauded.
- To support you when you write in. Basis: performance of our contract.
- To keep the service secure and working, including logs and error reports. Basis: our legitimate interest in a service that stays up and is not abused.
- To improve REPS using anonymous, aggregated usage statistics. Basis: our legitimate interest. This never includes your recordings or transcripts.
- To process recordings containing another person’s voice. Basis: our legitimate interest in providing the training you asked for, resting on your confirmation that the necessary consents were obtained.
- To meet legal and accounting obligations. Basis: legal obligation.
We do not use your data for automated decisions that produce legal effects for you. Your scores are generated automatically, but they are training feedback, not a decision about your rights.
5Who we share it with
We use the following processors, and no others. Each is bound to process data only on our instructions. We do not sell your data to anyone, and we have no advertising partners.
We may also disclose data if the law requires it, or to establish or defend a legal claim.
6Where your data goes
We are based in the United Arab Emirates, and some of our processors are in the United States. That means your data is transferred internationally.
Where data leaves the European Economic Area or the United Kingdom, those transfers are covered by the European Commission’s Standard Contractual Clauses or an equivalent safeguard in our agreement with each processor.
7How long we keep it
We keep your recordings, transcripts and analyses until you delete them. They are yours, they stay available for as long as your account exists, and deleting a recording removes it.
If you close your account, we delete your personal data and your recordings. We keep payment and invoice records for as long as tax and accounting law requires, and we may keep anonymous aggregated statistics that can no longer identify you.
Backups are overwritten on a rolling cycle, so a deleted item can persist briefly in a backup before it is gone for good.
8Your rights
Wherever you live, you can ask us to:
- Give you a copy of the personal data we hold about you.
- Correct it if it is wrong.
- Delete it. You can delete recordings yourself at any time, and you can delete your whole account.
- Restrict or object to how we use it, including anything we do on the basis of legitimate interest.
- Send it elsewhere in a portable, machine-readable format.
- Withdraw consent where we relied on it, without affecting what came before.
Write to legal@salesrepshq.com. We respond within 30 days, and we do not charge for this.
If you are in the EEA or the UK and you think we have handled your data badly, you may complain to your local supervisory authority. We would rather you told us first, but that right is yours regardless.
9If you are in the UAE
As a company licensed in the UAE, we are also subject to Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. It gives you rights to access, correct, delete, restrict and port your data, and to object to processing: the same set described in section 8, which we apply to everyone.
10Security
Data is encrypted in transit and at rest. Access to production data is limited to the people who need it to run the service. Payment card details never touch our systems.
No system is perfectly secure. If a breach affects your personal data and creates a real risk to you, we will tell you and the relevant regulator without undue delay.
11Cookies and tracking
We run no advertising trackers and no third-party profiling. Nothing follows you around the internet, and we sell nothing about you to anyone.
We do measure our own audience, and we do it ourselves. When you visit, your browser stores a random identifier: a string of characters with no name, email or account attached, so we can tell a returning visit from a new one and see which pages people actually read. That identifier:
- is created by us and read only by us. It is never shared with, or visible to, any other company;
- is stored in your browser and expires after 13 months, after which a fresh one is issued;
- is used only to count visits and understand which parts of the site work, never to build a profile of you, and never to target advertising;
- is paired on our servers with your country only. We never store your IP address.
If you would rather not be counted, we honour the Global Privacy Control and Do Not Track settings in your browser automatically: turn either on and we record nothing. You can also opt this browser out directly by visiting any page on this site with ?__notrack=1 added to the address, which we remember for that browser until you clear it.
Our hosting provider, Vercel, also reports aggregate page-view counts for the site. That measurement uses no cookies and no identifier of any kind, cannot follow you to other websites, and gives us totals rather than anything about an individual visitor.
Beyond that, the only other browser storage we use is what keeps you signed in and remembers your preferences, such as whether you muted the guided preview.
12Children
REPS is for working adults and is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us data, tell us and we will delete it.
13Changes
We will update this page when what we do changes, for example if we add a processor. The date at the top always reflects the last substantive change, and we will tell you directly if a change materially affects your rights.
14Contact and complaints
Data protection and privacy requests: legal@salesrepshq.com
Everything else: support@salesrepshq.com
Sharjah Media City (Shams), Al Messaned, Al Bataeh, Sharjah, United Arab Emirates
See also the Terms of Service.