Privacy Policy

1. Introduction

Underdog Sales ("we," "us," or "our") operates this AI-powered sales coaching platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your privacy and complying with applicable data protection regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and password when you create an account
• Profile Information: Any additional information you add to your profile
• Voice Recordings: Audio from practice sessions and uploaded call recordings for analysis
• Chat Messages: Conversations with our AI coaching system
• Payment Information: Billing details processed through secure third-party payment processors

2.2 Information Collected Automatically

• Device Information: Browser type, operating system, device identifiers
• Usage Data: Pages visited, features used, session duration, and interaction patterns
• Log Data: IP address, access times, referring URLs, and error logs
• Cookies: Essential and analytics cookies (see Section 8)

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve our AI coaching services
• Process and analyze your practice sessions and call recordings
• Generate personalized feedback and coaching recommendations
• Track your learning progress and curriculum completion
• Send important account notifications and service updates
• Respond to your inquiries and provide customer support
• Ensure platform security and prevent fraudulent activity
• Comply with legal obligations and enforce our Terms of Service
• Improve our AI models and service quality (using anonymized/aggregated data)

4. AI and Data Processing

Our Service uses artificial intelligence to analyze your voice recordings, provide coaching feedback, and personalize your learning experience. This involves:

• Speech-to-Text: Voice recordings are transcribed using secure third-party services
• AI Analysis: Transcripts are analyzed by AI models to evaluate sales techniques
• Feedback Generation: AI generates personalized coaching recommendations

We do not use your personal practice sessions or call recordings to train general AI models without your explicit consent. Analysis is performed solely to provide the Service to you.

5. Data Sharing and Disclosure

We may share your information with:

5.1 Service Providers

Third-party vendors who help us operate our Service, including:

• Cloud hosting providers (e.g., Vercel, Supabase)
• AI/ML service providers for speech processing and analysis
• Payment processors for subscription billing
• Analytics services to understand usage patterns
• Error monitoring services (e.g., Sentry) for platform reliability

5.2 Legal Requirements

We may disclose information when required by law, court order, or government request, or when necessary to protect our rights, property, or safety.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change.

6. Data Retention

We retain your data for as long as necessary to provide the Service and fulfill the purposes outlined in this policy. Specifically:

• Account Data: Retained until you delete your account
• Practice Sessions: Retained for 12 months, then automatically deleted
• Call Recordings: Retained for 6 months after analysis, unless you delete sooner
• Chat History: Retained for 90 days
• Analytics Data: Aggregated and anonymized, retained indefinitely

You can request deletion of your data at any time through account settings or by contacting support.

7. Your Rights

7.1 GDPR Rights (EU/EEA Residents)

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request limitation of processing
• Portability: Receive your data in a portable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

7.2 CCPA/CPRA Rights (California Residents)

Under CCPA/CPRA, you have the right to:

• Know what personal information is collected, used, shared, or sold
• Delete personal information held by businesses
• Opt-out of the sale or sharing of personal information
• Non-discrimination for exercising your CCPA rights
• Correct inaccurate personal information
• Limit use and disclosure of sensitive personal information

Note: We do not sell your personal information. We do not use your data for targeted advertising across third-party sites.

8. Cookies and Tracking

We use the following types of cookies:

• Essential Cookies: Required for the Service to function (authentication, security)
• Analytics Cookies: Help us understand how users interact with the Service (Vercel Analytics)
• Preference Cookies: Remember your settings and preferences (theme, language)

You can control cookies through your browser settings. Disabling essential cookies may affect Service functionality.

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of data in transit (TLS/HTTPS) and at rest
• Secure authentication with password hashing
• Row-level security policies in our database
• Regular security audits and monitoring
• Access controls limiting employee access to personal data

While we strive to protect your data, no method of transmission or storage is 100% secure.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your country of residence, including the United States, where our service providers operate. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

11. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected data from a child, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice via email or in-app notification.

13. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, contact us:

For GDPR inquiries, you may also contact your local Data Protection Authority if you are unsatisfied with our response.