Privacy & Data Processing

Last updated: [date] · Controller: Sallyport [legal entity], [address], the Netherlands · Contact: info@sallyport.eu

1. Who we are

Sallyport ("we", "us") provides a governed access layer between AI/LLM tools and business software. For the Sallyport website and account, we act as the data controller. For customer data we process on your behalf through the service, we act as a data processor — see section 8 (Data Processing Agreement).

2. What we collect

• Contact & lead data you submit through our forms: name, company, email, phone, and the details you share about your situation.
• Account data if you create an account: name, email, organisation, and authentication data.
• Usage & audit data generated by the service: which requests were made, by whom, and how our rules handled them.
• Technical data such as IP address and browser information, and a small language-preference cookie set only when you pick a language.

3. Why we use it, and our legal basis

• To respond to your enquiry and provide a trial or demo — performance of a contract / pre-contractual steps.
• To operate, secure and improve the service — legitimate interests.
• To meet legal and audit obligations — legal obligation.
• To send you updates where you've asked us to — consent, which you can withdraw at any time.

4. Hosting & sub-processors

Personal data is hosted in the European Union. We use a limited set of sub-processors to run the service, for example:

• Hetzner Online GmbH — Germany (EU) · cloud hosting & infrastructure.

The sub-processor listed above is currently the only third party that processes personal data on our behalf. An up-to-date list is also available on request at info@sallyport.eu.

5. Retention

We keep contact and lead data for as long as needed to follow up and for [retention period] afterwards, unless you ask us to delete it sooner. Audit logs are retained for the period agreed in your contract or as required by law.

6. Your rights

Under the GDPR you can request access, correction, deletion, restriction, portability, and object to processing based on legitimate interests. To exercise any of these, email info@sallyport.eu. You also have the right to lodge a complaint with your supervisory authority (in the Netherlands, the Autoriteit Persoonsgegevens).

7. Security

We apply appropriate technical and organisational measures — encryption in transit, per-person access controls, audit logging, and least-privilege access to systems. No method is perfectly secure, but governed access and full logging are the core of what we do.

8. Data Processing Agreement (summary)

When we process personal data on your behalf, we do so only on your documented instructions, keep it confidential, apply the security measures above, use sub-processors only under equivalent obligations, assist you with data-subject requests and breach notification, and delete or return the data at the end of the engagement. A full DPA is available to sign on request.

Download the DPA (PDF) →

9. Changes

We may update this notice; material changes will be posted here with a new "last updated" date.

10. Contact

Questions about privacy or a DPA? Email info@sallyport.eu.