Privacy Notice
1. Who we are
SLSBMB AI is operated by SLSBMB Limited, a limited company incorporated in Hong Kong ("SLSBMB", "we", "us"). This Notice explains how we handle personal data when we operate our websites slsbmb.com and slsbmb.ai, the SLSBMB AI workspace, the PROXY interview, AI Outreach Playbook, AI Contacts, Sending Engine, payments, invoices, receipts and support. Privacy requests and questions: a@slsbmb.com.
We keep the public legal pages minimal. Company-registration, tax and bank details and transaction-specific payment data appear only on the invoice, receipt or order issued for a specific purchase.
2. Whose data this covers
- Customers and users: people who visit our websites, talk to PROXY, create or join a workspace, buy or use the Service, or contact us.
- Business contacts and recipients: professionals whose business contact details we find, verify and deliver through AI Contacts, and people who receive or reply to campaigns sent through SLSBMB AI.
3. Our role
For customer accounts, billing, payments, legal-acceptance records, audit, security, abuse prevention, suppression lists and deliverability protection, SLSBMB decides how data is used and acts as controller (data user). For campaigns, recipient targeting and the use of delivered contacts, the customer decides how data is used and is the controller (data user); when we find and deliver contacts or send and sort campaign emails, we act on that customer's instructions under the Data Processing Terms.
4. Data we process
- Account and contact data: name, business email, company, website, role, team members and sign-in records, including single-use email links and passkey public keys.
- Interview and brief data: what you tell PROXY, the contents of your website and public sources we read, your brief, playbook and campaign content, sender names and the company name and postal address used in your email footer.
- Order and payment data: orders, invoices, payment status and references, wallet and credit records, and legal-acceptance records with document versions and acknowledgements. Card details are collected by the payment provider; we do not receive full card numbers.
- Business-contact data: names, job titles, companies, business email addresses, professional profile links and similar professional facts from public sources and search and enrichment providers, with verification results and suppression markers.
- Campaign and reply data: emails sent and received through workspace mailboxes, delivery events, reply content and its AI classification.
- Usage and technical data: first-party analytics events, request logs including IP address and user agent, and anti-abuse signals, including Cloudflare Turnstile checks, as described in the Cookie and Landing Analytics Notice.
5. How we use data
We use data to provide the Service, including the interview, research, playbooks, contact search and delivery, sending, reply sorting and drafting; to issue invoices and reconcile payments; to keep audit and legal-acceptance records; to secure the Service and prevent fraud, spam and abuse; to keep suppression lists and protect deliverability; to support you and send service emails; to understand and improve the Service and our methods; to show customer references as described in the Terms; and to comply with law and establish or defend legal claims.
6. AI processing
We use AI models from third-party providers to run the interview, research, writing, reply classification and drafting. The content needed for each task, which can include your brief, website content, campaign emails and replies, is sent to those providers to perform it, under the providers' own terms.
7. Lawful basis
Where a lawful basis is required, we rely on performance of our contract with the customer; our legitimate interests in operating, securing and improving the Service, providing business-contact intelligence, keeping suppression lists and defending claims; compliance with legal obligations; and consent where it is required. Customers are responsible for the lawful basis of their own campaigns and contact use under the Outbound Compliance Policy.
8. Sharing
We share data with service providers for hosting, storage and backups, email infrastructure, domain registration and DNS, AI, search, enrichment and verification, payments, anti-abuse, monitoring, notifications and support, as described on the Subprocessors and Providers page; with customers who order business contacts through AI Contacts; with authorities where the law requires; and with a successor if our business is transferred. We do not sell the information you give us in the interview.
9. International transfers
SLSBMB operates from Hong Kong, and our providers operate in several countries, including the European Union and the United States. Personal data may therefore be processed outside the place where it was collected. We use contractual, organisational and technical measures appropriate to each transfer.
10. Retention
We keep personal data only as long as needed for the purposes above. When a workspace is closed, we delete its workspace data, except invoices, payment, accounting, legal-acceptance, audit and suppression records, which we keep for legal, tax, dispute and protection purposes. Backups are kept for a limited period and then overwritten. Raw first-party usage signals are kept for 90 days by default and may then be kept only as aggregate counts.
11. Security
We use reasonable technical and organisational measures to protect personal data, as described on the Security page. No system is completely secure.
12. Your rights
Depending on the law that applies to you, you may have rights to access, correct, delete, restrict or object to the use of your personal data, or to receive a copy of it. Send requests to a@slsbmb.com. We may need to verify your identity, and we may decline a request where the law permits, for example where we must keep records for legal, payment, security or dispute reasons. Requests about a customer's campaign data are passed to, or should be made to, that customer. You may also complain to your data protection authority; in Hong Kong this is the Office of the Privacy Commissioner for Personal Data.
13. If you received an email sent through SLSBMB AI
The email was sent by the company named in its footer, which is responsible for it. To stop receiving its emails, use the unsubscribe link. If you reply asking never to be contacted again, we also stop every SLSBMB AI workspace from emailing that address. For other requests about your data, write to a@slsbmb.com.
14. Customers and our Terms
For customers, the disclaimers, limitation of liability, indemnity and governing-law terms of the Terms of Service apply to the processing described in this Notice to the extent the law allows.
15. Changes
We may update this Notice by publishing a new version with a new version label and effective date.