Your sales data should have clear boundaries.

1. Who this policy applies to

This policy applies to CloserWin websites, account registration, the CloserWin workspace, connected integrations and related support interactions operated as CloserWin, a product by Plan0101. A company using CloserWin may also process personal data about its own customers, prospects, employees or contacts. In that situation, the company controls why that business data is used and CloserWin processes it to provide the service.

2. Data CloserWin may process

Account and workspace data: name, email address, company name, role, workspace preferences, language, timezone, plan, billing status and authentication/security records.

Connected-channel and sales data: customer messages, sender or recipient identifiers, email metadata, lead/contact details, pipeline information, deals, next actions, proposals, conversation history and scheduling context needed for enabled features.

Business knowledge: notes, text, supported files, URLs and crawled website content intentionally added to teach CloserWin about the business, including prices, policies, services, product details or sales instructions.

Technical and security data: request metadata, IP address where needed for abuse prevention or legal records, browser/user-agent information, authentication events, integration status, audit events, errors and operational logs.

Billing data: CloserWin may receive subscription, customer, transaction and invoice identifiers from Paddle. Payment-card details are handled by the payment provider rather than stored in the normal CloserWin application database.

3. Why CloserWin processes data

• Provide and secure accounts, sessions and workspaces.
• Connect authorized Google, Meta and website channels.
• Display and organize customer conversations, leads, deals and follow-ups.
• Generate AI-assisted qualifications, drafts, recommendations and other enabled sales actions.
• Use customer-provided business knowledge to ground AI responses.
• Check scheduling context and create calendar events when authorized.
• Operate billing, plan entitlements and AI-credit limits.
• Send account-verification, password-reset and transactional service emails.
• Detect abuse, investigate errors, protect tenants and maintain auditability.
• Meet legal obligations and enforce the Terms of Service.

4. AI processing

When an AI feature is used, CloserWin may send the minimum context needed for that action—such as a message, relevant conversation history, contact memory, business instructions and retrieved knowledge excerpts—to the configured AI provider. CloserWin currently supports OpenAI-powered execution when configured by the service operator.

AI-generated memory is used for continuity but is not treated as authoritative proof for new high-impact business facts such as prices, availability, policies or terms. Product guardrails are intended to require confirmed business knowledge or current-conversation evidence for those claims.

5. Connected providers and subprocessors

Depending on enabled features, data may be processed by service providers including Google (Gmail and Calendar authorization), Meta (WhatsApp Business, Instagram and Facebook Messenger), OpenAI (AI processing), Paddle (subscription and checkout), Resend (transactional email), and infrastructure providers used to host the application, database, cache and network services.

Those providers process data under their own terms and privacy commitments. Connecting a third-party account authorizes CloserWin to access only the scopes and assets requested through that provider's authorization flow.

6. Cookies and local browser storage

CloserWin uses essential session and CSRF cookies to keep signed-in accounts authenticated and protect state-changing requests. In production, session cookies are configured to use secure transport, and the main session token is HttpOnly. CloserWin also uses local browser storage for preferences such as theme, language and limited preview state. Third-party checkout or authorization providers may set their own cookies when their flows are opened.

CloserWin does not currently require advertising cookies to operate the core product.

7. How data is shared

CloserWin does not make workspace data public by default. Data may be shared with authorized workspace members, connected providers when an action requires them, infrastructure/subprocessor services necessary to run the product, professional advisers under confidentiality obligations, or authorities when disclosure is legally required. Data may also be disclosed in connection with a merger, financing, acquisition or sale of the product, subject to applicable law and appropriate notice where required.

8. Retention and deletion

CloserWin retains account and workspace information for as long as needed to provide the service, maintain security and billing records, resolve disputes and meet legal obligations. When data is deleted or an account is closed, copies may remain temporarily in backups or logs until normal retention cycles expire.

Workspace owners may request access, correction, export or deletion of personal data where applicable. Some information may need to be retained for fraud prevention, billing, security, legal claims or statutory obligations.

9. Security

CloserWin uses technical controls including salted password hashing, hashed session tokens, CSRF protection, encrypted integration credentials, signed OAuth state, rate limiting, tenant-scoped data access, provider webhook verification, production HTTPS requirements and audit events. See the Security page for a more precise description of implemented controls and current limitations.

10. International processing

CloserWin and its service providers may process data in countries different from where an account owner or contact is located. Where applicable law requires safeguards for cross-border transfers, the relevant provider or contracting party is expected to use legally recognized transfer mechanisms.

11. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal data. If CloserWin processes your information on behalf of a business customer, requests about that business's customer data may need to be directed first to that business.

You can also disconnect integrations to stop future synchronization from that provider and can change AI autonomy or disable features inside the workspace.

12. Children

CloserWin is a business product and is not intended for children. Accounts should only be created by people legally able to enter into a business service agreement in their jurisdiction.

13. Changes to this policy

CloserWin may update this policy as the product, providers or legal requirements change. Material changes should be reflected by updating the effective date and, where appropriate, requesting renewed acceptance or providing notice inside the service.

14. Contact

Privacy and data-rights requests can be directed to Plan0101 through its official contact channel at https://plan0101.com.

Translations are provided for convenience. If a translated version conflicts with the English version, the English version controls to the extent permitted by applicable law.