Security and data

Your leads are your business. This page explains in plain words how we look after the data you keep in Upgrow SalesFlow, and what you control. For the legal detail, see our privacy policy and terms.

Encryption

Every connection to SalesFlow, on the website, the web app and the mobile app, uses HTTPS. Data travelling between your device and our servers is encrypted, so it cannot be read on the way.

Backups

We back up customer data every day, so your leads can be restored if something goes wrong.

Who can access your data

• Inside your account, you decide. Admins see everything; salespeople with telecaller permissions see only the leads assigned to them. You can assign, transfer and remove users at any time.
• On our side, access is limited to our development team, and only to keep the service running, fix problems or help when you ask for support.
• We never sell your data or use your leads for our own marketing.

You own your data

The leads and information you add to SalesFlow belong to you. We process them only to provide the service on your instructions, for example to show them to your team, send reminders, or send lead status to Meta when you turn on the Conversions API integration.

Export and deletion

• Export: you can export your leads from SalesFlow at any time.
• Deletion on request: email info@upgrowsalesflow.com and we will delete your account data, usually within 24 hours and no later than 7 days, except records we must keep by law, such as invoices.
• When you cancel: your account stays active until the end of the period you paid for. After that, your data is kept for 30 days so you can renew or export, then deleted.

Infrastructure

SalesFlow runs on a dedicated virtual private server hosted in India, behind a firewall and served only over HTTPS. Customer data stays on this server; it is shared only with the services listed below, for the reasons shown.

India: Digital Personal Data Protection Act (DPDP)

We handle personal data in line with the principles of the DPDP Act, 2023:

• We collect only what is needed to run the service, and say why in our privacy policy.
• Non-essential cookies run only with consent.
• You can ask to see, correct or delete your personal data.
• A named Grievance Officer, Fahadul Hisam, handles complaints at info@upgrowsalesflow.com.
• For leads you store, you are the business responsible for them (the "data fiduciary"), and we process them on your behalf.

Europe and other regions: GDPR readiness

If you sell to people in the EU or UK, the same practices support your GDPR obligations: you own the data, we act as your processor, you can export or delete it, and you can choose which integrations receive it. If you need a data processing agreement, email us.

Subprocessors

These are the services we rely on to run SalesFlow. Some only receive data when you turn on the matching integration.

If something goes wrong

If we discover a security incident that affects your data, we will inform affected customers without undue delay, explain what happened and what we are doing about it, and inform authorities where the law requires.

Report a security concern

Found a vulnerability or have a security question? Email info@upgrowsalesflow.com or call +91 95393 29267. We take every report seriously.