Privacy Policy

1. Who this applies to

AeroSales is an internal, invite-only sales CRM. This policy covers the account, contact, and company data that authorized users (“reps”) enter or import into AeroSales, and the data AeroSales collects to operate the product. There is no public self-serve signup.

2. What we collect

• Account and contact data reps enter, import, or that our enrichment providers return (company details, names, titles, emails).
• Outreach content — emails and sequence steps composed and sent through a rep’s own connected mailbox.
• Third-party API credentials a rep configures (e.g. a Google Workspace app password, a Gemini API key), stored encrypted at rest.
• Basic usage and session data needed to keep the product secure and working (login sessions, audit trails on record changes).

3. How we use it

Solely to operate AeroSales for its intended purpose: surfacing accounts ready for outreach, sending on a rep’s behalf through their own mailbox, and enriching records via third-party providers (currently Apollo and Google Gemini) when a rep requests it. We do not sell data, and we do not use customer data to train third-party models beyond what those providers’ own terms govern for the specific request made.

4. Data isolation

AeroSales is multi-tenant. Every tenant’s data is isolated at the database level via row-level security — one organization’s records are never queryable from another tenant’s session.

5. Security

Credentials and API keys are encrypted at rest. Access requires an invite from an existing team member — there is no open registration path. We recommend reps use unique, revocable app passwords for connected mailboxes rather than primary account passwords.

6. Data retention & deletion

Data persists for as long as your organization’s account is active. To request deletion of your data or a specific record, contact us using the details below.

7. Contact

Questions about this policy or a data request: hello@theaerosales.com