Privacy Policies

Salesloft Privacy Policy

Updated October 15, 2026

1. Introduction to the Privacy Policy and What It Covers

Salesloft, Inc. and its Affiliates, including Clari, Inc. (collectively, "Salesloft," "we," "us," or "our") knows that you care about how your corporate and personal information is used and shared—and we take your privacy seriously.

This privacy policy ("Privacy Policy") covers Salesloft’s treatment of personally identifiable information ("Personal Information") that we collect and control when you visit or interact with our Site, our marketing activities, and the other Interactions described below, and when you use our Services in the limited circumstances in which we act as a controller of your Personal Information. Personal Information that we handle as a controller is referred to in this Privacy Policy as "Information."

By using the www.salesloft.com website ("Site") or any of our Clari applications available via the application URL app.clari.com and the Clari mobile applications, Clari Mobile and Clari Connect (collectively, the "Service"), you acknowledge that you accept the practices and policies outlined in this Privacy Policy as they apply to Personal Information we handle as a controller, and you acknowledge that we will collect, use, and share that Information as set forth below. This Privacy Policy also covers your visits to our branded social media pages, our offices, our events and webinars, and other Interactions with our websites and marketing activities, whether presented under the Salesloft or Clari brand.

This Privacy Policy does not apply to the extent we process Personal Data as a processor or service provider on behalf of our customers ("Customer Data"), including CRM data, files, email and calendar information, call and meeting recordings and transcripts, contacts, and any other data that a customer or its users submit to, connect with, or authorize us to collect through the Services. This includes processing performed by Clari, Inc. or any other Salesloft affiliate as a sub-processor.

Remember that your use of Salesloft’s Services is at all times subject to our Master Subscription Agreement.

"Personal Data" means any information that identifies or relates to a particular individual and also includes information referred to as "personally identifiable information" or "personal information" under applicable data privacy laws, rules, or regulations. This Privacy Policy does not cover the practices of companies we don't own or control or people we don't manage.

This single Privacy Policy consolidates the Salesloft Privacy Notice, the Salesloft Platform Privacy Notice, and the Salesloft Data Privacy Framework Privacy Notice, and replaces the former Clari Privacy Policy (see Sections 4, 8.5, and 8.6 below). The Candidate Privacy Notice is not part of this consolidation and will be updated separately at a later date.

If you are providing personal information to us as part of the recruitment process for employment, please review our Candidate Privacy Notice, a link to which is posted on our Careers page. If you do not feel comfortable with any part of this Privacy Policy, please immediately cease using our Websites and Service and do not engage in Interactions with us.ForPersonal Data collected through our website and marketing Interactions, Salesloft acts as a data controller.

2. Sources of Personal Data

We collect Personal Data about you from:

1. You: when you provide such information directly to us, and when Personal Data about you is automatically collected in connection with your use of our Services.

2. Our subsidiaries and affiliates (together, "Affiliates"), when they provide us with Personal Data about you.

3. Third parties, when they provide us with Personal Data about you ("Third Parties"). Third Parties that share your Personal Data with us include:

Service providers. For example, Salesloft links to other services, such as Gmail (as described in more detail in the section below titled "Google Services") and Salesforce. We do not access any information from these third-party services without your authorization, or by the authorization of your organization. You grant us this authorization when you connect these services to Salesloft, or when your organization's IT team authorizes these connections on your behalf. To opt out of connecting to these services, contact us.

Social media. The Site may use social media features, such as the Facebook "like" button ("Social Media Features"). These features may collect your IP address and which page you are visiting, and may set a cookie to enable the feature to function properly. You may be given the option by such Social Media Features to post information about your activities on our site to a profile page of yours that is provided by a third-party Social Media network in order to share with others within your network. Social Media Features are either hosted by a third party or hosted directly on our site. Your interactions with these features are governed by the privacy policy of the company providing the relevant Social Media Features.

Advertising partners. We receive information about you from some of our service providers who assist us with marketing or promotional services related to how you interact with our websites, applications, products, services, advertisements, or communications.

2.1 Google Services

Certain features or functions of the Service may require Salesloft to access your Google Gmail for Business account and certain data in such account via Google's Gmail "Application Programming Interface" ("API"). We will only do this with your consent (for example, if you or the Gmail administrator in your organization authorizes us to connect to Gmail, you are granting such consent). Specific restrictions on our use of that data are set forth below. To the extent these terms differ or conflict with any other terms of this Privacy Policy, this Privacy Policy controls.

Generally, we require read-only access to your Business Gmail account. Certain features of the Salesloft platform (such as Groove by Clari) also require compose/modify access to your Business Gmail account. By authorizing us to connect to your account, you are giving us access to all email content in your account as defined by Google's Gmail API.

We collect email and calendar metadata for the sole business-related use of the user and Salesloft's customer. The following data is stored: Gmail fields (Sender, Recipient, Date, Time, Subject, Attachment Name) and GCalendar fields (Meeting Organizer, Guests, Date, Time, Meeting Title, Attachment Name). The data collected is used by Salesloft to provide you and your business with visibility into sales opportunity activities.

We may also use the data (i) if we reasonably believe such use is required by any law, regulation, or government body or court, (ii) as necessary to help prevent a security threat to the Service, and (iii) to help internally improve the Service.

We will not sell your data or use it for serving advertisements.

The data obtained is subject to these additional restrictions: We will not transfer the data to others unless (i) doing so is necessary to comply with any law, regulation, or government body or court, or (ii) as part of a merger, acquisition, or sale of our assets. We will not use this Gmail data for serving advertisements. We will not sell your data. The Service will not allow humans to read this data unless necessary to comply with applicable laws or regulations and for occasional support purposes. Our use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

3. Categories of Personal Data We Collect

The following chart details the categories of Personal Data that we collect and have collected over the past twelve (12) months. Throughout this Privacy Policy, we will refer back to the categories of Personal Data listed in this chart (for example, "Category A. Personal identifiers").

Category A. Personal identifiers. Personal Data collected: real name, Internet Protocol address, email address, phone number, metadata of emails and calendars associated with sales opportunities (specifically, the following fields: Sender, Recipient, Date, Time, Subject and Attachment Name). Source: You / Third Parties.

Category B. Customer records identified by state law (including the California Customer Records statute (Cal. Civ. Code § 1798.80(e))). Personal Data collected: real name, Internet Protocol address, email address, phone number, metadata of emails and calendars associated with sales opportunities (specifically, the following fields: Recipient, Date, Time, Subject and Attachment Name). Source: You / Third Parties.

Category C. Internet or other similar network activity information. Personal Data collected: interactions with a website, application or advertisement. Source: You / Affiliates / Third Parties.

Category D. Geolocation data. Personal Data collected: city, state and country for purposes of data aggregation. Source: You.

Category E. Biometric. Personal Data collected: voiceprint for speaker identification purposes. Source: You.

Category F. Commercial information. Personal Data collected: records of products or services purchased, obtained, or considered by you. Source: You.

Category G. Sensory data, such as audio, electronic, visual, or other similar information. Personal Data collected: audio recordings when you call us or participate in a call with us, and audio/video recordings when you attend a meeting with us or when you attend one of our sponsored events. Source: You.

Category H. Inferences. Personal Data collected: information about your preferences, characteristics, behavior, and attitudes. Source: You.

Category I. Professional/Employment-related information or Education information. Personal Data collected: job title, professional affiliations, and employment history, but only to the extent voluntarily provided by you or made available to us by trusted third parties. Source: You / Third Parties.

Category J. Authentication Data. Personal Data collected: account log-in data in combination with a security or access code, password, or credentials to authenticate and enable access to your accounts, collected directly from you through your interactions with our services or web pages and, in some cases, from third-party user identification or authentication services that you utilize. We do not sell or share (as such terms are defined by the CCPA) this information. Source: You / Third Parties.

The following sections provide additional information about how we collect your Personal Data.

3.1 Information Collected Automatically

The Services use cookies and similar technologies such as pixel tags, web beacons, clear GIFs, and JavaScript (collectively, "Cookies") to enable our servers to recognize your web browser and tell us how and when you visit and use our Services, to analyze trends, learn about our user base and operate and improve our Services. You can decide whether or not to accept Cookies. To find out more about what cookies we use, your choices and further information, please refer to our Cookie Policy.

We may use "persistent cookies" to save your registration ID and login password for future logins to our website, such as to register for webinars. We may use "session ID cookies" to enable certain features of the Websites, to better understand your interactions with us, and to monitor aggregate usage and web traffic routing on our website.

4. How We Use Your Personal Data

We process Personal Data to operate, improve, understand, and personalize our Services, Site, and Interactions. We use Personal Data for the following purposes. Where the GDPR or equivalent laws apply, the legal basis for each purpose is shown in brackets:

To operate and maintain the Service (such as for the purposes of fixing malfunctions, testing our security systems, etc.), including facilitating navigation and login, preserving information between sessions, and enhancing security [Performance of Contract, Legitimate Interest].

To help monitor, prevent, and detect fraud, enhance security, and combat spam, malware, malicious activity, or security risks [Performance of Contract, Legitimate Interest]

To enhance, improve and further develop the Service (such as creating new features or functions, refining the user experience, increasing Service technical performance, etc.), and to improve the accuracy of the records we hold about you [Performance of Contract, Legitimate Interest; Legitimate Interest, Consent for record accuracy].

To respond to your requests, questions, concerns, and feedback [Performance of Contract, Legitimate Interest, Consent].

We will use your contact information to provide you with notices related to your use of the Service.

We will use your contact information (such as your email address) to provide you with training and emails with relevant product information [Legitimate Interest, Consent]. You can opt out of receiving these emails, but in such case you may not receive the full benefit of the Service. Opting out can be done by clicking the "manage email settings" link at the bottom of every email.

To help personalize the Service experience for you (such as remembering your information so you will not have to enter it each time you use the Service), including by using cookies and similar tracking technology to remember your language and time zone preferences [Performance of Contract, Legitimate Interest, Consent].

To provide you with the features, functions and benefits of the Service (such as advanced audio features; users may elect to upload their voiceprint when setting up individual Copilot settings, and if this feature is used, the voiceprint will only be used for speaker identification on dialer/VOIP calls) [Performance of a Contract, Consent].

To provide you with marketing and promotional communications, deliver targeted and relevant advertising, determine the effectiveness of our marketing and promotional campaigns, and better understand you and your preferences, conducted in accordance with your advertising/marketing preferences and applicable law [Legitimate Interest, Consent].

To communicate with you about our events or our partners' events, including contacting you afterward about the event and related products and services and, where legally permitted, sharing information about your attendance with our conference sponsors and partners (if a partner or sponsor directly requests your personal information at their booth or presentation, your information will be handled under their own privacy practices) [Legitimate Interest, Consent].

To comply with our legal or contractual obligations, resolve disputes, and enforce our Terms of Use [Legal Obligation, Legitimate Interest].

To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations [Legal Obligation].

To provide internal development and training to our staff to improve customer experience [Legitimate Interest].

For the other purposes referenced in the "How We Share Your Personal Data" section below, and for any other business purpose stated when collecting your Personal Data or as otherwise set forth in applicable data privacy laws, such as the California Consumer Privacy Act (the "CCPA") [Legitimate Interest, Consent, as applicable]

4.1 How We Share Your Personal Data

We disclose your Personal Data to the following categories of service providers and other parties:

1. Service providers (a full list of which can be found here), including: hosting and other technology and communications providers; ad networks; security and fraud prevention companies; analytics providers; and staff augmentation and contract personnel.

2. Our affiliates.

3. Parties who acquire your Personal Data through an acquisition or other change of control.

If we are involved in a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction, but we will notify you (for example, via email and/or a prominent notice on our website) of any change in control or use of your Information, or if you become subject to a different Privacy Policy. We will also notify you of choices you may have regarding the information.

4. Other parties at your direction: other users (where you post information publicly or as otherwise necessary to effect a transaction initiated or authorized by you through the Services); third-party business partners who you access through the Services; and other parties authorized by you.

Over the past twelve months, we have disclosed the following categories of your Personal Data to service providers or other parties for the business purposes listed above: Personal identifiers, Customer records identified by state law, Internet or other similar network activity information, Geolocation data, Biometric data.

For a current, continuously updated list of the vendors and sub-processors with whom we share Personal Data, please see our Sub-processor List at our Trust Center, trust.salesloft.com.

We may also share your personal information with our event partners, including sponsors of events hosted or sponsored by us, provided that we will obtain your consent prior to such disclosure where required by law. We may also disclose your personal information to third parties when we have a good faith belief that disclosure is reasonably necessary to comply with a law, regulation or legal request, including to meet national security or law enforcement requirements; to protect the safety of any person from death or serious bodily injury; to prevent fraud or abuse of Salesloft or its users; or to protect Salesloft's property rights.

4.2 Sale of Personal Data

We have never sold your Personal Data. We also will not sell your Personal Data unless we first notify you separately in writing. We may "share" Personal Data (as defined by the CCPA) for cross-context behavioral advertising purposes; you may opt out at any time using the "Do Not Sell or Share My Personal Information" link on our website.

5. Use of Artificial Intelligence

At Salesloft, we employ various artificial intelligence (AI) technologies (including third-party tools operated or hosted by us) in accordance with applicable laws to enhance our services, improve user experience, and streamline our operations. This section describes how we collect, use and disclose your personal data in connection with our use of AI in our Site, internal operations and any applications that link to this Privacy Policy, excluding any use of AI in our products and services.

5.1 AI Chatbots

We may use AI-powered chatbots on our website to provide support, answer queries, and assist with navigation. These chatbots may collect and process information you provide during interactions, including but not limited to: your name and contact information; the content of your messages; your preferences and interests based on your queries; and technical data such as IP address, browser type, and session duration.

This information is used to provide personalized responses and improve the accuracy and efficiency of our chatbot service. The data collected may be stored and analyzed to enhance the chatbot's performance and our overall customer service. We may also use the information gathered through chatbot interactions, in combination with other data collected via cookies or analytics tools, to: deliver personalized marketing messages (via web, email, or other channels); retarget users with relevant content or advertisements based on their interests or behavior; and improve campaign performance and customer engagement.

5.2 AI in Recruitment Testing

We may utilize AI technologies in our recruitment processes, including technical skills assessment. The purpose of this processing is to assist our hiring team in making informed decisions and to provide a fair and efficient recruitment process.

5.3 Other AI Applications

We may employ AI technologies in various other aspects of our operations, such as: personalization of website content and user experience; predictive analytics for business intelligence; and fraud detection and security measures. These AI applications may involve the processing of user data, including browsing behavior, preferences, and interactions with our website.

5.4 AI Usage Statement

Salesloft does not use, or allow our vendors to use, the data collected through these interactions to train or improve any AI models. This data is used solely for the purpose of providing and improving the specific service or feature you are interacting with.

5.5 Updates to AI Usage

As AI technologies evolve rapidly, we may update our AI applications and usage. Any material changes to how we use AI that affect your privacy will be reflected in updates to this Privacy Policy.

Please note that the use of AI within Salesloft's products and services is governed separately by our Master Service Agreement (MSA), Data Processing Addendum (DPA), and AI Addendum, as applicable (or equivalent agreements). Customers should refer to these documents for information on how AI is used within our products and services.

6. Data Security and Retention

Salesloft takes robust information security measures to protect your Information and to limit the risk that it will be accessed without authorization, including use of certain industry standard technologies and practices. We follow generally accepted standards to protect the personal information submitted to us, both during transmission and once it is received. That said, we cannot guarantee the security of such Information. Unauthorized entry or use, hardware or software failure, and other factors, may compromise the security of user information at any time. If we learn of a security systems breach, then we may attempt to notify you via email, phone, physical mail, or by a posting on your Service account page so that you can take appropriate protective steps. Pursuant to our Terms of Service, you have consented to receive such notice by electronic means (provided that such consent is void where prohibited by applicable law). To receive a free written notice of a security breach, or if you have any questions about the security of the Service, please contact us.

We will never ask you for your password.

In addition to the security measures referenced above, your Service account is protected by a password for your privacy and security. You must prevent unauthorized access to your account and information by selecting and protecting your password appropriately and limiting access to your computer or device and browser by signing off after you have finished accessing your account.

We retain Personal Data for as long as is necessary to fulfill the purposes for which it was collected, including to satisfy legal, regulatory, accounting, or reporting requirements, or to resolve disputes, consistent with Section 8.2 (Deleting Your Account) and Section 8.3 (Limitations on Deletion) below.

7. Personal Data of Children

As noted in the Terms of Use, we do not knowingly collect or solicit Personal Data from children under 18; if you are a child under 18, please do not attempt to register for or otherwise use the Services or send us any Personal Data. If we learn we have collected Personal Data from a child under 18, we will delete that information as quickly as possible. If you believe that a child under 18 may have provided us with Personal Data, please contact us.

8. Your Rights and Control Over Your Data

8.1 Editing Your Profile

Upon request, Salesloft will provide you with information about whether we hold, or process on behalf of a third party, any of your personal information. If you wish to access, correct, or request deletion of your personal information, fill out this form and a member of the Privacy Team will respond to you.

We depend on you to update and correct personal information to the extent necessary for the purposes for which the information was collected or subsequently authorized by you, except where the burden or expense of providing access would be disproportionate to the risks to the privacy of the individual in the case in question or where the rights of persons other than the individual would be violated. We may seek to verify your identity when we receive your privacy rights request to ensure the security of your personal information.

8.2 Deleting Your Account

Deletion of your account is subject to the "Limitations on Deletion" section below. When you request for us to delete your account for the Service, your data may be permanently deleted from our servers and access to your account will be disabled. We may retain your information for as long as your account is active or as needed to provide you services, comply with our legal obligations, resolve disputes, and enforce our agreements.

Salesloft will retain personal data that we process on behalf of our Clients for as long as needed to provide services to our Client. Salesloft will retain and use this personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

8.3 Limitations on Deletion

In addition, copies of your information may remain viewable elsewhere to the extent that it has been publicly published by you or otherwise shared by you with others (such as your User Submissions).

We may also indefinitely retain and use any aggregated data derived from or incorporating your Information after you update or delete it, but not in a manner that would identify you personally.

We may also retain Information collected by Third Party usage tracking services in aggregate form for the purposes of maintaining historical information on usage of our services.

We may also retain your Information to the extent required to comply with (or we deem it reasonable in light of) any laws or regulations.

Salesloft has no direct relationship with the individuals whose personal data it processes within its Service. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data should direct his query to Salesloft's Client (the data controller). If the Client requests Salesloft to remove the data, we will respond to their request within 30 days. If as an individual you wish to identify the specific Client who is acting as the data controller of your Information, please contact us and we will provide their contact information subject to our receiving approval of release of that information from the data controller.

8.4 Choice

We partner with a third party to display advertising on our website or to manage our advertising on other sites. Our third party partner may use cookies or similar technologies in order to provide you advertising based upon your browsing activities and interests. If you wish to opt out of interest-based advertising, or if located in the European Union, fill out the form in our subscription center. Please note you will continue to receive generic ads.

You may sign up to receive email or newsletter or other communications from us. If you would like to discontinue receiving this information, you may update your email preferences by using the "Unsubscribe" link found in emails we send to you or by filling out the form in our subscription center.

We collect information for our Clients. If you are a customer of one of our Clients and would no longer like to be contacted by one of our Clients that use our service, please contact the client that you interact with directly.

You may also submit access, correction, or deletion requests using our online rights-request form.

8.5 State-Specific Privacy Rights

This section supplements the other information included in this Privacy Policy and applies solely to individuals who reside in the United States and who qualify as a "consumer" as such term is defined by the state law applicable to such individuals.

8.5.1 California Resident Rights

Under California Civil Code Sections 1798.83-1798.84, California residents are entitled to contact us to prevent disclosure of Personal Data to third parties for such third parties' direct marketing purposes. In order to submit such a request, please fill out the form in our subscription center.

If you are a California resident, you also have the rights pursuant to the CCPA as outlined in this section. Please see the "Exercising Your Rights" section below for instructions regarding how to exercise these rights. If there are any conflicts between this section and any other provision of this Privacy Policy and you are a California resident, the portion that is more protective of Personal Data shall control to the extent of such conflict. If you would like to exercise those rights, please fill out this form. If you have any questions about this section, you can contact us.

Right to Opt-Out of Sharing. You have the right to opt out of our "sharing" (as defined by the CCPA) of your Personal Data with third parties for cross-context behavioral advertising purposes, using the "Do Not Sell or Share My Personal Information" link on our website. We may engage in "sharing" under the CCPA, which is broadly defined as disclosing personal information for purposes of cross-context behavioral advertising, including instances where companies target advertising based on personal information obtained from a consumer's activity across distinctly branded websites or services.

Right to Information on Personal Data Sharing. You may request information from us regarding whether we share certain categories of your Personal Data with third parties for the third parties' own direct marketing purposes, including the categories of information disclosed, the names and addresses of the third parties (or, where their business cannot be determined from the name, examples of the products or services marketed), during the preceding calendar year. To the extent we participate in such sharing, you are entitled to receive a copy of this information in a standardized format, and the information will not be specific to you individually.

Authorized Agents. You may designate an authorized agent to submit a rights request on your behalf. We will require proof that the agent is registered with the California Secretary of State to act on your behalf, or evidence that you have granted the agent power of attorney pursuant to Probate Code sections 4000 to 4465, and may still require you to verify your own identity directly; we may deny requests from agents who do not submit this proof. Appeals. In certain situations you may have the right to appeal the denial of your rights request; please submit an appeal using the contact methods in Section 10 (Contact Salesloft About Your Privacy).

Do Not Track Disclosure. We do not currently have a mechanism in place for responding to browser "do not track" signals or other similar mechanisms used to limit collection of information for use in online behavioral advertising.

Biometric Information. As described in Category E of Section 3 above, we may collect a voiceprint if you elect to enable certain advanced audio/speaker-identification features (such as when setting up individual Copilot settings), used solely for speaker identification purposes on recorded dialer/VOIP calls.

8.5.2 Access

You have the right to request certain information about our collection and use of your Personal Data over the past 12 months. We will provide you with the following information: the categories of Personal Data that we have collected about you; the categories of sources from which that Personal Data was collected; the business or commercial purpose for collecting or selling your Personal Data; the categories of third parties with whom we have shared your Personal Data; and the specific pieces of Personal Data that we have collected about you. If we have disclosed your Personal Data for a business purpose over the past 12 months, we will identify the categories of Personal Data shared with each category of third party recipient.

8.5.3 Deletion

You have the right to request that we delete the Personal Data that we have collected from you. Under the CCPA, this right is subject to certain exceptions. For example, we may need to retain your Personal Data to provide you with the Services or complete a transaction or other action you have requested. If your deletion request is subject to one of these exceptions, we may deny your deletion request.

8.5.4 Exercising Your Rights

To exercise the rights described above, please fill out this form. Ensure that you (1) provide sufficient information to allow us to verify that you are the person about whom we have collected Personal Data (for example, providing us your enterprise email address used to register for the Services), and (2) describe your request in sufficient detail to allow us to understand, evaluate, and respond to it. Each request that meets both of these criteria will be considered a "Valid Request." We may not respond to requests that do not meet these criteria. We will only use Personal Data provided in a Valid Request to verify you and complete your request.

We will work to respond to your Valid Request within 45 days of receipt. We will not charge you a fee for making a Valid Request unless your Valid Request(s) is excessive, repetitive, or manifestly unfounded. If we determine that your Valid Request warrants a fee, we will notify you of the fee and explain that decision before completing your request.

You may submit a Valid Request using the following methods: submit a request here; write to us at the mailing address listed in Section 10 (Contact Salesloft About Your Privacy); or email us at privacy@salesloft.com.

8.5.5 We Will Not Discriminate Against You for Exercising Your Rights Under the CCPA

We will not discriminate against you for exercising your rights under the CCPA. We will not deny you our goods or services, charge you different prices or rates, or provide you a lower quality of goods and services if you exercise your rights under the CCPA. However, we may offer different tiers of our Services as allowed by applicable data privacy laws (including the CCPA) with varying prices, rates, or levels of quality of the goods or services you receive related to the value of Personal Data that we receive from you.

United States Residents Generally. In states where residents are afforded additional individual privacy rights, we are committed to honoring those rights, including requests to limit how we use and share your data, or to delete or correct inaccurate data, consistent with applicable law. Note that applicable law may exempt certain personal information from such requests. We will respond to your request as required by law, and if any circumstances cause a material delay in our response, you will be promptly notified. Under certain state laws, residents may opt out of the sale or sharing of their personal information, or the use of their personal information for targeted advertising or profiling purposes; we will not sell your personal information unless we first provide you with a separate notice prior to such sale. In certain situations, you may have the right to appeal the denial of your request to exercise your rights.

8.5.6 Nevada Resident Rights

If you are a resident of Nevada, you have the right to opt out of the sale of certain Personal Data to third parties who intend to license or sell that Personal Data. You can exercise this right by filling out the form in our subscription center or contacting us with the subject line "Nevada Do Not Sell Request" and providing us with your name and the email address associated with your account.

[Comment: RETAINED from Clari — Nevada's narrower 'sale' opt-out right is distinct from CCPA-style 'sale' and is not otherwise covered by the generic multistate language above (Matrix Topic 17).]

8.6 Rights under GDPR and other Applicable Laws

At Salesloft, we respect your privacy rights under the General Data Protection Regulation (GDPR) and other applicable data protection laws, including those for individuals in the United Kingdom, EEA, and Switzerland.

• Right to withdraw consent. For any consent-based processing of your personal information, you have the right to withdraw your consent. A withdrawal of consent will not affect the lawfulness of our processing or the processing of any third parties based on consent before your withdrawal.
• Right of access/right of portability. You may have the right to access the personal information that we hold about you, and in some limited circumstances, have the personal information provided to you so that you can provide that personal information to another controller.
• Right to rectification. You may request to correct any of your personal information in our files.
• Right to erasure. In certain circumstances, you may have a right to the erasure of your personal information that we hold on you.
• Right to restriction. You have the right to request that we restrict our processing of your personal information in certain circumstances.
• Right to object to processing. You have the right to object to our processing of your personal information at any time and as permitted by applicable law if we process your personal information on the legal bases of: consent; contract; or legitimate interests. We may continue to process your personal information if it is necessary for the defense of legal claims, or for any other exceptions permitted by applicable law.
• Notification to third parties. When we fulfill your individual rights requests for correction, erasure or restriction of processing, we will notify third parties also handling the relevant personal information unless this proves impossible or involves disproportionate effort.
• Right to Lodge Complaint. We commit to resolve complaints about our collection or use of your personal information. EEA, UK, or Swiss individuals with inquiries or complaints regarding this privacy notice should first contact us at privacy@salesloft.com. You also have the right to lodge a complaint with the supervisory authority of your habitual residence, place of work or place of alleged infringement, if you consider that the processing of your personal information infringes applicable law.

We may limit these privacy rights requests where denial of access is required or authorized by law, when granting access would have a negative impact on others' privacy, to protect our rights and properties, or where the request is frivolous or burdensome. Right to withdraw consent. Where our processing is based on consent, you may withdraw it at any time; this will not affect the lawfulness of processing carried out before your withdrawal. Notification to third parties. When we fulfill a correction, erasure, or restriction request, we will notify third parties also handling the relevant Personal Data unless this proves impossible or involves disproportionate effort. Right to lodge a complaint. You have the right to lodge a complaint with the supervisory authority of your habitual residence, place of work, or place of alleged infringement, if you consider that the processing of your personal information infringes applicable law.

Additionally, for individuals in Switzerland, we honor the Choice Principle, allowing you to make informed choices about how your personal data is collected, used, and shared. You can exercise your choices regarding your personal data by reaching out to us.

We will only contact individuals located in the Designated Countries (the EEA, UK, or Switzerland) by electronic means (including email or SMS) based on our legitimate interests, as permitted by applicable law, or the individual's consent. If you do not want us to use your personal information in this way, please go to the email settings for your account to opt out, click an unsubscribe link in your emails, or contact us. You can object to direct marketing at any time and free of charge.

In allowing you to use our Websites, Interactions, and Service, we may need to transfer your personal information outside the Designated Countries, including to countries that do not provide the same level of protection for personal information. In such case, we will only transfer personal information to recipients that provide an adequate level of data protection or as permitted by applicable data protection laws by implementing appropriate safeguards, including, but not limited to, relevant data transfer agreements based on the EU Standard Contractual Clauses or UK Standard Contractual Clauses, as applicable ("Clauses"). The Clauses shall apply to any transfers of personal information from the Designated Countries to countries which do not ensure an adequate level of data protection within the meaning of applicable laws of the foregoing territories.

Our legal bases for collecting and using the personal information described above will depend on the type of personal information collected, the specific context in which we collect it, and the purposes for which it is used. Whenever we require your consent for processing, such processing is based on Article 6(1)(a) GDPR or the equivalent legal basis in applicable law. Where processing is necessary for the performance of a contract between you and us, or for taking pre-contractual steps at your request, it is based on Article 6(1)(b) GDPR; if this data is not processed, we will not be able to execute the contract with you. Where processing is necessary for us to comply with a legal obligation (for example, anti-money laundering laws), it is based on Article 6(1)(c) GDPR. Where processing is necessary for the purposes of our or another party's legitimate interests, it is based on Article 6(1)(f) GDPR.

8.7 Data Privacy Framework Protections

With respect to Personal Data that Salesloft, Inc. manages on behalf of its customers as a data processor in connection with providing Salesloft's services, Salesloft, Inc. — together with its affiliates Clari, Inc. and Groove Labs LLC — complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.

Salesloft has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of Personal Data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Salesloft has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of Personal Data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms of this Section 8.6.1 and the DPF Principles, the DPF Principles shall take precedence. To learn more about the DPF program, and to view our certification, please visit dataprivacyframework.gov.

The Federal Trade Commission has jurisdiction over Salesloft's compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF.

Personal Data – Collection, Type, and Purpose for Processing. Personal Data is provided to Salesloft by our customers (including through integrations between Salesloft's services and customer-owned or -controlled systems) or collected from third parties as determined by the customer's use of our services. Under these circumstances, each customer is the data controller of Personal Data that it provides to Salesloft. As the data controllers, our customers determine the type and scope of Personal Data processed by Salesloft. This commonly includes, but may not be limited to: name, contact information (such as email address and phone number), employer, employment title, IP address, localization data, and the other types of data described in Schedule 1 of our Data Processing Addendum. If you would like more information about how a Salesloft customer obtained or manages your Personal Data, you should contact the applicable data controller and/or review the data controller's privacy notice. Salesloft is a data processor of the Personal Data described above. We process Personal Data for the purposes of providing, securing, troubleshooting, and supporting our services, supporting and optimizing our customer's use of the services, complying with our legal and contractual obligations, investigating incidents or misuse of the services, and as otherwise outlined in our customer agreements or instructed by our customers. Salesloft retains Personal Data as required by our customer contracts or as directed by our customers.

Transfers to Third Parties. Salesloft discloses Personal Data to a limited number of third parties acting as sub-processors, contractors, or service providers. These third parties assist in providing, securing, supporting, troubleshooting, and otherwise maintaining Salesloft's services, and help Salesloft provide support to customers. The identity of these third parties generally falls into categories such as cloud service providers, infrastructure providers, communication platforms, analytics providers, customer support tools, and other specialized service providers. For a comprehensive and continuously updated list of our current sub-processors, including their identity and purpose, please refer to our dedicated Sub-processor List available at trust.salesloft.com. As required by the DPF, Salesloft is liable if these third parties fail to process Personal Data in compliance with the DPF Principles, unless Salesloft is not responsible for the event giving rise to the damage.

Right to Access, Amend, Delete, Limit Use of, or Limit Disclosure of Personal Data. Individuals located in the European Union, United Kingdom (and Gibraltar), or Switzerland have certain rights over their Personal Data. Those individuals can access the Personal Data that Salesloft processes about them, request that such data be amended if inaccurate, or deleted if the data is no longer necessary for the purposes for which it was collected or has been processed in violation of the DPF Principles, and limit use and/or disclosure of their Personal Data. If these rights are applicable to you and you would like to exercise your rights, please contact the applicable data controller of your Personal Data (i.e., the customer that engaged Salesloft to process your Personal Data on its behalf). Salesloft may process your Personal Data only at the instruction of the applicable controller, as required by our contracts and applicable regulations. Accordingly, if you reach out to Salesloft directly with your request, we can only refer your request to the controller. Where needed, and as instructed by the applicable controller, Salesloft will provide assistance to the controller in responding to your request. If Personal Data covered by this Section is to be used for a new purpose that is materially different from that for which the Personal Data was collected or subsequently authorized, or is to be disclosed to a non-agent third party in a manner not specified in this Section or otherwise notified to or consented by you, it is the responsibility of the applicable controller of your Personal Data to provide you with an opportunity to choose whether to have your Personal Data so used or disclosed. You should submit requests to opt out of such uses or disclosures to the controller of your Personal Data (i.e., the specific customer that engaged Salesloft to process your Personal Data on its behalf). If you are unable to verify the Salesloft customer that is a controller of your Personal Data, or the controller is not responding to your request or providing you with a mechanism to exercise your rights as described herein, please contact us at privacy@salesloft.com. Certain personal data, such as information about medical or health conditions, racial or ethnic origin, political opinions, and religious or philosophical beliefs, is considered "Sensitive Information." We do not typically process Personal Data that is Sensitive Information. However, in the event that we inadvertently receive Personal Data that is Sensitive Information, we will not process it for any purposes other than those which are described in this Section, unless otherwise consented by you.

Inquiries and Complaints. In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, Salesloft commits to resolve DPF Principles-related complaints about our collection and use of Personal Data. EU, UK, Gibraltarian, and Swiss individuals with inquiries or complaints regarding our handling of Personal Data received in reliance on the DPF should first contact privacy@salesloft.com. As a data processor, Salesloft processes Personal Data strictly on behalf of and under the instructions of our customers, who act as the data controllers, and to comply with our legal obligations. Our customers are responsible for responding to requests from individuals to exercise their rights, including the right to access, amend, delete, limit the use of, or limit the disclosure of their Personal Data. Salesloft provides our customers with the necessary mechanisms to enable them to effectively manage and fulfill their responsibilities as data controllers in responding to such requests in connection with our service offerings. Salesloft commits to refer unresolved complaints concerning our handling of Personal Data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States. If after contacting us at privacy@salesloft.com you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit jamsadr.com/DPF-Dispute-Resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you. If neither Salesloft nor our dispute resolution provider resolves your complaint, you may have the option to engage in binding arbitration through the Data Privacy Framework Panel. For more information on this option, please see Annex I of the EU-U.S. Data Privacy Framework Principles. If your request relates to our customers' data processing activities (as opposed to Salesloft's compliance with the DPF Principles or this Section), please note that we will direct your request, or the relevant components thereof, to the controller of your Personal Data.

Requests from Public Authorities. Salesloft may be required to disclose Personal Data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

9. Changes to this Privacy Policy

We're constantly trying to improve our Services, so we may need to change this Privacy Policy from time to time as well, but we will alert you to changes by placing a notice on the www.clari.com website, by sending you an email, and/or by some other means. Please note that if you've opted not to receive legal notice emails from us (or you haven't provided us with your email address), those legal notices will still govern your use of the Services, and you are still responsible for reading and understanding them. If you use the Services after any changes to the Privacy Policy have been posted, that means you agree to all of the changes. Use of information we collect is subject to the Privacy Policy in effect at the time such information is collected.

If we make material changes to the way we collect, use, share or process the personal information that you provide, we will notify you by posting a notice of the changes in a clear and conspicuous manner on the website, via the most recent email address we have on file for you, or via another communication channel where permitted by law.

10. Contact Salesloft About Your Privacy

If you have any questions or comments about this Privacy Policy, the ways in which we collect and use your Personal Data, your choices and rights regarding such use, please contact Salesloft:

by email at privacy@salesloft.com;

by post to Salesloft, Inc., 285 W Wieuca Rd NE STE 60666

Atlanta, GA 30342

or via our online rights-request form available here.

To exercise your rights, or if you have any other questions about this Notice or our treatment of your personal information not addressed above, you may also send us an email at privacy@salesloft.com or by post to Salesloft, Inc., 285 W Wieuca Rd NE STE 60666, Atlanta, GA 30342