Privacy Notice
1. Who we are
SLSBMB AI is operated by SLSBMB Limited, a limited company incorporated in Hong Kong ("SLSBMB", "we", "us"). This Notice explains how we handle personal data when we operate our websites slsbmb.com and slsbmb.ai, the SLSBMB AI workspace, the PROXY interview, AI Outreach Playbook, AI Contacts, Sending Engine, payments, invoices, receipts and support. Privacy requests and questions: a@slsbmb.com.
We keep the public legal pages minimal. Company-registration, tax and bank details and transaction-specific payment data appear only on the invoice, receipt or order issued for a specific purchase.
2. Whose data this covers
- Customers and users: people who visit our websites, talk to PROXY, create or join a workspace, buy or use the Service, or contact us.
- Business contacts and recipients: professionals whose business contact details we find, verify and deliver through AI Contacts, and people who receive or reply to campaigns sent through SLSBMB AI.
3. Our role
We act as controller or data user for account administration, billing, payment and acceptance records, security, abuse prevention, legal records and the service-wide suppression needed to prevent prohibited re-contact. We also act as controller for our public Contact Search demonstrations, including the public search tool for AI assistants, and for records kept to operate, protect and measure those demonstrations.
For a customer's specified paid contact search, its authenticated workspace preview, Contact Pack preparation and delivery, and its instructed interview, research, campaigns, sending and reply handling, we act as processor to the extent we perform those operations solely for that customer's purposes and instructions. The Data Processing Terms apply to that work. If the customer acts for another controller, the corresponding authorised subprocessor relationship applies.
A short-lived technical search cache can serve matching requests; it does not authorise us to reuse private customer materials for another customer's purposes. The same professional may independently match several searches. The legal role follows the actual processing, not whether data is exclusive, stored in one table, supplied free of charge or accessed through an API. Independent activities of a source provider retain their own roles; they are not made our subprocessors merely by appearing in the supply chain. Information about a record's source and applicable processing arrangement can be requested at a@slsbmb.com.
4. Data we process
- Account and contact data: name, business email, company, website, role, team members and sign-in records, including single-use email links and passkey public keys.
- Interview and brief data: what you tell PROXY, the contents of your website and public sources we read, your brief, playbook and campaign content, sender names and the company name and postal address used in your email footer.
- Order and payment data: orders, invoices, payment status and references, wallet and credit records, and legal-acceptance records with document versions and acknowledgements. Card details are collected by the payment provider; we do not receive full card numbers.
- Business-contact data: names, job titles, companies, business email addresses, professional profile links and similar professional facts from public sources and search and enrichment providers, with verification results and suppression markers.
- Campaign and reply data: emails sent and received through workspace mailboxes, delivery events, reply content and its AI classification.
- Usage and technical data: first-party analytics events, request logs including IP address and user agent, and anti-abuse signals, including Cloudflare Turnstile checks, as described in the Cookie and Landing Analytics Notice.
5. How we use data
We use data to provide the Service, including the interview, research, playbooks, contact search and delivery, sending, reply sorting and drafting; to issue invoices and reconcile payments; to keep audit and legal-acceptance records; to secure the Service and prevent fraud, spam and abuse; to keep suppression lists and protect deliverability; to support you and send service emails; to understand and improve the Service and our methods; to show customer references as described in the Terms; and to comply with law and establish or defend legal claims.
6. AI processing
AI providers process content for interviews, research, writing, classification and drafting, including the relevant brief, public-source material, campaign content and replies. The AI providers, their functions and processing locations are listed on the Subprocessors and Providers page. The safeguards for each route we use support our Data Processing Terms and confidentiality duties.
Use of customer materials to operate and improve our Service follows section 12 of the Terms. Customer personal data processed on instructions remains within those instructions and the Data Processing Terms. Provider retention, security and abuse processing are described for the applicable route; this Notice does not promise zero retention across every provider.
7. Purposes and lawful basis
Where a lawful basis is required, we rely on performance of a contract with the individual concerned; legitimate interests in operating and securing the business service, dealing with business representatives, maintaining necessary suppression and defending claims, after considering individual rights; applicable legal obligations; or consent where required. First-party analytics rely on our legitimate interests in operating, supporting and improving the Service, as the Cookie and Landing Analytics Notice describes. Objections can be made as described below.
For processing on a customer's behalf, that customer supplies its lawful instructions and basis. For our own public demonstrations, a reliance on legitimate interests requires assessing the interest in demonstrating the service against the rights and reasonable expectations of the professionals concerned; the public display is limited. This Notice does not itself establish that a particular balancing assessment or individual notice has been completed. Where that basis is unavailable, the affected processing requires another valid basis or must not take place. Requirements for sending marketing communications apply separately.
8. Sharing
We share data with service providers for hosting, storage and backups, email infrastructure, domain registration and DNS, AI, search, enrichment and verification, payments, anti-abuse, monitoring, notifications and support, as described on the Subprocessors and Providers page; with customers ordering AI Contacts only as the business-contact results they request, not as another customer's private materials; with authorities where the law requires; and with a successor if our business is transferred. We do not sell the information you give us in the interview.
9. International transfers
SLSBMB is incorporated in Hong Kong. The Service stores data on servers in the European Union (Hetzner, Finland and Germany), and the providers listed on the Subprocessors and Providers page process data in the locations stated there, including the United States, Singapore and the United Kingdom. For customer data subject to EU, UK or Swiss data-protection law, the Data Processing Terms incorporate the EU Standard Contractual Clauses and the UK Addendum. Questions about transfers: a@slsbmb.com.
10. Retention, closure and deletion
We retain workspace data for the active service and then return or delete data processed on the customer's behalf under the Data Processing Terms. A cancelled subscription or archived workspace is not itself proof that deletion is complete. Contact us to arrange return or erasure and obtain the available confirmation of completion and any lawful retention exceptions.
Invoices, payment evidence and accounting records are kept for applicable statutory periods. Acceptance and dispute records are kept as needed to establish the agreement and resolve or defend claims. Security records are kept for the incident, abuse or legal purpose that justifies them. Minimal suppression records remain for as long as needed to honour the objection and prevent re-contact, rather than being used for new marketing. These exceptions do not authorise indefinite retention of an entire interview or campaign archive.
Restricted backup copies follow the documented rotation and deletion process, including reapplying erasure after restoration. Raw first-party analytics events are normally retained for 90 days and may then be kept only as aggregate counts. Raw provider material associated with a public search demonstration follows the search event's retention, normally 90 days. Workspace search material and Contact Packs follow the instructed workspace service and erasure process, not the search cache's reuse period. Provider-specific retention, exceptions and available deletion actions are recorded for the relevant processing route. Ask us for the criteria or schedule applying to your data.
11. Security
We use reasonable technical and organisational measures to protect personal data, as described on the Security page. No system is completely secure.
12. Your rights
Depending on the law that applies to you, you may have rights to access, correct, delete, restrict or object to the use of your personal data, or to receive a copy of it. Send requests to a@slsbmb.com. We may need to verify your identity, and we may decline a request where the law permits, for example where we must keep records for legal, payment, security or dispute reasons. Requests about a customer's campaign data are passed to, or should be made to, that customer. You may also complain to your data protection authority; in Hong Kong this is the Office of the Privacy Commissioner for Personal Data.
13. If you received an email sent through SLSBMB AI
The company named in the email's footer authorised the campaign and is responsible for its purpose and content. SLSBMB also remains responsible for its own applicable duties. To stop receiving its emails, use the unsubscribe link. If you reply asking never to be contacted again, we also stop every SLSBMB AI workspace from emailing that address. For other requests about your data, write to a@slsbmb.com.
Information for people found through contact search
Professional data can come from public websites or professional profiles and independent business-data search and enrichment providers. We do not infer marketing consent from its availability. Public preview rows shorten names and omit personal profile links, but role and company details may still identify a person. We treat such information as personal data, not as anonymous merely because a name is shortened.
For processing we undertake as controller, we are responsible for providing the required privacy information within the applicable time and recording any exception relied on. A supplier's general privacy policy or publication of this page does not by itself establish that every affected person has been informed. For customer- instructed processing, the customer is responsible for its notice and we provide assistance under the Data Processing Terms. Contact a@slsbmb.com for information about the processing of your details or to exercise your rights.
14. Contracts and individual rights
The Terms and Data Processing Terms govern the customer contract. They do not remove non-excludable rights under applicable data-protection law. You can exercise the rights described in this Notice without becoming a customer.
15. Changes
We may update this Notice by publishing a new version with a new version label and effective date.