Privacy policy

Effective September 25, 2026

Salt CRM at crm.saltservicesusa.com is a customer-relationship platform operated by Salt Services LLC ("Salt Services," "we," "us") of Kodak, Tennessee. Local businesses (each a "Business") use it to keep track of their customers, text and call them, answer website forms, and book appointments. This policy explains what the platform collects and how it is used. Short version: each Business's customer data belongs to that Business and is kept separate from every other Business's; we never sell it; and no mobile number is shared with anyone for their marketing.

Two kinds of people this policy covers

Staff users are the people at a Business (and at Salt Services) who log in. For them we store a name, email address, mobile number, a one-way hash of their password, and a log of sign-ins and administrative actions.

Customers and leads are the people a Business talks to through the platform. When you fill in a form on a Business's website, call or text one of its numbers, message its Facebook or Instagram page, or book an appointment, that Business's account records what you shared: your name, phone number, email address, address, the content of your messages, call recordings and voicemail transcripts where the Business has turned recording on, appointment details, and notes the Business's staff write about the work. Salt Services processes this information on behalf of the Business, which decides how it is used. Questions about a Business's use of your information should go to that Business first; we will help either of you.

Text messaging (SMS) terms

A Business may text you through this platform after you give it your number — for example by submitting its contact form, calling it, or replying to it. Messages include appointment confirmations and reminders, replies to your enquiries, quotes and follow-ups, and a one-time login code if you use one of the Business's online tools. Message frequency varies; message and data rates may apply. Reply STOP to any text to opt out, or HELP for help. Opting out stops texts from that Business's numbers; you can still reach it by phone or email. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Opt-in data and consent are not shared with any third party.

Collected automatically

Our hosting provider keeps standard server logs (IP address, browser type, pages requested). When you submit a web form we record the page you were on and any campaign identifiers in its address (such as utm and Google click IDs) so the Business can see which advertising brought you. Fonts are loaded from Google Fonts, which receives your IP address to serve them. The platform sets one functional cookie to keep staff signed in; it is not used for tracking or advertising, and we run no advertising pixels here.

How we share information

We share information only with the service providers who make the platform work, each acting on our instructions: a telecommunications provider (phone numbers, calls, texts, recordings and transcription), an email delivery provider, a database hosting provider, an application hosting and file storage provider, an AI provider (assistance with drafting replies, summarising leads and answering website chat — content is not used to train its models), Google (calendar sync and business-profile reviews, only for Businesses that connect those accounts), and Meta (Facebook and Instagram messaging, only for Businesses that connect a page). We also disclose information when the law requires it. We do not sell personal information and we do not share it with anyone for their own marketing.

Connected Facebook and Instagram accounts

A Business can connect its own Facebook Page and the Instagram account attached to it, so that messages sent to those accounts arrive in the same inbox as its texts and email, and so that posts written here can be published to them. Connecting is done by signing in with Facebook, and only ever by somebody who already administers those accounts.

When a Page is connected we store its name and identifier, the identifier of any Instagram business account attached to it, and an access token for the Page — encrypted, and used only to deliver the messages and posts that Business asks us to. We store the content of messages exchanged with that Page in the Business's own inbox, in the same way we store its texts and emails. We do not read, collect or store anything else from the connected accounts: not follower lists, not other people's posts, not advertising data.

Removing it. Anyone who connected an account can remove this application from their Facebook account settings at any time. Facebook tells us the moment they do, and we mark every Page and Instagram account they connected as disconnected and delete the access tokens we held. Nothing further is sent or received. Messages that had already arrived belong to that Business's own records and stay with them, exactly as a text message or an email would — a Business can have those deleted too, by asking. There is a short explanation of this at crm.saltservicesusa.com/data-deletion/, and requests can also be sent to fdarnell@saltservicesusa.com.

Who at Salt Services can see what

Each Business's data is scoped to that Business; its staff cannot see another Business's customers. Salt Services administrators can see every account in order to operate and support the platform, and every administrative action is written to an audit log.

Security

Connections are encrypted in transit. Passwords are stored as one-way scrypt hashes. Staff logins require a second factor (a code texted or emailed each time). Connected-account tokens are encrypted at rest. No method of storage or transmission is completely secure, and we cannot promise absolute security.

Retention

A Business's records are kept for as long as it uses the platform, then exported to the Business and deleted within 90 days of its account closing unless the law requires longer. Call recordings and voicemails are kept for 12 months by default; a Business can choose a shorter period. Staff sign-in and audit logs are kept for 24 months.

Children

The platform is for businesses and their adult customers and is not directed to children under 13. If you believe a child's information has been collected, contact us and we will delete it.

Your rights

You may ask for a copy of the information held about you, ask that it be corrected, or ask that it be deleted — whichever state you live in. Email fdarnell@saltservicesusa.com or call (866) 721-7258. If the information belongs to a Business's account we will confirm the request with that Business and respond within 30 days.

Changes and contact

When this policy changes we update the effective date above; material changes are also announced to staff users at sign-in. Salt Services LLC, 3225 Douglas Dam Road, Kodak, TN 37764 · fdarnell@saltservicesusa.com · (866) 721-7258. The privacy policy for our main website is at saltservicesusa.com/privacy-policy/.