Privacy policy

Effective September 9, 2026

Salt CRM at crm.saltservicesusa.com is a customer-relationship platform operated by Salt Services LLC ("Salt Services," "we," "us") of Sevierville, Tennessee. Local businesses (each a "Business") use it to keep track of their customers, text and call them, answer website forms, and book appointments. This policy explains what the platform collects and how it is used. Short version: each Business's customer data belongs to that Business and is kept separate from every other Business's; we never sell it; and no mobile number is shared with anyone for their marketing.

Two kinds of people this policy covers

Staff users are the people at a Business (and at Salt Services) who log in. For them we store a name, email address, mobile number, a one-way hash of their password, and a log of sign-ins and administrative actions.

Customers and leads are the people a Business talks to through the platform. When you fill in a form on a Business's website, call or text one of its numbers, message its Facebook or Instagram page, or book an appointment, that Business's account records what you shared: your name, phone number, email address, address, the content of your messages, call recordings and voicemail transcripts where the Business has turned recording on, appointment details, and notes the Business's staff write about the work. Salt Services processes this information on behalf of the Business, which decides how it is used. Questions about a Business's use of your information should go to that Business first; we will help either of you.

Text messaging (SMS) terms

A Business may text you through this platform after you give it your number — for example by submitting its contact form, calling it, or replying to it. Messages include appointment confirmations and reminders, replies to your enquiries, quotes and follow-ups, and a one-time login code if you use one of the Business's online tools. Message frequency varies; message and data rates may apply. Reply STOP to any text to opt out, or HELP for help. Opting out stops texts from that Business's numbers; you can still reach it by phone or email. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Opt-in data and consent are not shared with any third party.

Collected automatically

Our host, Vercel, keeps standard server logs (IP address, browser type, pages requested). When you submit a web form we record the page you were on and any campaign identifiers in its address (such as utm and Google click IDs) so the Business can see which advertising brought you. Fonts are loaded from Google Fonts, which receives your IP address to serve them. The platform sets one functional cookie to keep staff signed in; it is not used for tracking or advertising, and we run no advertising pixels here.

How we share information

We share information only with the service providers who make the platform work, each acting on our instructions: Twilio (phone numbers, calls, texts, recordings and transcription), Resend (email delivery), Neon (database hosting), Vercel (application hosting and file storage), Anthropic (AI assistance for drafting replies, summarising leads and answering website chat — content is not used to train their models), Google (calendar sync and business-profile reviews, only for Businesses that connect those accounts), and Meta (Facebook and Instagram messaging, only for Businesses that connect a page). We also disclose information when the law requires it. We do not sell personal information and we do not share it with anyone for their own marketing.

Who at Salt Services can see what

Each Business's data is scoped to that Business; its staff cannot see another Business's customers. Salt Services administrators can see every account in order to operate and support the platform, and every administrative action is written to an audit log.

Security

Connections are encrypted in transit. Passwords are stored as one-way scrypt hashes. Staff logins require a second factor (a code texted or emailed each time). Connected-account tokens are encrypted at rest. No method of storage or transmission is completely secure, and we cannot promise absolute security.

Retention

A Business's records are kept for as long as it uses the platform, then exported to the Business and deleted within 90 days of its account closing unless the law requires longer. Call recordings and voicemails are kept for 12 months by default; a Business can choose a shorter period. Staff sign-in and audit logs are kept for 24 months.

Children

The platform is for businesses and their adult customers and is not directed to children under 13. If you believe a child's information has been collected, contact us and we will delete it.

Your rights

You may ask for a copy of the information held about you, ask that it be corrected, or ask that it be deleted — whichever state you live in. Email fdarnell@saltservicesusa.com or call (866) 721-7258. If the information belongs to a Business's account we will confirm the request with that Business and respond within 30 days.

Changes and contact

When this policy changes we update the effective date above; material changes are also announced to staff users at sign-in. Salt Services LLC, Sevierville, Tennessee · fdarnell@saltservicesusa.com · (866) 721-7258. The privacy policy for our main website is at saltservicesusa.com/privacy-policy/.