Privacy policy (SaaS platform) — Sally

Cited by

Facts read from this source

• Controller Report an error

  “Aliru GmbH Julian Kissel Julius-Hatry-Straße 1 68163 Mannheim, Germany”

• Role processor Report an error

  “In this respect, Aliru GmbH acts as a processor pursuant to Art. 28 GDPR and exclusively on the instructions of that company.”

• Capabilities Report an error

  “The AI-based application actively participates in online meetings on common platforms such as Zoom, Microsoft Teams, or Google Meet. In addition, in-person conversations can be recorded via the Sally app, and existing audio and video files can be uploaded and processed.”

• Task recognition Report an error

  “Task recognition: Automated identification of tasks resulting from the conversation, as well as their system-supported assignment to responsible persons.”

• AI training prohibition Report an error

  “The processing of personal data by Sally AI serves the following purposes:”

• Min age Report an error

  “Sally is not intended for consumers under the age of 18.”

• Retention Report an error

  “Authorized users can delete content themselves at any time. We implement deletion requests within five working days.”

• Post contract deletion Report an error

  “After the contractual relationship ends, data processed on behalf of the customer is deleted within 30 days at the latest, or returned upon request.”

• Raw data deletion Report an error

  “Temporary raw data required solely to carry out transcription and analysis is deleted automatically once the respective processing operation is completed, unless storage has been configured.”

• Retention configurable Report an error

  “The retention period for transcripts and summaries is determined by the company using Sally AI. Fixed retention tiers are available for selection in the system.”

• Data residency Report an error

  “The processing and storage of the data processed on behalf of our customers (conversation content, transcripts, and metadata) takes place exclusively in data centers in the Federal Republic of Germany. No transfer of personal data to third countries takes place.”

• Self hosted llm Report an error

  “The AI-supported processing of conversation content is carried out using a language model operated by us on servers in Germany. No external providers of language models are used for this purpose.”

• Hetzner Report an error

  “Hetzner Online GmbH Provision of cloud infrastructure, web hosting, and data backups.”

• Deepl Report an error

  “DeepL Used for translating meeting summaries and task descriptions.”

• Strato Report an error

  “Strato German hosting provider used for certain web services.”

• Stripe Report an error

  “Stripe Processing and handling of payments (e.g., subscriptions).”

• Microsoft dynamics Report an error

  “Microsoft Dynamics 365 Used for managing customer and user data within our internal CRM system.”

• Optout Report an error

  “Any participant may request, by entering “opt out” in the meeting chat, that all meeting data processed up to that point, meaning audio, video, transcript, and metadata, be deleted without undue delay.”

• Meeting notice Report an error

  “After joining, Sally AI informs participants in the meeting chat that recording and transcription are in progress and links to the data protection information.”

• Optout app limitation Report an error

  “For recordings of in-person conversations via the Sally app and for uploaded audio or video files, these technical notice and objection functions are not available.”

• ISO certifications Report an error

  “Our integrated management system is certified to ISO/IEC 27001:2022, ISO 9001:2015, and ISO 14001:2015 (register no. 260526 14 IMS, issued by DICIS, valid until 26 May 2028).”

• Pentests Report an error

  “regular security audits including annual external penetration tests”

• Encryption Report an error

  “These include, among others, encrypted data transmission, encrypted storage of data, access and authorization controls, logging”

• No automated decisions Report an error

  “Automated decision-making within the meaning of Art. 22 GDPR that produces legal effects concerning data subjects or similarly significantly affects them does not take place.”

• DPA available Report an error

  “The data processing agreement pursuant to Art. 28 GDPR and the overview of the technical and organizational measures (TOMs) in place are available at the following link: https://www.sally.io/dpa”

• Special categories Report an error

  “Sally AI is also used in conversational contexts in which special categories of personal data pursuant to Art. 9 GDPR may arise”

• Collaboration platforms Report an error

  “Storage of summaries and recognized tasks in the collaboration platforms used (e.g., Microsoft Teams)”

• Hours Report an error

  “Mon to Fri, 9:00 am to 4:00 pm”

1 fact read from this page is not shown because it could not be confirmed on the page as captured.

Scores citing this record

• The Management Consultant Recording, transcription & languages
• The Management Consultant Consent, participant rights & works council
• The Management Consultant Retention, AI training & administration
• The Management Consultant European sovereignty
• The Data Protection Officer Recording, transcription & languages
• The Data Protection Officer Summaries, action items & meeting knowledge
• The Data Protection Officer Consent, participant rights & works council
• The Data Protection Officer European sovereignty
• The IT Lead Recording, transcription & languages
• The IT Lead Consent, participant rights & works council
• The IT Lead Retention, AI training & administration
• The IT Lead European sovereignty
• The Sales Team Lead Retention, AI training & administration
• The Sales Team Lead European sovereignty
• The Skeptic Recording, transcription & languages
• The Skeptic Consent, participant rights & works council
• The Skeptic Retention, AI training & administration
• The Skeptic European sovereignty
• The Works Council Chair Recording, transcription & languages
• The Works Council Chair Consent, participant rights & works council
• The Works Council Chair Retention, AI training & administration
• The Works Council Chair European sovereignty