Last updated: July 29, 2026
Major Sales ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how your personal information is collected, used, and disclosed by Major Sales.
This Privacy Policy applies to our website and its associated subdomains (collectively, our "Service"), our CRM platform, the messaging channels we use, and the third-party accounts you choose to connect to the platform — including your Google (Gmail) account. By accessing or using our Service, you confirm that you have read, understood, and agree to our collection, storage, use, and disclosure of your personal information as described in this Privacy Policy and our Terms of Service.
For clarity, each time the following terms are referenced in this Privacy Policy, they are defined as:
This policy explains how you can delete the personal data we hold about you, including data we received through Messenger, Instagram, or WhatsApp Business, and data we synchronized from a connected Google (Gmail) account.
To provide our communication features, we connect to Meta's platforms. When you message us, or when a connected business account is used, we access specific data from Meta solely to operate the Service. We are transparent about what we process on each channel:
(a) Facebook Messenger. When you message our Facebook Page, we receive your page-scoped user ID, your name, your profile picture (where provided), and the content and timestamps of the messages exchanged with us. We use this to respond to and manage your conversation and the related sales or CRM enquiry.
(b) Instagram. When you message our Instagram account or interact with our Instagram messaging, we receive your Instagram-scoped ID, your username, your profile information (where provided), and the content of messages exchanged with us. We use this to respond to and manage your conversation.
(c) WhatsApp Business Platform. Where we use the WhatsApp Business Platform, we may access:
We do not receive your private message history with other people or businesses — only the conversation between you and us. All data obtained through these channels is used exclusively to provide our messaging and CRM features and is not used for any purpose prohibited by Meta's Platform Terms.
Major Sales is a CRM used by sales teams. If you choose to connect your own Google account, the CRM shows your email correspondence with each sales lead in one place, and lets you send and reply to those emails without leaving the CRM. This connection is entirely optional: the rest of the Service works without it, you are shown Google's consent screen before anything is accessed, and you can disconnect at any time.
With your authorization, we request the following Google API scopes and use them only as described:
userinfo.email) — to identify which mailbox is connected, link it to your Major Sales user account, and display it in your settings.gmail.send) — to send the emails and replies that you compose and send from within the CRM to your leads and contacts. We do not send email from your account without an action by you or an automation you have configured.gmail.readonly) — to read and display the email correspondence between you and each lead on that lead's CRM record, including sender and recipient addresses, subject, body, attachments, timestamps, labels, and thread identifiers.https://mail.google.com/) — to support full two-way mailbox synchronization: reading and threading correspondence, sending and replying in the correct thread, and reflecting in Gmail the actions you take in the CRM (such as archiving, labelling, or deleting a message).What we do with Gmail data. We access your mailbox solely to provide the features described above to you and to the members of your own Major Sales workspace whom you have authorized. Specifically, we:
What we never do with Gmail data. We do not sell, rent, or trade Google user data. We do not use it for advertising, ad targeting, or building advertising or marketing profiles. We do not use it to train, develop, or improve generalized or standalone artificial intelligence or machine-learning models, and we do not transfer it to any third party for that purpose. We do not use it for credit assessment or lending purposes. We do not transfer it to data brokers, information resellers, or any other party except as strictly necessary to provide the Service to you, to comply with applicable law, or as part of a merger or acquisition in which you receive prior notice.
Human access. Major Sales personnel do not read your Gmail messages. The only exceptions are where: (a) you give us specific consent, for example when you ask our support team to investigate a problem with a particular message or thread; (b) it is necessary for security purposes, such as investigating abuse or a suspected breach; (c) it is required to comply with applicable law; or (d) the data is aggregated and de-identified and used for internal operations such as capacity planning, in line with applicable privacy requirements.
Third parties involved. Gmail content and metadata are stored in our encrypted, access-controlled production database and hosting infrastructure. Any sub-processor with access to that infrastructure is bound by contract to confidentiality, to use the data only to provide services to us, and to the same Limited Use restrictions described below. We do not share your Gmail data with any other Major Sales customer or with any third party for their own purposes.
Disconnecting and deletion. You can revoke Major Sales' access at any time from your Major Sales settings or from your Google Account at myaccount.google.com/permissions. When you disconnect, we stop all synchronization immediately and delete the stored copies of your Gmail content and the associated OAuth tokens within 30 days, except where a limited retention period is required by law. You may also email sophian@majorsaleshub.com to request deletion of synchronized Gmail data without disconnecting the account.
Note for people who email our customers. If you correspond by email with a business that uses Major Sales, that business is the controller of your correspondence with them and may view it inside its CRM, in the same way it could view it in its own inbox. Contact that business directly to exercise your rights over that correspondence; we will assist them as their processor.
For our sales outreach and lead management activities, we may collect business contact information that is publicly available or lawfully provided — for example, publicly listed company contacts, professional profiles, or information shared by our Clients through CRM integrations. We collect this in a limited and specific manner, for the purposes described in this policy.
We do not intentionally collect special or sensitive categories of data (such as health, biometric, genetic, religious, or criminal-record data). Please do not send us such information.
We may use personal information to send you content and communications about our Service, as permitted by applicable law and subject to your right to opt out at any time. We do not use data obtained through Meta platforms or through Google APIs (including Gmail) to build advertising profiles or for any marketing purpose.
We may also use your information for other purposes you request or that are permitted by applicable law.
We are committed to the confidentiality of your data. We do not sell, rent, or trade your personal information or the content of your messages. We may disclose your information only in these limited circumstances:
Major Sales' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In particular, for the Gmail scopes listed above, we confirm that Google user data is:
You can review and revoke Major Sales' access to your Google Account at any time at myaccount.google.com/permissions.
We keep personal information only as long as necessary for the purposes in this policy, or as required by law, considering:
When data is no longer necessary, we delete it or irreversibly de-identify it.
Google user data is retained only for as long as your Google account remains connected and you continue to use the email features of the CRM. It is deleted within 30 days of you disconnecting the account, requesting deletion, or closing your Major Sales account.
We implement technical and organizational measures to protect your personal information, including encryption in transit (and at rest where applicable), access controls, secured hosting and database infrastructure, monitoring, and confidentiality obligations on our personnel and providers. OAuth tokens for connected accounts, including Google, are stored encrypted, are never exposed to other users, and are used only by our servers to make the API calls needed to deliver the features you enabled. No method of transmission or storage is completely secure; while we use reasonable efforts to protect your information, we cannot guarantee absolute security. We will notify you and the relevant authority of any qualifying personal data breach as required by law.
You may contact us to:
We may take reasonable steps to verify your identity before granting access or making changes. Note that backups and legal-retention requirements may mean a copy of some information persists in non-active systems for a limited period; we will update or delete information in our active systems as soon as reasonably and technically practicable.
We process personal data as a Data Controller in accordance with Indonesia's Law No. 27 of 2022 on Personal Data Protection (UU PDP). Depending on the situation, our legal basis is your consent, the performance of a contract, our legitimate interests (such as B2B sales outreach and fraud prevention), or compliance with a legal obligation.
Under the UU PDP, you have the right to: obtain information about and access your data; correct inaccurate data; end processing, delete, or destroy your data; withdraw consent; object to certain processing; obtain or transfer your data; and seek redress for unlawful processing. To exercise these rights, contact sophian@majorsaleshub.com.
This Privacy Policy is governed by the laws of the Republic of Indonesia, without regard to conflict-of-law rules. Your use of the Service may also be subject to other local, national, or international laws. By using Major Sales or contacting us directly, you signify your acceptance of this Privacy Policy.
By using our website, registering an account, or engaging our Service, you consent to this Privacy Policy and agree to its terms.
This Privacy Policy applies only to the Service. The Service may contain links to websites not operated or controlled by Major Sales. We are not responsible for the content, accuracy, or opinions of such websites. When you follow a link away from the Service, this Privacy Policy no longer applies, and your activity is subject to that website's own rules and policies.
Major Sales uses cookies to identify the areas of our website you have visited and to enhance performance and functionality. Most browsers can be set to refuse cookies; if you disable cookies, some functionality may become unavailable or work incorrectly. We never place personally identifiable information in cookies.
Our Service is intended for businesses and professionals and is not directed to children. We do not knowingly collect personal information from children. Under the UU PDP, children's data is treated as specific personal data requiring heightened protection. If you believe a child has provided us with personal data, please contact us and we will take steps to remove it.
We may change our Service and policies, and may need to update this Privacy Policy to reflect those changes. Unless otherwise required by law, we will notify you before changes take effect and give you an opportunity to review them. If you continue to use the Service afterward, you will be bound by the updated policy. If you do not agree, you can stop using the Service and request account deletion.
If you are located in the European Economic Area (EEA) or the United Kingdom, we may process your personal data, and this section explains how and why.
What is GDPR? The GDPR is a privacy and data-protection law governing how the personal data of EEA/UK residents is protected and giving those residents greater control over their data.
Data protection principles. Personal data must be processed lawfully, fairly, and transparently; collected only for specified purposes; kept no longer than necessary; and kept accurate. Individuals have the right to access, correct, delete, restrict, port, or object to the processing of their data.
Your rights. We are committed to supporting data-subject rights, including access, correction, portability, restriction, objection, and erasure. To exercise any of these rights, contact sophian@majorsaleshub.com. You also have the right to lodge a complaint with a supervisory authority.
The California Consumer Privacy Act requires us to disclose the categories of personal information we collect, the purposes for which we use it, the sources we collect it from, and the parties we share it with — all of which are described above. California residents may exercise the following rights:
To exercise these rights, contact sophian@majorsaleshub.com.
CalOPPA requires us to disclose the categories of personal information we collect, how we use it, the sources we collect it from, and the parties we share it with — described above. Under CalOPPA you have the right to know and access this information, the right to deletion, the right to equal service, and the right to opt out of the sale of personal information. We do not sell the personal information of our users. To exercise these rights, contact sophian@majorsaleshub.com.
If you have any questions about this Privacy Policy, contact us:
This policy reflects Meta Platform Terms, the Google API Services User Data Policy (including its Limited Use requirements), Indonesia's UU PDP (Law No. 27/2022), and general GDPR/CCPA/CalOPPA principles as of July 29, 2026. It is not legal advice.