Privacy Policy

Last updated: 21 October 2025

Salable Limited ("we", "us" or "our") is committed to preserving your privacy.

Salable Limited would like to inform you about the way in which it collects, processes, uses, shares, controls and protects the information that you provide to us, including your Personal Data. If you do not agree with this Privacy Policy ("Privacy Policy"), do not access or use our websites, products and services or interact with any other aspect of our business.

By submitting information to us in any way, or by using our websites, systems, products or services ("Services"), or by interacting with us via email, phone, messaging service, in-person meeting or any other means ("Interactions"), you consent to the collection, use, processing and transfer of your information under the terms of this policy.

1. Who We Are

Salable Limited is part of The Adaptavist Group and a Data Controller pursuant to this Privacy Policy. The Adaptavist Group is a multinational group of companies operating worldwide.

Information and contact details of Salable Limited and The Adaptavist Group entities can be found in the Legal Notice.

2. Definitions

The terms below shall have the following meanings:

2.1. "Personal Data Breach," "Controller," "Processor", "Data Subject", "Personal Data", "Processing," "Special Category Data", "Profiling", "Pseudonymisation", "Consent", and "appropriate technical and organisational measures" as used in this Policy shall have the meanings given in the GDPR irrespective of whether GDPR, UK GDPR, or U.S. Data Protection Law applies.

2.2. "Data Protection Law" means European Data Protection Law including GDPR, UK-GDPR, POPIA and U.S. Data Protection Law that are applicable to the processing of Personal Data under this Policy.

2.3. "European Data Protection Law" means any data protection and privacy laws of Europe applicable to the Personal Data in question, including Regulation (EU) 2016/679 (GDPR), Directive 2002/58/EC, the Swiss Federal Data Protection Act of 2023 (FADP), and in respect of the United Kingdom, the Data Protection Act 2018 and UK GDPR.

2.4. "U.S. Data Protection Law" means data protection or privacy laws applicable to Personal Data in force within the United States, including the California Consumer Privacy Act (CCPA).

3. Regulatory Registration

As part of the requirements of the data protection law, Salable Limited and its affiliates have registered with the supervisory authority.

Salable Limited has registered with the Information Commissioner (ICO) in the United Kingdom. You can contact the ICO on +44 0303 123 1113 or on their website: http://ico.org.uk/concerns

4. Your Usage of Websites

4.1. Software Downloads

We may make certain software available for download on our websites and may link to software on other, third party websites. This software may be created by Salable Limited, its affiliates or by third party vendors.

4.2. Privacy on Third Party Websites

Our websites may contain links to other websites of interest. However, once you have used these links to leave our site, you should note that we do not have any control over that other website. We recommend that you review the privacy policy of any third-party website you visit.

4.3. Users of Age 18 and Under

If you are aged 18 or under, please get your parent/guardian's permission beforehand whenever you provide personal information to our websites. Users without this consent are not allowed to provide us with personal information.

4.4. Comments and Ratings

Should any pages on any of our systems allow posting of comments, your username may be associated with any comments.

4.5. Offensive Language and Behaviour

We reserve the right to remove content and to remove any user's access to its Services for content which is offensive, abusive, provocative or for discriminatory language posted on or sent through our Services.

5. What Data Do We Collect?

When you use our services or interact with us, we may collect data about you, your use of the services and interactions. This information can be categorised generally as follows:

  • Access data and log files
  • Cookies and Pixels
  • Interaction data
  • Transactional and Commerce Data
  • Product Data

This data may include: identification information (name, email, addresses), commercial information (payment details), technical platform information, web related information, activities related to your use of Services, educational and professional information, geolocation data, and communication information.

We do not knowingly process any Special Category Data (as defined under European Data Protection Law) or Special Personal Information (as defined under POPIA) under this Privacy Policy.

6. How We Collect Personal Data

We collect Personal Data from the following sources:

6.1. Direct and Indirect Interactions

You may provide information to us via one of our Services or via Interactions. We may collect information from you in the course of you using our Services.

6.2. Data from Third Parties

We may be provided information from third party vendors, service providers, event organizers, and transactional information from companies such as Atlassian.

6.3. Data from Automated Tracking Technologies

Automated tracking technologies such as cookies and web logs collect information about your interaction with our Services.

7. How We Use Your Personal Information

Personal Data is used for the purposes for which it was collected. To the extent permitted by law, we will use data provided to:

  • Provide our Services, including administration, operation and support
  • Meet our legal and regulatory obligations
  • Carry out marketing and advertising of our Services

We rely on the following lawful basis for processing: consent, contract performance, legal obligations, and legitimate interest.

All marketing email communications from Salable Limited shall provide the option to unsubscribe at any time.

8. How Long Do We Keep Your Personal Data?

We will keep and process your Personal Data only for as long as is necessary for the purposes for which it was collected, unless we have a legal obligation to retain the data for a longer period.

The criteria used to determine the retention period include the nature of the data, the purposes for which it was collected, and any legal or regulatory requirements. We periodically review our retention periods to ensure that Personal Data is not kept longer than necessary.

9. Sharing Your Personal Information

9.1. General

There are various people within Salable Limited who may need access to the information that you provide us for technical, commercial or compliance reasons. Your Personal Data will be shared with affiliates within Salable Limited when legally permissible or with your express consent.

9.2. Access and Administration

The information you provide will be held on our computers and may be accessed by or given to our staff, affiliates or subcontractors.

9.3. Promotional Reference

Clients who purchase goods or services from us may be referenced in our promotional material. Should you not want to be listed, please contact us.

9.4. International Transfers - UK

Sharing your Personal Data may involve transferring it outside of the United Kingdom. We ensure a similar degree of protection through adequacy decisions or appropriate safeguards such as the UK Data Transfer Agreement.

10. Third Parties

We collaborate with third parties that help us operate, provide, improve, integrate, customise, and support our Services.

10.2. Service Providers

We work with third-party service providers for hosting, maintenance, payment processing, and analysis. These may include StreamYard for events and various data storage providers.

10.3. Marketing Providers

We work with marketing providers including Facebook, LinkedIn, and Zoominfo to market and advertise our Services.

10.4. Integrated Partners

Our products integrate with third parties including Atlassian, AWS, Slack, Paddle, Monday.com, and Stripe.

11. Access Data and Log Files

When you visit our websites, access data and log files may be transmitted by your browser and stored by our web hosting providers. These log files record information about your visit and access to our websites.

This information includes: the IP address of the requesting computer or network, the date and time of access, the name and URL of the retrieved files, the website from which access was made (referrer URL), the browser and operating system used, and the name of your Internet access provider.

The collection and processing of this data is for the purpose of enabling the use of our websites (establishing a connection), ensuring system security and stability in the long term, and for technical administration of the network infrastructure. The legal basis for this processing is our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6 (1) lit. f GDPR.

The IP address will not be compared with other data sources; this means that there will be no allocation to individual persons. A statistical evaluation for marketing and advertising purposes is also not performed.

12. Cookies and Pixels

We use cookies and pixels for various purposes, including to optimise our websites and analyse website traffic.

Types of Cookies

  • Functionality Cookies: Enable us to monitor performance and enhance browsing experience
  • Marketing and Analytics Cookies: Collect data on user behaviour and personalise content
  • Advertising Cookies: Personalise and measure advertising effectiveness
  • Essential Cookies: Necessary for website functionality

You can manage cookies through your browser settings. Visit our cookie preference center for more control over your cookie preferences.

13. Product Data

13.1. In-Product Analytics

Some of our Services allow us to collect information within the product, including IP addresses for tracking, fraud detection and prevention, and to ensure our systems and services are used within the agreed parameters. These measures may also be captured by your internet or corporate firewalls.

13.2. Diagnostic Data / Error Logs

When you use our Services, we may collect diagnostic data and error logs. We process this data to improve product stability, fix bugs, and enhance the user experience.

13.2.1. Log and Supplied Information

We use Sentry to capture error logs and diagnostic information. When an error occurs, data is sent to Sentry which may include technical information about your system, browser, and the context of the error. This helps us identify and fix issues quickly.

13.2.2. General Diagnostics

We collect general diagnostic information from our products to understand how they are being used and to identify areas for improvement. This may include feature usage statistics, performance metrics, and error rates.

13.2.3. Aggregated Diagnostics

We use Datadog to collect and analyze aggregated diagnostic data across our services. This includes performance monitoring, infrastructure metrics, and application logs. The data is used to ensure our systems are running optimally and to detect potential issues before they impact users.

13.2.4. Metrics

We collect metrics about the performance and usage of our Services. These metrics help us understand how our products are performing and guide our development priorities.

13.3. General Data

Some of our Services allow you to create and store content such as configurations, licenses, and subscription details. This user-generated content is stored securely and is only accessible to authorized users within your organization.

13.4. Administrative Data (Atlassian Cloud Apps)

For Atlassian Cloud applications, we may receive and process administrative data about your Atlassian instance. This includes information about users, groups, permissions, and product configurations. This data is necessary to provide our services within the Atlassian ecosystem.

13.5. Personal Profile Data

We use Clerk to manage user authentication and profile information. This includes your name, email address, and account settings. Clerk processes this data on our behalf in accordance with their privacy policy and data processing agreements.

13.6. On-premises vs Hosted Services (Cloud Apps)

Our cloud-hosted services are provided under the terms of our Data Processing Agreement (DPA), which sets out our obligations regarding the processing of your data. For on-premises installations, different terms may apply depending on your deployment model.

Note on Slack Apps: For integrations with Slack, we may receive and process data from your Slack workspace including messages, user information, and channel data as necessary to provide our services. This data is processed in accordance with our DPA and Slack's platform requirements.

14. Interaction Data

We collect data from your interactions with us through various channels including phone calls, emails, website contact forms, live chat, and in-person meetings. This data may include your name, email address, phone number, company information, and the content of your communications with us.

We do not knowingly collect any Special Category Data (as defined under GDPR) through these interactions. If you provide such data to us, we will handle it in accordance with applicable data protection laws.

The legal basis for processing this data is our legitimate interest in communicating with you, responding to your inquiries, and providing customer support. Where we send marketing communications, we rely on your consent or our legitimate interest, and you can opt out at any time.

15. Transactional and Commerce Data

When you purchase products or services from us, we collect transactional and commerce data necessary to process your order and fulfill our contractual obligations. This includes information about license purchases, subscription orders, and payment details.

Transactions may be completed through various channels including phone orders, our website, or third-party marketplaces such as the Atlassian Marketplace. Payment processing is handled by our payment partners including Paddle and Stripe, who process payment information on our behalf.

The legal basis for processing this data is the performance of a contract with you. We retain this data for the duration required to fulfill our contractual obligations and to meet our legal obligations regarding financial record-keeping.

16. Newsletter

We offer a newsletter service called "AdaptaNews" which provides updates about our products, services, and company news. When you subscribe to our newsletter, we collect your email address and, optionally, your name and preferences.

Our newsletters may contain tracking pixels that allow us to understand whether the email was opened and which links were clicked. This helps us improve the relevance and quality of our communications. The tracking pixel is a small, transparent image embedded in the email.

The legal basis for sending newsletters is your consent, which you provide when you subscribe. You can withdraw your consent at any time by using the unsubscribe link in any newsletter or by contacting us directly.

To unsubscribe from our newsletter, click the "unsubscribe" link at the bottom of any email newsletter, or contact us at contractuals@adaptavist.com

17. What Are Your Rights

Depending on your location and subject to applicable laws, if you are a resident of the EEA, UK or South Africa, you have the following rights:

  • Right to request information about your Personal Data
  • Right to request rectification of incorrect or incomplete data
  • Right to request erasure of your Personal Data
  • Right to request restriction of processing
  • Right to receive your data in a portable format
  • Right to submit a complaint to a supervisory authority

You can exercise these rights by sending an email at contractuals@adaptavist.com

18. Right of Withdrawal

Where we process your Personal Data based on your consent, you have the right to withdraw that consent at any time. This includes consent for marketing communications, newsletter subscriptions, or optional data collection.

To withdraw your consent, you can:

  • Use the unsubscribe link in any marketing email
  • Update your preferences in your account settings
  • Contact us directly at contractuals@adaptavist.com

Please note that withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal. Additionally, we may continue to process your Personal Data on other legal bases, such as for the performance of a contract or to comply with legal obligations.

19. User Research Addendum

From time to time, we may conduct user research to better understand how our products are used and to identify opportunities for improvement. Participation in user research is voluntary.

If you choose to participate in user research, we may collect additional information including:

  • Your feedback and opinions about our products and services
  • Screen recordings or screenshots of your use of our products
  • Audio or video recordings of interviews or usability sessions
  • Demographic information and professional background

Before participating in any user research activity, we will provide you with specific information about what data will be collected, how it will be used, and how long it will be retained. We will obtain your explicit consent before collecting any data through user research activities.

User research data is processed on the legal basis of your consent. You can withdraw your consent at any time by contacting us, though this will not affect any research data already collected and processed with your consent.

Research findings may be shared internally within Salable Limited and The Adaptavist Group to inform product development decisions. Any published research findings will be anonymized to protect participant privacy.