How do you match me with a partner?

We consider your industry, prospect demographics, and call context. For enterprise deals, we match sophisticated presence. For high-ticket coaching, someone warm and engaging. For tech startups, someone more dynamic.

What does the partner do on the call?

They appear as your executive assistant, taking notes and occasionally asking clarifying questions. This adds legitimacy while triggering the Halo Effect.

Yes. We leverage well-documented psychology. Your assistant IS helping by being present and professional. Many executives have assistants join calls.

What about confidentiality?

All partners sign strict NDAs. They are contractually bound to confidentiality. Many clients use us for investor pitches with sensitive information.

Can I use this for investor pitches?

Absolutely. Investor pitches are our most popular use case. A polished team presence significantly improves how VCs perceive your operation.

Back to SalesWing

Privacy Policy

Last updated: February 2026

This policy applies to all users of saleswing.xyz, including clients who purchase call credits and wing girls who join our network as independent contractors. It is written in compliance with the EU General Data Protection Regulation (GDPR) and French data protection law (Loi Informatique et Libertés).

1. Data Controller

The data controller responsible for processing your personal data is:

Company: BP Corp (operating under the brand SalesWing)

Legal form: SASU (Societe par Actions Simplifiee Unipersonnelle)

Registered office: Paris, France

Website: saleswing.xyz

Data protection contact: hello@saleswing.xyz

2. Personal Data We Collect

2.1 Data collected from clients (businesses purchasing calls)

Full name and professional role
Email address (used for magic-link authentication)
Company name and website URL
Product or service description
Booking data: call date and time, Zoom link, prospect information
Payment data: transaction history (card details processed exclusively by Stripe and never stored by us)
AI-generated company profile created from your website content (using Google Gemini; see section 7)

2.2 Data collected from wing girls (independent contractors)

Full name and email address
Phone number (used for OTP authentication)
Professional specialties, biography, and availability
Payment details: preferred method (Revolut, PayPal, bank transfer, or gift card) and associated account information
Completed call history and earnings records
AI-generated pre-call brief content assigned per booking

2.3 Technical and usage data (all users)

IP address and approximate geolocation
Browser type and version, device type
Pages visited, time on site, referring URL
Authentication session tokens (Supabase Auth, stored in httpOnly cookies)

3. Purposes and Legal Bases for Processing

Purpose	Legal basis (GDPR Art. 6)
Account creation and authentication	Contract performance (Art. 6.1.b)
Booking management and call scheduling	Contract performance (Art. 6.1.b)
Sending email reminders (24h, 3h, 1h, 15min, 5min, 0min before calls)	Contract performance (Art. 6.1.b)
Payment processing via Stripe	Contract performance (Art. 6.1.b)
Wing girl compensation via Revolut, PayPal, bank transfer, or gift card	Contract performance (Art. 6.1.b)
AI profile generation from client website (Google Gemini)	Legitimate interest — service quality (Art. 6.1.f)
AI pre-call brief generation for wing girls	Legitimate interest — service delivery (Art. 6.1.f)
Anti-fraud and abuse prevention	Legitimate interest (Art. 6.1.f)
Website analytics (Vercel Analytics)	Legitimate interest — anonymised (Art. 6.1.f)
Accounting and tax obligations	Legal obligation (Art. 6.1.c)
Marketing emails (if opted in)	Consent (Art. 6.1.a)

4. Anti-Bypass Architecture — Protection of Wing Girl Identities

We never share wing girl personal information with clients.

SalesWing operates a strict data separation model. Clients receive only the information required to conduct their call: a confirmed time slot and the wing girl's first name. Clients do not receive wing girl email addresses, phone numbers, payment details, or any contact information that would allow direct communication outside the platform. This structural separation is enforced at the database level and is a deliberate design choice to protect our contractors.

Similarly, wing girls receive only the information necessary to prepare for and join a call: the date, time, Zoom link, and an AI-generated brief summarising the client's product and call context. Wing girls do not receive the client's personal email, company financial data, or prospect contact details beyond what appears in the brief.

5. Data Sharing and Sub-Processors

We never sell, rent, or trade your personal data. We share data only with the following sub-processors who are contractually bound to process it solely on our behalf:

Supabase Inc.

Role: Database hosting and authentication

Location: United States (EU-US Data Privacy Framework)

Data transferred: All account, booking, and session data

Stripe Inc.

Role: Payment processing

Location: United States (EU-US Data Privacy Framework)

Data transferred: Payment transaction data; card details never reach our servers

Resend Inc.

Role: Transactional email delivery (call reminders, confirmations)

Location: United States

Data transferred: Email address, name, call context for reminder emails

Google LLC (Gemini API)

Role: AI profile and pre-call brief generation

Location: United States (EU-US Data Privacy Framework)

Data transferred: Client website URL and product description; no sensitive personal data

Vercel Inc.

Role: Website hosting and edge functions

Location: United States (EU-US Data Privacy Framework)

Data transferred: Request logs, anonymised analytics

6. International Data Transfers

Some sub-processors listed above are based in the United States. Transfers are covered either by the EU-US Data Privacy Framework (adequacy decision of 10 July 2023) or by the European Commission's Standard Contractual Clauses (SCCs). No data is transferred to countries without an adequate level of protection.

7. AI-Assisted Processing (Google Gemini)

SalesWing uses the Google Gemini API to perform two automated tasks:

Client profile generation: Upon registration, the client's website URL is submitted to Gemini, which returns a structured summary of their company, product, and value proposition. This summary is stored to pre-populate the booking form and help wing girls prepare.
Pre-call brief generation: Before each call, a brief is generated combining the client's profile and booking context. This is provided only to the assigned wing girl.

These processes do not involve automated decision-making that produces legal or similarly significant effects (GDPR Art. 22 does not apply). You may request a human review of any AI-generated content by contacting hello@saleswing.xyz.

8. Data Retention

Category	Retention period
Client account data	Duration of account + 3 years after last activity
Wing girl account and payment records	Duration of contractor relationship + 3 years
Booking and call records	5 years (contractual limitation period)
Payment transaction records	10 years (French accounting law — Code de commerce Art. L. 123-22)
Authentication session tokens	30 days (rolling)
Technical logs (IP, user agent)	13 months maximum
AI-generated briefs and profiles	Deleted upon account deletion

9. Cookies and Tracking

We use the following cookies and tracking technologies:

Essential cookies

Supabase authentication session token (httpOnly, secure). Required for login to function. No consent required.

Analytics (Vercel Analytics)

Privacy-friendly, cookieless analytics for page views and performance. No personal identifiers stored. No consent required.

Meta Pixel (Facebook)

Advertising conversion tracking. Fires on page load. You can opt out via Meta's ad preferences or a browser extension such as uBlock Origin.

10. Your Rights (GDPR)

Under the GDPR you have the following rights. To exercise any of them, email hello@saleswing.xyz. We will respond within 30 days.

Right of access (Art. 15): Obtain a copy of all personal data we hold about you.
Right to rectification (Art. 16): Correct inaccurate or incomplete data.
Right to erasure (Art. 17): Request deletion of your data, subject to legal retention obligations.
Right to restriction (Art. 18): Limit how we process your data in certain circumstances.
Right to data portability (Art. 20): Receive your data in a machine-readable format.
Right to object (Art. 21): Object to processing based on legitimate interest.
Right to withdraw consent: At any time, where consent is the legal basis.

You also have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertes), the French data protection authority.

11. Data Security

All data in transit is encrypted via TLS 1.2+ (HTTPS)
Database at rest encryption provided by Supabase (AES-256)
Passwordless authentication (magic links for clients, OTP for wing girls) eliminates password-related vulnerabilities
Admin access protected by password authentication with restricted IP access
Wing girl personal and payment data is structurally isolated from client-facing data
Payment card data is never stored on our infrastructure — processed entirely by Stripe

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable law. Material changes will be notified by email to active account holders. Continued use of the service after the updated policy is published constitutes acceptance.

13. Contact

For any question about this Privacy Policy or to exercise your rights:

Email: hello@saleswing.xyz

SalesWing is operated by BP Corp, SASU, Paris, France. Last updated: February 2026.