What we collect. What we never do with it.

What this policy covers

Section 01

This policy applies to getgangly.com and the Gangly product — the web dashboard, browser extension, and any integrations you choose to connect. It explains what data enters Gangly, how we use it, who we share it with, and what rights you have.

If you're an end customer of one of our customers (for example, a buyer that our customer's rep called using Gangly), your relationship is with our customer, not us. We process that data on their behalf under their instructions.

Section 02

We collect three categories of data:

Account data — name, email, company, role, and password hash. Created when you sign up, updated when you change it.

Usage data — which features you use, when, and from what device. Used to debug, improve the product, and flag suspicious activity.

Sales data you connect — CRM records via OAuth, call audio via Zoom/Meet integration, email metadata for workflow triggers, LinkedIn profile data via the extension. You control what connects and can disconnect anything at any time.

Section 03

We use your data to do the things Gangly does: detect signals, draft outreach, prep calls, coach live, sync notes to CRM, and report on usage. We also use it to operate the business — billing, support, fraud prevention, legal compliance.

We do not use your data for marketing purposes outside your own account, and we do not profile you for advertising.

The firm commitment

We will never sell your customer data. Not to ad networks. Not to data brokers. Not to aggregators.

Section 04

When you use the Live Call Coach or Post-Call Notes features, Gangly connects to Zoom or Google Meet to access call audio. Audio is transcribed in near real-time and then discarded by default. The transcript is retained so notes and CRM updates work, but you can configure retention or delete transcripts at any time.

Audio is never used to train shared models. It is never sent to third parties outside the transcription provider, which is contractually bound to delete audio after processing.

Section 05

We share data only with subprocessors that are necessary to operate Gangly — our cloud infrastructure provider, our transcription provider, our payment processor, our error-monitoring provider. Each is contractually bound to handle data under our privacy and security standards.

A current subprocessor list is available on request. We notify customers before adding a new subprocessor that touches customer data.

Section 06

Account data is kept for the life of your account. Usage data is kept for up to 24 months. Call audio is discarded by default after transcription; transcripts are retained on your configured retention schedule.

When you delete your account, we remove customer data within 30 days. Backups age out according to their own schedule (typically 35 days) and never leave the encryption boundary.

Section 07

You have the right to:

To exercise any of these rights, email privacy@getgangly.com . We respond within 30 days.

Section 08

Gangly is operated from infrastructure in the United States. If you're in the EU or UK, your data crosses a border when you use Gangly. We rely on Standard Contractual Clauses (SCCs) as the legal basis for these transfers. A DPA with SCCs attached is available for any customer that requests one.

Section 09

When we make material changes, we update the "last updated" date at the top of this page and notify active customers by email at least 30 days before the change takes effect. Older versions of this policy are available on request.

Access — ask for a copy of the personal data we hold about you.
Correct — ask us to fix anything that's wrong.
Delete — ask us to remove your personal data.
Export — receive your data in a portable format.
Object — object to specific processing activities.

What data we collect