Privacy

Does DuetSales store my data?

Yes, DuetSales stores a minimal amount of your data—only the data necessary to enable the "Notify When" feature. This data is stored solely for active notifications. If you delete a notification, the associated data will also be deleted.

Which data from my systems is being stored?

DuetSales stores values for fields monitored by your notifications’ conditions, as well as the ID for those records. For instance, if you have a notification that alerts you when Account Stage becomes "Closed Won" and Amount exceeds 10K, DuetSales will store the ID, Stage, and Amount for all relevant rows in the Account object. We advise against setting up notifications that alert on PII or sensitive information, but DuetSales treats all information as sensitive.

Where is my data stored? Can I choose the storage location?

DuetSales is hosted on Amazon AWS in the US-East Region, including a backup replication. Currently, we do not offer options to store data in additional locations.

Does DuetSales store PII/sensitive data?

Generally, no. The inclusion of PII is determined by the user creating DuetSales notifications. Since conditions in notifications rarely include PII, DuetSales does not need to store this data. To avoid storing certain fields, ensure they are not included in notification conditions. DuetSales also stores minimal PII about its users (name, email, avatar).

For how long is my data stored?

Your data will be stored as long as you use DuetSales notifications that rely on that data.

When is my data deleted?

All your data will be deleted five business days after termination or upon request. Please refer to the "Deletion of Customer Data" section in our Privacy Policy.

Is my data secure?

Yes. We prioritize the security of your data. It’s encrypted in transit and at rest, with the most sensitive data (such as OAuth tokens and passwords) encrypted at the application level using the AES-256 algorithm. DuetSales undergoes an annual security audit and penetration test to certify our security independently. Please see our Security statement for more details.

Who has access to my data?

Only you and your DuetSales Account Manager have access to your configuration data, solely for supporting your account. All access to your data is logged and audited by DuetSales to prevent misuse.

Does DuetSales have SOC 2 certification and comply with GDPR/CCPA?

Yes. DuetSales has been SOC 2 certified since 2017 and has passed annual audits since. We conduct annual penetration tests and comply with GDPR/CCPA. For a copy of our SOC report, please contact your DuetSales Account Manager.