SamCart Inc., doing business as "Sam" ("Sam," "we," "us," or "our"), values and respects your privacy. This privacy policy applies to all websites, including, but not limited to, getsam.bot (the "Site"), applications, and other services operated or furnished by Sam linking to or posting this privacy policy (collectively, our "Services").
Please read this privacy policy to understand how we process personal information about you, including when you visit or use our Services or otherwise interact with us. This privacy policy also describes your choices regarding the use, access, and correction of your personal information.
By using our Services, you acknowledge and agree to the processing of your personal information as set out in this privacy policy.
For the purposes of the General Data Protection Regulation (GDPR) and other applicable laws globally, SamCart Inc. is the entity responsible for your personal information (the data controller). If there are any questions regarding this privacy policy, you may contact us by emailing support@getsam.bot.
When you use or access our Services or otherwise interact with us, we may collect a variety of personal information about you and others, as described below. "Personal information" is any information that enables us to identify you, either directly or indirectly in conjunction with any other information we hold, by reference to an identifier such as name, address, date of birth, or government identification number.
We collect personal information when you visit our Site, register for our Services, place an order, request a demo, subscribe to our newsletter, respond to a survey, fill out a form, or otherwise interact with us. The types of personal information may include:
Sam integrates with third-party services, including advertising, social media, email, membership, and other business platforms. No account is connected automatically; connections happen only when you choose to connect an account. When you connect an account, we access and collect information from it as authorized by you and permitted by the applicable platform, which may include account and profile information, advertising campaign data and performance metrics, content and engagement data, and encrypted access tokens used to maintain your connection.
We use this information to provide the features you have enabled, such as creating and managing campaigns, publishing content, and reporting on performance. You may disconnect a Connected Account at any time from your Sam dashboard, which revokes our access, or revoke access directly through the applicable platform's security settings.
Sam provides solutions used by our customers to market and run their businesses online. If you visit, interact with, or make a purchase from one of our customer's Sam-powered pages, you may provide information about yourself such as name, billing address, shipping address, email address, phone number, and payment information. We process such information as a data processor on behalf of our customer and only in line with their instructions; they ultimately choose how and why to use your personal information. Sam-powered pages also use a first-party measurement script that records page views, session information, and campaign parameters to provide the page owner with reporting on their own pages. In addition, our customers may add their own third-party tracking technologies (such as advertising pixels or analytics tags) to their pages; these are chosen and controlled by the customer, not by Sam, and are governed by the customer's own privacy disclosures. If you have questions about how a specific customer or website uses your personal information, please visit their privacy policy.
When you use the Services, we use cookies and other tracking technologies such as log files and pixels to: (a) keep you logged in; (b) analyze the usage of the Services; (c) customize the Services to your preferences; and (d) measure the performance of our own marketing. We use these automated technologies to collect and analyze certain types of information, including: (a) information related to the devices or browsers you use to access or interact with the Services, such as IP addresses, general geolocation information, unique device identifiers, browser types, and browser language; and (b) information related to the ways in which you interact with the Services, such as referring and exit pages and URLs, platform type, the number of clicks, pages viewed and the order of those pages, the amount of time spent on particular pages, campaign parameters, and the date and time you used the Services.
Error monitoring and session replay. We use error and performance monitoring tools (currently Sentry) to keep the Services reliable. When an application error occurs, these tools may capture technical diagnostic information and a replay of the affected session to help us diagnose and fix the issue.
For more information about our practices in this area, and for a list of the cookies we use, please see our Cookie Policy.
Sam does not respond to "do not track" signals ("DNT"), and we do not control whether third parties do.
Sam is an AI-powered service. To provide the Services, we process the information you provide (including business inputs, brand assets, and conversational instructions) and information from your Connected Accounts using artificial intelligence systems to generate marketing content and take marketing actions for your account.
Third-party AI providers. We use third-party AI model providers, including Anthropic, OpenAI, and Google, to process inputs and generate outputs on our behalf. These providers process your information solely to provide the Services to you and are contractually prohibited from using your data to train or improve their models.
Model training and improvement. We do not train third-party AI models on your data. We may use aggregated and de-identified information derived from use of the Services to improve our Services.
Historical performance insights. Sam's recommendations are informed by aggregated, de-identified insights derived from historical transaction and marketing performance data across the SamCart platform. Individual customers and their buyers are not identifiable in these insights.
Your control. By default, Sam presents its work for your review, and marketing actions require your approval before they are taken. You may enable automated actions, and you can review, modify, or disable automation settings at any time.
We also obtain personal information from other sources. We protect this information according to the practices described in this privacy policy and any additional restrictions imposed by the source of the data. These sources may include:
We process your personal information for the purposes set out in this privacy policy only where we have a valid legal ground for doing so under applicable data protection law. The legal ground will depend on the purpose for which we process your personal information and the data protection law that applies with respect to our activities in your jurisdiction.
We will use your personal information for the following purposes as necessary for the performance of our obligations under our customer terms, or to answer questions or take steps at your request prior to entering those terms:
We use your personal information for the following purposes as necessary for certain legitimate interests, or where you have given your consent to such processing to the extent required by applicable law (such consent can be withdrawn at any time):
When Sam is acting as a data processor, we will process your personal information in compliance with the instructions of our customers, who ultimately choose how and why to use your personal information.
When you submit your email address on the Site, we will send you marketing communications relating to our Services, provided you have consented to receiving such communications to the extent required by applicable law. If you no longer wish to receive such marketing communications from us, you can cancel at any time by clicking on the opt-out link or other unsubscribe option included in the respective email.
We only send emails to people who have authorized us to contact them, either directly or through a third party. We do not send unsolicited commercial emails.
There are circumstances where we wish to share or are compelled to disclose your personal information to third parties. This will only take place in accordance with applicable law and for the purposes listed in this policy.
Sam may share your information with third-party service providers for the purpose of providing the Services to you, such as AI model providers, payment processors, email service providers, advertising platforms (at your direction, through your Connected Accounts), and providers of technical infrastructure, engineering, or other support.
As we develop our business, we may buy or sell assets or business offerings. Customer, email, and visitor information are generally among the transferred business assets in these types of transactions. We may also transfer or assign such information in the course of corporate divestitures, mergers, or dissolution.
We may share or disclose your information with your consent, such as if you choose to sign on to the Services through a third-party service. We cannot control third parties' use of your information.
We may disclose your information if we are required to do so by law, or if we believe in good faith that it is reasonably necessary to (i) respond to claims asserted against us or to comply with legal process, (ii) enforce or administer our agreements with users, such as the Terms, (iii) for fraud prevention, risk assessment, investigation, customer support, product development, and debugging purposes, or (iv) protect the rights, property, or safety of Sam, its users, or members of the public.
We require all third parties to respect the security of your personal information and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal information for their own purposes and only permit them to process your personal information for specified purposes and in accordance with our instructions.
We may aggregate and/or anonymize information collected through the Services so that the information does not identify you. We may use aggregated, anonymized, and other de-identified information for any purpose, including for research, product improvement, and marketing purposes, and our use and disclosure of such information is not subject to any restrictions under this privacy policy.
No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
Our Services are hosted and operated in the United States by Sam and its service providers. By using our Services, you acknowledge that your personal information may be accessed by us or transferred to us in those jurisdictions and to our affiliates, partners, and service providers who are located in the US and around the world.
Where required by applicable laws, we will take appropriate measures to ensure adequate protection of your personal information when transferred internationally and, if necessary, seek your prior consent. Such measures may include use of data transfer agreements or official transfer mechanisms such as data authority approved contractual clauses. For instance, if you are located in the European Economic Area ("EEA"), we may store your personal information as described in this policy outside the EEA. Where we transfer EEA personal information to a third party located in a country not recognized by the European Commission, or another relevant body, as ensuring an adequate level of protection, we will take appropriate steps, such as implementing Standard Contractual Clauses recognized by the European Commission, to safeguard such personal information.
We will store your personal information, in a form which permits us to identify you, for no longer than is necessary for the purpose for which the personal information is processed. We use your personal information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements and rights, or if it is not technically and reasonably feasible to remove it. Otherwise, we will seek to delete your personal information within a reasonable timeframe upon request.
We implement a variety of security measures to maintain the safety of your personal information. Sensitive information is transmitted using TLS encryption. Access tokens and credentials are encrypted at rest. Our personnel do not access your account or its contents except to troubleshoot a support issue you have raised or as required for security or legal compliance, and all administrative access to customer accounts is logged.
We cannot, however, ensure or warrant the absolute security of any information you transmit to Sam or guarantee that your information on the Services may not be accessed, disclosed, altered, or destroyed by a breach of any of our physical, technical, or managerial safeguards.
You may choose not to share information through the Services, in which case Sam may not be able to provide services to you.
You may opt out of email communications by clicking the "Unsubscribe" link at the bottom of any email you receive from us, or by contacting support@getsam.bot and requesting to be removed from our mailing list.
You may disconnect Connected Accounts at any time from your Sam account, and you may also revoke Sam's access directly through the applicable third-party platform's security settings.
Protecting the privacy of young children is especially important. Sam does not knowingly collect or solicit personal information from anyone under the age of 13 or knowingly allow such persons to register with the Services. If we become aware that we have collected personal information from a child under the relevant age without parental consent, we take steps to remove that information. Our Site, products, and services are only permitted to use by people who are at least 18 years old.
Occasionally, at our discretion, we may include or offer third-party products or services on our Site. These third-party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our Site and welcome any feedback about these sites.
Please also visit our Terms and Conditions establishing the use, disclaimers, and limitations of liability governing the use of our Site.
California residents have specific rights regarding their personal information under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA"). Verified California residents have the right to:
To exercise these rights, California residents may contact us at [phone by calling 737-242-6703 or by emailing support@getsam.bot. We will verify your identity before responding and will respond within the timeframes required by law. We will not discriminate against you as a result of your exercise of any of these rights.
The categories of personal information we collect, the sources of that information, and the purposes for which we use it are described in the "What Information Do We Collect?" and "How Do We Use Information We Collect?" sections above.
Authorized agents. You may submit a request through someone holding a formal Power of Attorney, or through an authorized agent subject to the verification requirements permitted by law.
For European residents only. In certain circumstances, you have rights under the GDPR in relation to your personal information that we hold about you, specifically:
If you visit, interact with, or make a purchase from one of our customer's Sam-powered pages, that customer legally controls your personal information. As a result, Sam doesn't, for example, decide how long your information is retained, because that decision is made by our customer. This means Sam can't help you access, correct, erase, or port your information without being directed to by our customer. To make a request about your personal information, contact the specific customer directly. If you make a request to us, we will forward your request to the relevant customer and help them fulfill your request.
Where you believe that we have not complied with our obligations under this privacy policy or applicable data protection law, you have the right to make a complaint to a supervisory authority, such as the UK Information Commissioner's Office.
If we decide to change our privacy policy, we will post those changes on this page and update the privacy policy modification date above. In some cases, we may provide you with additional notice (such as adding a notice to our Services prior to the change becoming effective, or by sending you an email notification). We encourage you to periodically review our privacy policy for the latest information on our privacy practices and the ways you can help protect your privacy.