Privacy notice: Arevox Sales Hub
For everyone on the Arevox sales team. Last updated November 2026.
Who is responsible
Arevox is the controller for the personal data in the Sales Hub. Questions or requests: contact@arevox.co.uk.
Data about the businesses we contact
- What: business and contact names, work email, phone, website, location, notes from calls, call outcomes, follow-up dates, and where each lead came from (source).
- Why and lawful basis: business-to-business sales outreach under legitimate interests, recorded on every lead (consent or contract where that applies instead).
- Calling rules: each lead has a TPS/CTPS-checked date and the app warns before calling a number that hasn't been checked. “Do not contact” removes a lead from every call list and stops it being imported again.
- Rights: an admin can export everything held about a lead or erase it in one click (erasure also blanks it in the audit history).
- Retention: leads nobody has touched for the period an admin sets (24 months by default) are erased automatically, except live deals.
Data about you (team members)
- Account: your name, work email, role, colour and settings. Passwords are stored only as secure hashes by our sign-in provider; nobody at Arevox can see them.
- Activity: the calls you log, notes, follow-ups, emails opened from the app, leads you create or change, and sign-ins (time and IP address). This feeds your day list, the team scoreboard and an activity log that admins can see.
- Why: to run the sales process, pay commission fairly, keep the data accurate, and keep accounts secure (legitimate interests and our contract with you).
- Who sees what: everyone on the team sees all leads and the scoreboard. Your wins are visible only to you and admins. The activity and audit logs are visible to admins only.
- The audit log records every change with the values before and after. It can't be edited or deleted, so the record stays trustworthy.
Service providers
The app runs on Vercel (hosting) and Supabase (database and sign-in). Depending on what an admin has switched on, it also uses Notion (Playbook and client log), Calendly (bookings), Google (drafts in the shared sales mailbox), Apollo (read-only contact import) and Anthropic (to read dates out of call notes when a note is ambiguous; only that note's text is sent). Each only receives what its feature needs.
Security
Invite-only accounts, strong passwords, optional two-factor sign-in, automatic sign-out after inactivity, row-level permissions in the database, encrypted connections, and secrets that never reach the browser.
Your rights
You can ask for a copy of your data, a correction, or erasure, and you can complain to the Information Commissioner's Office (ico.org.uk). Email contact@arevox.co.uk.