Privacy policy
The short version.
- We collect the details you type into the early-access form, plus which campaign link brought you here.
- We use them only to contact you about early access and to arrange a working session.
- We don't sell your information. We don't send newsletters or marketing email.
- LinkedIn's ad-measurement tag loads only if you click "Allow".
- If you never become a customer, we delete your details 24 months after our last contact.
- To see, correct or delete what we hold, email privacy@open-spm.com.
Who we are
"Open SPM", "we" and "us" mean the business that runs this website at budget.open-spm.com and the Open SPM early-access programme. For the personal information described here, we are the data controller. You can reach us at privacy@open-spm.com.
This policy covers this website, the early-access form and LinkedIn Lead Gen Forms that link to it. It doesn't cover the plan data your company puts into an Open SPM instance during a trial or subscription. That data belongs to your company and is handled under our agreement with it.
What we collect
What you give us
- The early-access form: your name, work email, role, company, the number of quota-carrying reps, the month your fiscal year starts, and anything you write in the optional note.
- LinkedIn Lead Gen Forms: the same kinds of details, which LinkedIn passes to us when you submit one of our forms on LinkedIn.
- Emails and calls: what you tell us when we correspond or meet.
Please don't send us salaries, commission statements or other employees' personal information through the form or by email.
What we record when you sign up
- Campaign details: the campaign tags in the link you followed (for example utm_source=linkedin) and the site that referred you. We keep the referring site's address only, never the full page or search.
- Country: your approximate country, as reported by our hosting provider from your connection. We don't store your IP address with your sign-up.
What our hosting provider processes
Cloudflare serves this site. Like any web host, it processes your IP address and basic request details to deliver pages and to protect the site from abuse. It handles that data as our service provider.
What stays in your browser
The payout simulator runs entirely in your browser; the numbers you choose are never sent to us. The site stores two small items in your browser, and neither identifies you:
- Your answer to the LinkedIn tag question (osp-consent, kept until you clear it), so we don't ask again.
- The campaign tags from the link you arrived on (osp-touch, deleted when you close the tab), so they reach the form even if you reload.
LinkedIn Insight Tag, only with your consent
If you click "Allow" on our cookie banner, we load LinkedIn's Insight Tag. It sets cookies and tells LinkedIn that you visited this site. If you sign up, it also tells LinkedIn that a sign-up happened. We use it to measure which LinkedIn ads work, and LinkedIn may use it to show you our ads. We see only aggregated reports, never your identity. LinkedIn handles this data under its own privacy policy.
If you click "No thanks", or your browser sends a Global Privacy Control signal, the tag never loads. To change your choice, use "Cookie choice" at the bottom of the home page. Choosing "No thanks" after an earlier "Allow" stops the tag from your next page load. LinkedIn's cookies already set can be cleared in your browser.
How we use it
| Purpose | Information | Legal basis (EEA/UK) |
|---|---|---|
| Reply to your request, arrange the working session and set up a trial | Form or Lead Gen Form details, correspondence | Steps you asked us to take before a contract, and our legitimate interest in answering business enquiries |
| Decide who to contact first; teams whose fiscal year starts soonest go first | Fiscal-year month, rep count, role | Legitimate interest |
| Find out which posts and ads bring people in | Campaign details, country; Insight Tag reports if you allowed them | Legitimate interest; consent for the Insight Tag |
| Keep the site and form secure and free of spam | Request details processed by Cloudflare | Legitimate interest |
| Meet legal obligations, and establish or defend legal claims | Whatever the obligation requires | Legal obligation; legitimate interest |
We email you only about your early-access request and the session or trial that follows. We don't add you to newsletters or marketing lists, and we make no automated decisions about you.
Who we share it with
We don't sell your personal information, and we don't share it with anyone for their own marketing. We use these service providers, who process it for us under contract:
- Cloudflare: website hosting, security and the database that stores sign-ups.
- Zoho: Zoho Mail for corresponding with you and Zoho CRM for keeping track of early-access requests.
- LinkedIn: Lead Gen Forms, if you sign up on LinkedIn, and the Insight Tag, if you allow it. For these, LinkedIn is also responsible for its own processing.
We may also disclose information when the law requires it, to protect our rights or someone's safety, or to a successor if the business is reorganized or acquired. A successor remains bound by this policy for information collected under it.
US state privacy rights
Some US states, including California, give residents rights over their personal information, and we honor these requests wherever you live in the US.
- Categories we collect: identifiers and contact details (name, email); professional information (role, company, team size, fiscal year); internet activity (campaign tags, referring site, Cloudflare request data); and approximate location (country). Purposes and recipients are described above.
- Selling and sharing: we don't sell personal information. Loading the LinkedIn Insight Tag may count as "sharing" for cross-context behavioral advertising, and we do that only after you click "Allow". We treat Global Privacy Control as an opt-out.
- Sensitive information: we don't collect it.
- Your rights: you can ask to know, access, correct or delete your information, and to opt out of sharing. We won't treat you differently for using these rights. An authorized agent may make a request for you; we'll need to verify both of you.
Rights in the EEA, UK and Switzerland
You can ask for access to your personal information, a correction, deletion, a restriction of processing, or a portable copy. You can also object to processing based on our legitimate interests. Where we rely on consent, which applies only to the Insight Tag, you can withdraw it at any time, as described above. You can also complain to your local data protection authority, though we'd appreciate the chance to fix things first.
How to make a request
Email privacy@open-spm.com from the address you signed up with, or tell us how to verify that the details are yours. We'll reply within one month, or within the time your local law sets if that is shorter.
How long we keep it
- Early-access details and correspondence: 24 months after our last contact with you, unless you become a customer. Customer contacts are kept for as long as the relationship lasts, under our agreement. We delete your details sooner if you ask.
- Cloudflare request data: for the periods Cloudflare sets for its service logs.
- Insight Tag data: for the periods LinkedIn sets.
Where it's processed
We're based in the United States, and our providers process information in the United States and other countries. If you're in the EEA, UK or Switzerland, transfers rely on safeguards such as the European Commission's Standard Contractual Clauses (with the UK addendum) or a provider's certification under the EU-US Data Privacy Framework and its UK and Swiss extensions.
Security
The site uses HTTPS only. Sign-ups are stored in a database that only we can reach, through accounts protected by our providers' access controls. The sign-up endpoint accepts only the form's fields and the campaign tags described above. No method is perfectly secure, but if a breach affects your information, we'll tell you as the law requires.
Children
This site is for business professionals. It isn't directed at anyone under 16, and we don't knowingly collect their information.
Changes to this policy
If we change this policy, we'll post the new version here with a new effective date. If a change materially affects information we already hold, we'll tell you by email before it applies.
Contact
Questions or requests: privacy@open-spm.com.