Privacy Policy

Last updated: October 18, 2026

Turtle Sales ("we", "our", or "us") operates the Turtle Sales mobile application and website at turtlesales.ca. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

1. Information We Collect

We collect the following types of information:

Account information: Your name, email address, and password when you register, or, if you sign in with Google or Apple, the name, email address and account identifier that Google or Apple provides.
Profile picture: An optional photo you choose to upload.
Location data: Your device's location while the app, or the map in the web dashboard, is open, to show your position and nearby activity on the map and to attach a location to the doors you record. If you choose to share your live location with your team, your latest position is shared with your organization. If your manager turns on location history for your workspace, a history of your location is kept while you share. Section 6 explains each of these in full.
Sales and business data: Door-knock records, addresses, sale amounts, and commission information you enter while using the app, any details you enter about the people at those doors (such as their name, phone number and email address), including any additional fields your organization adds to its forms. With each door we also record when it was recorded on your device, when our servers received it, and, if your organization uses assigned territories, whether it was recorded inside or outside yours.
Organization data: The organization you belong to, your role, and your activity within that organization.
Messages: Chat messages sent within your organization through the app.
Voice recordings and field notes: When you use the Field Intel feature, your voice recording is transmitted to our servers for processing. Our servers never store the raw audio; it is discarded immediately after transcription. If you approve the result, the extracted lead information, the suggested task and the transcript of your note are saved to your account. Section 7 explains this in full.
End-customer records for recurring service plans: When a sales rep signs up a customer for a recurring service plan, we store that customer's name, contact details, service address, the electronic signature image, and the plan and visit schedule, on behalf of the rep's organization. We never collect or store payment card numbers on our servers. Card details are entered directly into a secure Stripe form and are transmitted straight to Stripe; we store only a reference token and display metadata such as the card brand and last four digits.
Usage data: Basic technical information such as login timestamps and activity status, and a record of key steps in your use of the service (for example creating your free map, recording your first door, starting a trial or a subscription) so we can understand how the product is used.
How you found us: If you accept cookies on turtlesales.ca, we remember the ad or link that brought you to the site (its campaign tags, the Google Ads click identifier, the website that referred you and the page you first landed on) for up to 90 days, and save it with your account if you sign up. We also record whether an account was created on the web, iOS or Android.
Currency preference: turtlesales.ca and app.turtlesales.ca set small cookies that store only whether to show prices in Canadian or US dollars: ts_currency and ts_currency_geo (the currency shown, and the one your location suggests), ts_currency_choice (only if you switch currency yourself, so your choice is kept) and ts_currency_checked (so we look up your country at most once an hour). The value comes from the country our hosting provider derives from your connection (we do not store your IP address or location) or from your own choice. ts_currency_checked lasts one hour and the others one year. They are not used for tracking or advertising, and are set without asking because the site needs them to show you the right prices.
Demo invitation: Some desktop visitors are invited to book a demo as they are about to leave turtlesales.ca. So that the invitation is not shown more than once every 14 days, and never after you have booked a demo, used our link to sign in to the app or arrived from the app, your browser keeps ts_exit_intent_seen, ts_demo_booked and ts_known_user, each holding only a date, in its local storage (or in a cookie of the same name if local storage is unavailable). They are never sent to us or anyone else and are set without asking because they only ever reduce what we show you.
Data kept on your device: So the mobile app can open and record doors without a signal, it keeps a copy of the information it last loaded on your phone: your organization, workspace and settings, recent map pins (kept for up to 7 days), and the visit history of doors you have opened (cleared when you sign out). Doors you record without a connection are saved on your phone until they upload. Your sign-in token is kept in your device's encrypted secure storage.

2. How We Use Your Information

We use your information to:

Provide and operate the Turtle Sales platform
Display sales activity, leaderboards, and commission reports within your organization
Send account-related emails such as verification codes and password resets
Enable real-time messaging between organization members
Show your organization's managers roughly how long team members spent in their assigned territories, only in a workspace where a manager has turned location history on
Send the report emails your organization's managers schedule, to the recipients they choose
Improve and maintain the security of our services
Measure which of our ads and links lead to signups, trials and subscriptions

3. How We Store Your Information

Your data is stored securely on servers hosted by Heroku (a Salesforce company) using MongoDB encrypted databases. Profile pictures are stored using Cloudinary. On the mobile app, your authentication token is stored in encrypted secure storage on your device, and the offline copy described in section 1 is stored in the app's private storage on your device.

4. Third-Party Services

We use the following third-party services to operate our platform:

Heroku: cloud hosting for our servers
MongoDB Atlas: database storage
Cloudinary: profile picture storage and delivery
Mailgun: email delivery (verification codes, password resets, invitations, billing and trial notices, support requests, appointment confirmations, and the report emails your organization schedules)
Mapbox: address lookup, map geocoding, and the map in the web dashboard
Google Maps: map display in the Android app
Apple Maps: map display and address lookup in the iOS app
LocationIQ: address suggestions as you type an address in the mobile app
Stripe: payment processing for platform subscriptions, and secure storage of end-customer payment methods for recurring service plans. Card details go directly to Stripe and are held on the subscribing organization's own Stripe account under Stripe's privacy policy. Turtle Sales never receives or stores full card numbers.
OpenAI: OpenAI's speech-to-text and language models, used to transcribe Field Intel voice notes and extract lead information from them; to suggest how the columns of an imported lead list match our fields, for which the column headings and a few sample rows of the list are sent; to answer questions in the support chat on our website, for which your messages are sent to OpenAI and are not stored by us; and to read satellite images of a property for the roofing and solar tools. Audio and text data sent to OpenAI is processed in accordance with OpenAI's privacy policy and is not used to train their models under our API usage terms.
Google and Apple: sign-in, if you choose to continue with Google or Apple
Expo: delivery of push notifications to the mobile app, through Apple and Google. A notification carries its text, which for a chat message includes the message and the sender's name.
Cloudflare: bot protection on our sign-up, sign-in and demo request forms
Google Solar API, Google Static Maps and OpenStreetMap: the coordinates of a property, for the roofing and solar tools
Open-Meteo and ipapi.co: the weather shown on the mobile app's dashboard. Open-Meteo receives your device's location; if you have not allowed location access, ipapi.co receives your IP address to estimate it instead.
Klipy: GIF search in chat. It receives your search terms and an identifier for your account.
Cal.com: booking demos on our website. The booking calendar on our demo page, and in the demo invitation some desktop visitors see before leaving the site, is loaded from Cal.com for every visitor. The details you enter when you book go to Cal.com, and if you accepted cookies, so does the information about how you found us described in section 1, so we can see which campaigns lead to demos.
Netlify: hosting for our website and web dashboard
Google Ads: if you reached our site from one of our Google ads and accepted cookies, we tell Google Ads when that ad click led to a signup, a trial or a paid subscription, sending the click identifier, the time and, for a subscription, its price. We do not send your name or email address. Google processes this under Google's privacy policy.

Each of these services has their own privacy policy. We do not sell your data to any third party.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. Your sales data and activity is only visible to members of your own organization within the app. Organization owners and managers can view data for members of their organization. If a manager schedules report emails, the report (for example, sales with the rep, the customer's name and phone number, address, date and any additional fields) is emailed to the recipients that manager lists, who may include people outside your organization such as a client of your organization.

6. Location Data

The mobile app only reads your location while it is open and on screen. It does not request background location permission and does not track you when the app is closed or in the background. The web dashboard reads your browser's location, with your browser's permission, while its map is open, and you can share your live location from it too.

Location while you use the app

Your location is used to show your position on the map, to fill in the address of a door, and to attach coordinates to each door you record. Those coordinates are stored as part of the door record and are visible to your organization.

Sharing your live location (optional)

You can choose to share your live location with your organization. While you share, your position is updated as you move and your latest position is shown on your organization's team map. We keep only your most recent position for this, replacing it with each update. You can stop sharing at any time from the app, and signing out of the mobile app stops it too.

Location history for time in territory

An organization's manager can turn on location history for a workspace, so managers can see roughly how long team members spent in their assigned territories. It is off unless a manager turns it on. When it is on:

Before anything is recorded, the app shows you a notice explaining it, and you can choose to stop sharing instead. Nothing is recorded for you until you have seen that notice.
While you share your live location, we record your location about once a minute, only while the app is open.
Your managers in that workspace see a summary of approximate time spent in each territory, and whether you shared on a given day.
Each point is kept for 30 days and then deleted automatically.
Turning location sharing off, or signing out, stops recording. It does not delete what was already recorded; that is removed after 30 days, or at once if a manager turns location history off for the workspace. Deleting your organization deletes it too.

7. Microphone & Voice Data

The Field Intel feature requests access to your device's microphone to allow you to record spoken field notes. The following applies to all voice data:

Microphone access is optional. You must explicitly tap the record button to begin a recording. We never listen to or record audio passively or in the background.
Raw audio is never stored on our servers. Your voice recording is transmitted over an encrypted HTTPS connection to our servers, where it is held in memory only for the duration of processing, then immediately discarded. It is never written to our disks or saved to a database. On your phone, the recording is made as a file in the app's temporary storage, and the app does not delete it after uploading it.
AI processing. The audio is transcribed to text using OpenAI's speech-to-text model, and the transcript is then analyzed by an OpenAI language model to extract lead information. The transcript is also discarded after processing unless you explicitly approve and save the resulting task.
What is saved. Only what you choose to approve is saved to your account: the lead name, contact info, temperature rating, suggested task, and the transcript of your note. You can delete any saved Field Intel task at any time from within the app.
You can revoke microphone access at any time through your device's Settings app. This will disable the Field Intel recording feature but will not affect any other part of the app.

7A. End-Customer Data and Payment Information

Organizations using the recurring service plans feature store records about their own customers (names, contact details, service addresses, signatures, and visit schedules) in Turtle Sales. For this data, the organization is the data controller and Turtle Sales acts as a service provider processing it on the organization's behalf. End customers who have questions about their information, or want it corrected or deleted, should contact the business that signed them up; we assist organizations in fulfilling such requests.

Payment card details are never sent to or stored on Turtle Sales servers. When a card is saved at the door, the card number is entered into a secure field provided by Stripe and transmitted directly to Stripe, where it is stored on the organization's own Stripe account for that organization's future billing. Turtle Sales stores only a non-sensitive reference token, the card brand, and the last four digits for display purposes. Charges, refunds, and disputes are handled by the organization through Stripe, not by Turtle Sales.

8. Data Retention

We keep your data while your account is active, and some of it after that, as described below. You can delete your account at any time from your profile in the app or on the web, or by contacting us.

Deleting your account

Your account is deleted immediately and cannot be restored. We delete:

Your account record: your name, email address, password, any linked Google or Apple sign-in, your notification settings and your devices' push notification tokens
Your profile picture
Your membership in every organization you belong to

What you recorded while working in an organization is part of that organization's business records, not only yours, so it stays with the organization when you delete your account. This includes the doors you recorded, which show your name as the rep who recorded them, the leads and notes you added, commission and payout records, your chat messages (including direct messages), your saved Field Intel tasks and your profile within the organization. It is not anonymized: the organization's owner and managers can still see it. It stays until the organization is deleted (see below for what that removes). You can ask the organization, or us, to delete it sooner.

If you own an organization, delete the organization first, as described below: that is what deletes its records and ends its subscription. If you delete your account without doing so, the organization is closed and no one can open it, but the records stored in it are not deleted at that point. The same applies to your free personal map: deleting your account closes it, but the doors you recorded on it are not deleted at that point. Contact us and we will delete them.

You cannot delete your account while you own an organization on an enterprise agreement. Contact us at support@turtlesales.ca to close the agreement first.

We also keep a record that your email address has used a free trial, and, for a trial that required a card, a fingerprint of that card provided by Stripe, which does not reveal the card number. It is kept after your account is deleted, so that each person and each card can have one free trial.

How you found us (section 1) is deleted with your account, including the copy saved on organizations you own. The record of key steps described under usage data in section 1, and our record of any signup, trial or subscription reported to Google Ads, are kept after your account is deleted. Anything already reported to Google Ads stays with Google under its own policy.

If you register but never verify your email address, the account is deleted automatically after 14 days.

Deleting an organization

The owner can delete an organization from its settings in the app or on the web. It is deleted immediately and cannot be restored. Its subscription is cancelled at the same moment; an active or past-due subscription does not prevent deletion, and as our Terms of Service set out, no refund is issued for the rest of the billing period. Deleting an organization deletes:

All doors recorded in it, including any recorded while it was suspended
Its territories, workdays and time slots, and commission and payout records
Roofing and solar drafts, and Field Intel tasks
Member profiles, and its workspaces with their settings, custom fields and report history
Location history
Chat messages, including direct messages between its members
Our records of its subscription

The following are not currently deleted with the organization. Contact us and we will delete them:

Leads, their notes and imported lead lists
Recurring service plan records: end customers' details, their agreements with signature images, and scheduled visits
Each member's last shared position
Invitations sent from the organization
The record of key steps in its use of the service, and of anything reported to Google Ads

Members' own accounts are not deleted. They simply lose access to the organization.

An organization on an enterprise agreement cannot be deleted from its settings. Contact us at support@turtlesales.ca to close it.

Cancelled and suspended organizations

When an organization's subscription ends, whether it was cancelled, a payment failed or a free trial ran out, the organization is suspended, not deleted. Its data is kept unchanged, so that everything is there if the subscription is restarted. We do not currently delete a suspended organization's data automatically: it is kept until the owner deletes the organization or asks us to delete it. Our Terms of Service allow us to delete it after a period without payment.

Billing and tax records

Records of payments, such as invoices, amounts paid and the billing name and email address on them, are held by our payment processor, Stripe. They are not deleted when you delete your account or an organization, because we must keep financial records for tax and accounting purposes, and they are kept for as long as those obligations require. Stripe also holds them under its own privacy policy.

Location data

Location history is kept for 30 days, as described in section 6, and only your most recent shared position is kept for live location sharing. That position stays stored, no longer shown on any map, after you stop sharing, until it is replaced the next time you share. It is not deleted when you delete your account.

9. Children's Privacy

Turtle Sales is a business tool, intended for use by adults in the course of their work. It is not intended for anyone under the age of 18, and our Terms of Service require users to be 18 or older. We do not verify the age of the people who use it.

Turtle Sales is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us and we will delete it promptly.

10. Security

We take reasonable measures to protect your information including encrypted storage, secure HTTPS connections, hashed passwords, and rate limiting on sensitive actions. However, no method of transmission over the internet is 100% secure.

11. Your Rights

You have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your account and associated data
Delete individual Field Intel tasks at any time from within the app
Withdraw consent for location access at any time through your device settings
Stop sharing your live location at any time from the app, which also stops any location history from being recorded
Withdraw consent for microphone access at any time through your device settings

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the app. Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

Turtle Sales
turtlesales.ca
contact@turtlesales.ca