This Privacy Policy explains how RevENGINE Samora Private Limited, trading as Samora Global ("Samora", "we", "us"), collects, uses, stores, shares and protects information in connection with SamoraOS (formerly SamoraTrack), our B2B revenue intelligence platform available at os.samoraglobal.com, the Samora for LinkedIn Chrome extension, and related sites and services (the "Service").
SamoraOS is a business tool. It is bought by an organisation and used by that organisation's sales team. In most cases your employer is the controller of the data you put into the Service, and we act as a processor on their instructions.
We do not build a copy of your mailbox. Message bodies are processed in memory during a scan and are not written to our database as a mail archive. What we store is the derived result: activity dates, signal scores, engagement counts, stakeholder records, evidence lines and the small quoted fragments shown to you as evidence for a score or an alert.
If your organisation connects a meeting notetaker (for example Fireflies or Read.ai) or forwards notetaker emails to the Service, we store the resulting transcript or summary and link it to the relevant account.
SamoraOS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
The use of information received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements. We do not use Google Workspace API data to develop, improve or train generalised AI or machine learning models.
We request only the scopes we need, and only after you explicitly grant them. Gmail and Calendar access is asked for separately from sign in, when you choose Connect Gmail in SamoraOS. We never change, label or delete your mail.
| Scope | What it allows | Why SamoraOS needs it |
|---|---|---|
openid, email, profile | Know who you are | Sign in with Google, and match you to your organisation. Signing in does not give access to your mail or calendar. |
gmail.readonly | Read messages and settings | Detect real activity on a deal: who replied, when and how often; recognise out of office replies and bounces so outreach pauses; read meeting notes emails from your notetaker; and show the evidence behind every score |
gmail.send | Send mail as you | Send the outreach and follow up emails that you compose, review and schedule inside the Service, at the time you chose |
calendar.readonly | Read your calendars | Meeting preparation briefs, your daily brief, meeting coverage counts and next step verification |
Limited Use commitments. We do not, and will not:
Human access. Samora personnel do not read your Google user data except in these narrow cases: you have given explicit consent for a specific issue, for example a support request; it is necessary for security purposes such as investigating abuse or a suspected breach; it is required to comply with applicable law; or the data has been aggregated and anonymised so that it no longer identifies a person and is used only for internal operations such as capacity planning.
Access is controlled by role, logged, and limited to the smallest set of staff needed.
If you connect a Microsoft work account, we process mail and calendar data through the Microsoft Graph API for the same purposes and under the same restrictions described above.
Your organisation may also connect optional third party services with its own API keys, including SmartReach for sequencing, Lusha, Apollo and Hunter for contact enrichment, and a meeting notetaker. When your organisation enables one of these, data is exchanged with that provider under that provider's terms and privacy policy. Enrichment is run only on contacts already present in your organisation's real activity, and we do not perform cold prospecting or scraping.
If your organisation has the LinkedIn Automation add-on and you install the extension, it reads the LinkedIn profiles you open or that your SAMpaign opens (name, headline, company, profile address and connection degree), and, when you check for accepts and replies, your recent connections, the names on unread conversations, and two counts from your Sent invitations page. It does not read message text. It sends invitations and messages only for people in your SAMpaigns. Full details are in the extension privacy notice.
We do not sell personal information. We do not use your data for advertising.
SamoraOS is built local intelligence first. Scores, signals, alerts and evidence are computed by deterministic rules inside our own systems.
Some features use Google's Gemini API, on a paid plan run by Samora, to write text for you:
Only what that one result needs is sent, it is used only to produce the result for you, and it is not stored by the model provider for training. Under Google's terms for the paid Gemini API, prompts and responses are not used to improve Google's products. We do not use any of this data to train a model.
Where an organisation supplies an AI provider key, a narrow set of features calls that provider for public research only. Those calls send a company name, and where relevant a contact's name, job title and employer, together with the research instruction. Mailbox content, message bodies, subject lines, calendar entries and deal financials are not included in those prompts.
Responses are cached so that the feature keeps working when the provider is unavailable. Cached AI content is always labelled in the interface.
Separately, and only if your organisation chooses to enable it, SamoraOS can be connected to an external AI assistant such as Claude or ChatGPT, using an access key your organisation creates. This lets a user ask that assistant to read from and write to SamoraOS in conversation.
When you use such an assistant, the records SamoraOS returns to it are processed by that assistant's provider under your organisation's own agreement with that provider, not under ours. Those records can include contact names, work email addresses, job titles and employers; campaign content, including the text of outreach emails that have been drafted, queued or sent; pipeline, coverage and performance figures; and account activity derived from your connected mailbox, such as who was contacted, when, and whether they replied.
This connector is off unless an administrator turns it on, and the key can be revoked at any time from Settings, which stops all further access immediately. If your organisation does not want mailbox derived information reaching an external assistant provider, do not enable it.
We share information only as follows:
Data is stored in managed cloud infrastructure operated by our providers, in the regions selected for your organisation's instance. We retain data for as long as your organisation's account is active.
No system is perfectly secure. If a breach affects your data we will notify your organisation and, where required, the relevant supervisory authority, without undue delay.
Where the GDPR or a similar law applies, we rely on: performance of a contract, for delivering the Service; legitimate interests, for securing and improving the Service; consent, for optional integrations and marketing; and legal obligation, where the law requires it.
Data may be processed in countries other than your own, including the United States and the European Union. Where required, transfers are covered by Standard Contractual Clauses or another approved mechanism.
The Service is not directed at anyone under 18 and we do not knowingly collect data from children.
We may update this policy. Material changes will be notified by email to organisation administrators or by an in product notice at least 14 days before they take effect. The effective date at the top of this page always reflects the current version.
Samora Global
RevENGINE Samora Private Limited
CIN: U62011CH2026PTC047142
126, Sector 10A, Chandigarh 160011, India
Email: vasu@samoraglobal.com