Privacy notice

Who we are

Topsail is operated by Easy Company Consulting LLC. Topsail helps revenue teams organize prospecting, account development, CRM workflows, reporting, and related outreach operations.

For customer workspace data, Topsail generally acts as a service provider or processor under the customer's instructions. For our marketing site, product security, support, billing, and business operations, Topsail may act as a controller.

Personal data we process

• Account data such as names, emails, roles, and tenant IDs.
• CRM data such as contacts, companies, deals, notes, meetings, tasks, calls, emails, associations, and activity outcomes.
• Integration data such as OAuth tokens, provider identifiers, sync metadata, email metadata, and webhook delivery details.
• Outreach data such as phone numbers, SMS/call metadata, opt-out status, message content where used, and telephony identifiers.
• AI and enrichment data such as prompts, generated summaries, company/contact research outputs, job titles, profile links, and review decisions.
• Marketing and website data such as page paths, attribution, form submissions, consent state, and optional analytics events.
• Security and diagnostic data such as request metadata, tenant IDs, user IDs, operational logs, and error details.

How we use personal data

• Provide, secure, maintain, and improve Topsail.
• Authenticate users and enforce tenant-scoped access.
• Operate CRM, email, telephony, reporting, and AI workflows.
• Support customer requests, troubleshoot issues, and prevent abuse.
• Honor consent, opt-out, deletion, and suppression requests.
• Measure marketing-site performance when analytics are allowed.
• Comply with legal, contractual, and security obligations.

Legal bases

Where GDPR applies, Topsail relies on the legal basis that matches the processing activity. Common bases include performance of a contract, legitimate interests, consent, and compliance with legal obligations. For customer workspace data, the customer's agreement and instructions generally determine the permitted processing.

Service providers and transfers

Topsail uses service providers for cloud infrastructure, CRM, email, telephony, analytics, enrichment, search, AI-assisted workflows, and support operations. Current provider categories are listed on the subprocessors page.

Personal data may be processed in the United States and other countries where Topsail or its providers operate. Where required, Topsail uses appropriate transfer safeguards such as data processing terms, Standard Contractual Clauses, or recognized data transfer frameworks.

Retention and deletion

Topsail keeps personal data for as long as needed to provide the service, meet customer instructions, maintain security and audit records, support backups and recovery, resolve disputes, and comply with legal obligations. Deletion requests may be handled by removing data, suppressing future processing, disconnecting a provider integration, or applying a documented retention exception.

Your choices and rights

Depending on your location and relationship with Topsail, you may request access, correction, deletion, export, restriction, objection, or withdrawal of consent. If your data is in a customer workspace, Topsail may route the request to that customer or work with the customer to complete it.

Marketing analytics choices are described in the cookie notice.

Contact

For privacy requests, contact Topsail at austin@topsail.app.