SalesPitch AI data processing
Data Processing & Vendor Transparency
A bounded view of the service-provider categories SalesPitch AI uses or may use, the observed production state, and the controls required before a provider receives customer-directed data or authority.
Published August 6, 2026Vendor transparency 2026-08-06
Read this with the policy overview.
The exact policy versions shown here also appear in checkout and onboarding. A future material revision will use a new version and require review where appropriate.
Processing roles and scope
American Business Capital Group, Inc. generally acts as a service provider or processor for customer-controlled workspace data and may act as an independent controller for account administration, billing, security, legal compliance, support, and its own business records. The customer remains responsible for its lawful basis, notices, source authority, instructions, recipients, offers, and outreach configuration.
This page is operational transparency, not a signed Data Processing Addendum and not a representation that every listed provider currently receives customer personal information.
Observed provider registry
Current status can change and must be read with the live Release & Trust Center. A provider marked gated or not configured must not be treated as active production authority.
| Provider or category | Purpose | Observed status |
|---|---|---|
| OpenAI Sites | Published web application hosting and edge delivery | Active for the current published release |
| Render | Hosted C.O.L.T.E.N.™ voice, operations, and lead-service runtimes | Health monitored; provider actions remain gated |
| Stripe | Payment entry, subscription, invoice, and billing-portal services | Controlled-beta integration; checkout activates only when the current Terms and production billing contract are verified |
| Twilio | Telephone numbers, carrier connectivity, and voice delivery | Account and number configured; outbound dispatch locked |
| YouTube (Google) | User-requested playback of official product-demo videos | Click-to-load privacy-enhanced player; inactive until a visitor chooses Play |
| OpenAI API | AI-assisted text and real-time voice processing | Not production-configured |
| Licensed lead provider | Business-contact search, verification, enrichment, and refresh | Not configured |
| Calendar and email delivery | Authorized meeting invitations, confirmations, and follow-up | Production delivery remains gated |
Vendor review and data controls
Before customer-directed data or provider authority is enabled, American Business Capital Group, Inc.’s launch process requires an appropriate agreement, purpose and data-category review, access and credential design, security review, retention and deletion path, incident and support contacts, geographic and transfer review, availability and exit planning, least-privilege scopes, and tested monitoring and revocation.
Provider credentials are kept outside the browser and must never be published in a public status response, support message, repository, or client bundle.
Subprocessor changes
When contractually required, American Business Capital Group, Inc. will provide notice of a new subprocessor before that provider begins the covered processing and will provide a reasonable channel for eligible customers to raise a documented data-protection objection. A concern does not automatically create a vendor veto or require continued service where no reasonable alternative exists; the signed agreement controls.
International transfers
Providers may process information from or in countries other than the customer’s location. Where transfer rules apply, American Business Capital Group, Inc. and the provider must use the contractual or other mechanism required for the data, role, destination, and jurisdiction before the covered transfer is enabled.
Data Processing Addendum
Eligible business customers may request a Data Processing Addendum describing documented instructions, confidentiality, security, subprocessors, assistance, deletion or return, audits, and applicable transfer terms. A DPA becomes binding only when properly approved and executed by authorized parties; this public page is not the DPA.
Send a request to SalesPitch AI support with the contracting entity, account owner, requested jurisdiction or transfer terms, and a safe business contact. Do not attach raw lead files, credentials, or payment-card data.
Need procurement information?
Request the applicable vendor and DPA package.
American Business Capital Group, Inc. will verify the customer, plan, requested scope, and available documentation before sharing non-public materials.