Legal
How iSOLV Limited collects, uses, and protects your personal data.
Last updated: 23 October 2026
iSOLV Limited ("iSOLV", "we", "us", "our") is registered in England and Wales (company number 08641424). We are committed to protecting the privacy of everyone who uses our products and visits our website. This policy explains what personal data we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
iSOLV Limited is the data controller for personal data collected through our website (isolv.net) and for our customers' account, billing and support information. When an organisation uses iSOLV Inbox, that organisation is the data controller for the email, calendar and Salesforce data processed through it, and iSOLV Limited processes that data on its behalf as a data processor, under our terms with that organisation. Our registered address is 8 Stockwell Crescent, Knaresborough, HG5 0LD, England. Contact us at hello@isolv.net for any privacy-related enquiries.
Website visitors: We don't use analytics, advertising or tracking tools on our website. Our hosting provider (Vercel) keeps standard server logs, such as IP address, the page requested and browser type, for security and to run the service. We do not sell visitor data.
iSOLV Inbox customers: We collect the name, email address, and Salesforce organisation details of the person who installs and administers iSOLV Inbox. For individual users, we collect the email address used to connect their Gmail or Outlook account to the product.
Email metadata: iSOLV Inbox processes email metadata (sender, recipient, subject, timestamp, thread ID) to provide its record-matching service. iSOLV servers never store email bodies or attachments: email content is fetched on demand directly from Gmail or Outlook and is never written to iSOLV servers.
Linked emails are stored in your own Salesforce: each email that is linked to a Salesforce record (by you, or automatically when its address matches one record exactly) is stored in your own Salesforce organisation with its text, sender, recipients and attachments, as standard Salesforce records (an email record, or an email activity if your organisation doesn't use Salesforce's Enhanced Email). Only the email's own text is stored, without earlier quoted messages, and inline images such as signature logos are left out. Emails that aren't linked to a record are never stored; an email unlinked from every record has its stored copy deleted; and anyone who can see the record in Salesforce can read the stored email. The content passes straight from your mailbox to your Salesforce organisation and is never kept on iSOLV servers. Stored emails are your Salesforce data, held under your agreement with Salesforce.
Company email access (Microsoft 365): If your organisation connects company email, your Microsoft 365 administrator approves iSOLV Inbox once for the organisation. iSOLV Inbox then accesses only the mailboxes of the users your Salesforce admin adds in iSOLV Inbox, and no others; removing a user stops access to their mailbox straight away. Your IT team can also have Microsoft itself refuse access to chosen mailboxes. The approval can be removed at any time in Microsoft Entra.
AI processing (Anthropic): When iSOLV Inbox can't match an email to a Salesforce record by its address or thread, it sends the email's subject line and the first 500 characters of its body, with a list of possible Salesforce records: the name and record ID of each open Opportunity and each Account, and of up to 50 Leads (with their company and status) and up to 50 Contacts (with their email address and account name), to Anthropic, our AI provider, to suggest a match. When a user creates a Lead from an email, we send the sender's name and email address, the subject line and the first 1,000 characters of the body so the Lead's details can be filled in. This content is used only to suggest a match or fill in the new Lead, and iSOLV does not store it. Under Anthropic's commercial terms, Anthropic isn't permitted to use it to train its models, and it deletes it within 30 days, except where content is flagged under its usage policy or must be kept by law.
Calendar data: We process calendar event metadata (title, time, attendees) to provide calendar synchronisation. Calendar event bodies and notes are not stored on iSOLV servers.
Email open and click tracking: If your organisation uses it (Professional plan; open tracking is on by default and can be switched off by your admin, click tracking is off by default), emails sent from iSOLV Inbox include a small image, and optionally links, served from track.isolv.net. When a recipient's email program loads the image or they click a link, we record that it happened and when, and show it on the email's Salesforce Task (times opened, first and last opened, times clicked). We keep only the time of each open or click, not the recipient's IP address or device. Your organisation should mention tracking in its own privacy notice.
Billing data: Payment information is processed by Stripe. iSOLV does not store card numbers or full payment details. We retain billing records (amounts, dates, plan type) for accounting and legal compliance purposes.
The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements. iSOLV Inbox's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
When you connect a Google account (Gmail, Google Calendar and, for Google Workspace, your company directory), iSOLV Inbox uses:
AI matching and Google data. When an email can't be matched to a Salesforce record by its address or thread, iSOLV Inbox sends the email's subject line and the first 500 characters of its body, with a short list of possible Salesforce records, to Anthropic (the Claude API, under Anthropic's Commercial Terms) to suggest the right record; creating a Lead from an email sends the sender's name and address, the subject and the first 1,000 characters. This is a visible feature (the suggestions panel and Create Lead), used only to provide it. Under Anthropic's Commercial Terms, Anthropic may not train models on this content, and it deletes it within 30 days (except where content is flagged under its usage policy or must be kept by law). iSOLV Inbox does not use Google user data to develop, improve or train generalised AI or machine-learning models, and does not transfer it to any AI service that does.
We do not use Google user data for advertising, do not sell it, and do not let people read it unless you ask us to (for example in a support request), it is needed for security, or the law requires it. Your Salesforce admin can disconnect a Google account at any time in iSOLV Inbox Management → Email connections, and you can remove iSOLV Inbox's access at myaccount.google.com/permissions. When a connection is removed, iSOLV Inbox deletes its stored tokens for it.
We use personal data to provide and improve iSOLV Inbox, to communicate with you about your account, to process payments, and to comply with our legal obligations. We do not use your data for advertising purposes and we do not sell it to third parties.
We process personal data under the following lawful bases: performance of a contract (providing iSOLV Inbox to you), legitimate interests (improving our product and preventing fraud), and legal obligation (maintaining financial records). Where we rely on legitimate interests, we have balanced these against your rights and concluded they do not override them.
We retain account and billing data for the duration of your subscription and for six years thereafter to comply with UK accounting law. Email and calendar metadata processed by iSOLV Inbox is retained only as long as necessary to provide the matching and logging service. You can request deletion of your data at any time by contacting hello@isolv.net.
We share data with the following third parties only where necessary to provide our service: Stripe (payment processing), Railway (cloud infrastructure hosting), Vercel (website hosting), Amazon Web Services (encryption key management), Sentry (error monitoring, without email content), Anthropic (AI record matching and Lead details — see "AI processing" above), Google (Gmail and Google Calendar API), and Microsoft (Outlook and Microsoft 365 API). All third-party processors are subject to data processing agreements and appropriate safeguards.
iSOLV is based in the UK. Our backend, its database and the database backups are hosted by Railway in the EU (Amsterdam, the Netherlands). Your email and calendar content stays in your own Google or Microsoft account; iSOLV reads it from there when needed. Some of our service providers process personal data outside the UK and EEA, mainly in the United States. The transfers are:
These providers process data in the UK or EU, so no transfer outside the UK and EEA is involved: Sentry (error monitoring, hosted in the EU in Frankfurt, Germany), which receives error details without email content, with email addresses removed; and Amazon Web Services (encryption key management, London, UK).
Anthropic (United States): the email excerpts and Salesforce record details described under "AI processing" are processed by Anthropic in the United States. These transfers are covered by Anthropic's Data Processing Addendum, which incorporates the EU Standard Contractual Clauses (Modules 2 and 3) together with the UK Information Commissioner's International Data Transfer Addendum for data subject to UK GDPR.
Under UK GDPR you have the right to access your personal data, correct inaccurate data, request deletion, restrict or object to processing, and data portability. To exercise any of these rights, contact hello@isolv.net. You also have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk).
Our website doesn't set advertising, analytics or tracking cookies, so it doesn't show a cookie banner.
We may update this policy from time to time. We will notify customers of material changes by email. The current version is always available at isolv.net/privacy.
Questions about this policy or how your data is handled can be sent to hello@isolv.net.