SALESmanago

What SALESmanago is and how it works

SALESmanago is a Customer Data Platform and marketing automation suite from Benhauer (Poland), pitched at mid market e-commerce, retail and B2C brands. The product covers email marketing, SMS, web push, on-site personalisation, mobile messaging, segmentation, predictive scoring and a built in CDP. Publishers deploy SALESmanago by adding the smsmtag.js script to their pages, after which the platform automatically begins tracking page views, form submissions, scroll depth, search queries and product interactions.

What data and cookies SALESmanago collects

SALESmanago sets multiple cookies including smclient (persistent contact identifier, often 10 years), smvr (visitor record), smuuid and __smRevisit, plus various session and consent cookies. It collects IP address, user agent, full URL of every page viewed, scroll behaviour, time on page, form fill data (even before submit, depending on configuration), product views, cart additions, search terms, hashed email when matched and integration data from CRM, e-commerce and ad platforms.

GDPR and ePrivacy implications

SALESmanago tracking falls squarely under Article 5(3) of the ePrivacy Directive (cookies, terminal device access) and Article 6 of the GDPR (profiling, marketing communications). Consent is required before any SALESmanago cookies are written, and separate consents are needed for email, SMS and push channels. Polish data protection authority UODO and the EDPB have flagged extensive behavioural profiling as a high risk activity requiring a DPIA and strict purpose limitation. The platform also exposes hashed email matching for cross device tracking, which deserves explicit disclosure.

Consent requirements

Treat SALESmanago as a Marketing or Analytics & Marketing category in your consent management platform and block the smsmtag.js script until the visitor opts in. Use granular consents per channel (web personalisation, email, SMS, push) so users can refuse one channel without losing others. Document the categories of data collected, the retention period and the recipients (your team, SALESmanago, integrated ad platforms). SALESmanago provides built in consent management features, but they only manage opt outs; cookie consent must be handled by your CMP.

Data transfers and EU hosting

One of SALESmanago's main selling points is EU only hosting (AWS Frankfurt, OVHcloud). Personal data does not leave the EU by default. However, optional integrations to US providers (Twilio for SMS, Mailgun, Facebook CAPI, Google Ads) create transfer chains that should be documented in your record of processing activities. Sub-processor changes are notified by Benhauer; subscribe to their updates and propagate changes to your privacy notice.

Practical compliance steps

Sign the SALESmanago DPA with Benhauer, block smsmtag.js until consent, configure granular consent per channel, run a DPIA before launch (mandatory at scale), reduce cookie lifetimes where the platform allows it, redact sensitive form fields from auto tracking, disable cross device hashed email matching unless you have a documented basis, list all sub-processors in your privacy notice, and configure data retention to align with your purpose limitation.