Privacy Policy

2. What data we collect

• Account data: email address, name, password (hashed), and profile information you provide when signing up or logging in (including via third-party providers such as Google).
• Usage and product data: how you use the Service (e.g. pages visited, campaigns created, features used), device and browser information, and general location (e.g. country) where relevant.
• Campaign and outreach data: campaign names, target criteria, lead and contact data you upload or we discover (e.g. company names, contact emails, message content), and related research or personalization output.
• Billing data: payment-related information is processed by our payment provider (e.g. Dodo Payments); we may receive billing identifiers and subscription status.

3. How we use your data

We use your data to: provide, operate, and improve the Service; authenticate you and manage your account; process campaigns and deliver or personalize messages; send service-related and product communications; detect and prevent abuse; comply with legal obligations; and, where permitted, for analytics and product development. We do not use your data for advertising to third parties or selling to data brokers.

4. Legal basis (GDPR)

If you are in the European Economic Area or UK, we process your data on the basis of: (a) contract performance (to provide the Service); (b) legitimate interests (e.g. security, analytics, product improvement); (c) consent where we ask for it (e.g. optional marketing); and (d) legal obligation where applicable.

5. Sharing your data

We may share data with: service providers that help us run the Service (e.g. hosting, auth, payments, email delivery), who are bound by confidentiality and data protection terms; and authorities when required by law or to protect our rights. We do not sell or rent your personal data to third parties.

6. Retention

We retain your data for as long as your account is active and as needed to provide the Service, resolve disputes, and comply with legal obligations. After account closure, we may retain certain data for a limited period (e.g. backups, legal hold). You may request deletion subject to applicable law.

7. Security

We use technical and organizational measures to protect your data (e.g. encryption, access controls, secure hosting). No system is completely secure; you are responsible for keeping your login credentials safe.

8. Your rights

Depending on your location, you may have the right to: access your personal data; correct inaccurate data; request erasure (“right to be forgotten”); restrict or object to certain processing; data portability; withdraw consent where processing is consent-based; and lodge a complaint with a supervisory authority (e.g. in the EU). To exercise these rights, contact us using the details on our website or in your account. We will respond within the time required by applicable law.

9. International transfers

Your data may be processed in countries outside your residence. We ensure appropriate safeguards (e.g. standard contractual clauses, adequacy decisions) where required by law.

10. Children

The Service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected such data, please contact us so we can delete it.

11. Changes

We may update this Privacy Policy from time to time. We will post the updated policy and change the “Last updated” date. Material changes may be communicated by email or in-product notice. Continued use after the effective date constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions or to exercise your rights, contact us at the support or privacy contact provided on our website or in your account settings.