Legal

Privacy policy

Placeholder. This page is an outline for a lawyer to finalise. It is not the final privacy policy and is not legal advice.

Who we are

[Company legal name], the controller for customer account data.
Role for lead data: [controller / processor, to be decided by counsel].

What we collect about customers

Account details: name, work email, workspace and billing details (payments handled by Stripe).
Usage of the app, through privacy-friendly analytics without cookies.

What we collect about people who appear as leads

Public profile and company information, public posts and comments, and the date they were made.
A work email found and verified through email-finding providers.
Never phone numbers, private messages or anything behind a login.

Lawful basis

[Legitimate interests assessment for B2B prospecting, to be written by counsel.]
[Consent and contract bases for customer data.]

Retention

Cached profiles refreshed every 30 days.
Related leads nobody acted on deleted after 90 days.
Deleted on request, and suppressed so they do not return.

Your rights

Access, correction, deletion and objection.
Opt out at any time at /opt-out, without an account.
[Regional rights: GDPR, UK GDPR, CCPA/CPRA, to be completed by counsel.]

Sub-processors and transfers

[List of data providers, email providers, hosting and AI providers, and transfer mechanisms, to be completed.]

Platform data

Reddit content is shown with attribution and never used to train AI models.

Questions: [contact email, to be confirmed]. [Company legal name and address, to be confirmed].