Privacy notice (draft for owner review)

Your account

Clerk handles sign-in, e-mail verification and organisations on our behalf. We store your user id, e-mail and name in our members table to show who did what. Billing runs through Stripe; we never see or store card details.

Keys you give us

AI and data-provider keys are envelope-encrypted at rest and decrypted only inside the call that needs them. You can remove a key at any time from Settings; the audit log records that a key was used, never its value.

Prospect data

GenTool researches business contacts at the companies you name: a name, a role, a personal LinkedIn profile URL you find on public pages, and a verified business e-mail. The lawful basis in the EU and the UK is legitimate interest, documented in a three-part test the owner publishes alongside this notice. We never process phone numbers or personal e-mail addresses.

Objections are honoured absolutely: an objector goes on your suppression list and is never re-found or re-contacted. Prospect rows untouched for 18 months are purged. Evidence excerpts are short quotes with their URL, never whole pages.

Sub-processors

Cloudflare (hosting), Supabase (database), Clerk (identity), Stripe (billing), PostHog (marketing pages only, no session replay), and the AI and data providers you choose (OpenAI, Anthropic, Google, OpenAI-compatible endpoints; Hunter).

Your rights

Approved rows export from the Queue in sender-ready formats; the complete workspace record (every row, evidence, drafts, activities, suppressions and the audit log) exports from Settings as a machine-readable file; deletion of a workspace is a Settings action that purges everything seven days after the request. All three are logged like every other change. For anything else, write to the address the owner publishes here.