Privacy Policy

[Replace with a GDPR-compliant privacy policy.] It must cover at least: the controller's identity, what personal data is processed (account data, connected mailbox credentials, prospect business data, email contents), purposes and legal bases (Art. 6 GDPR), processors (Supabase, Vercel, Stripe, Anthropic, OpenStreetMap), international transfers, retention periods, and data subject rights.

Prospect data: this service processes publicly available business contact data on behalf of customers. Customers act as controllers for their outreach; you act as processor. Offer a Data Processing Agreement (Art. 28 GDPR) to customers.