Privacy Notice
Last updated: [DATE]
1. Who we are
AiUnit 378 (“we”, “us”) is operated by [CONTROLLER FULL NAME / LEGAL ENTITY], [POSTAL ADDRESS]. We are the controller of the personal data described here. Privacy contact: [PRIVACY EMAIL].
2. What data we process and why
| Who | Data | Purpose | Legal basis |
|---|---|---|---|
| Business contacts we reach out to | Name, job title, company, work email, company website, LinkedIn profile URL, country | Contacting you about engineering services relevant to your role | Legitimate interest (GDPR Art. 6(1)(f)): offering B2B services to professionals whose role relates to them |
| People who contact us via the website form | Name, work email, company, what you need, your message, and the IP address Netlify records with each submission | Replying to your request and preparing a proposal | Steps prior to a contract at your request (Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f)) |
| People who reply to our emails | Your reply and contact details | Continuing the conversation | Legitimate interest (Art. 6(1)(f)) |
We do not process special categories of data, and we do not make automated decisions with legal or similarly significant effects.
3. Where we got your data
If we contacted you first, we obtained your business contact details from:
- Apollo.io, a B2B contact database
- Publicly available business sources: company websites and professional profiles such as LinkedIn
We only use work-related contact details. We do not contact personal email addresses.
4. Who we share it with
We use the following service providers (processors) only to run our business:
- Google Workspace — email
- Instantly.ai — sending outreach emails and handling replies and opt-outs
- Apollo.io — source of B2B contact data
- MillionVerifier — checking that email addresses are valid
- Netlify — website hosting and contact form
- [OTHER TOOLS — e.g. CRM, Notion; remove if none]
We do not sell your data.
5. International transfers
Some providers are located in the United States. Where data is transferred outside the EEA/UK, we rely on safeguards such as the EU–US Data Privacy Framework or Standard Contractual Clauses offered by the provider. [CONFIRM PER PROVIDER]
6. How long we keep it
- Outreach contacts who don't reply: deleted 12 months after our last message.
- Conversations and form requests: kept up to 24 months after the last contact, unless we start working together.
- If you opt out: we keep only your email address in a suppression list, so that we never contact you again.
7. Your rights
You can ask us to access, correct, delete or restrict your data, receive a copy of it, or object to processing. You can object to direct marketing at any time — we will stop immediately.
The easiest way: click “unsubscribe” in any of our emails, or write to [PRIVACY EMAIL]. We reply within one month.
You also have the right to complain to a data protection authority, in particular in the country where you live or work.
8. Opting out
Every outreach email contains an unsubscribe link. One click removes you from all our sequences.
9. Cookies
This website does not use cookies or tracking technologies.
10. Changes
We may update this notice. The date at the top shows the latest version.