Privacy Policy

This Privacy Policy describes how Annabot (“we,” “us,” or “our”) collects, uses, and shares information about you when you use our website, platform, and services (collectively, the “Services”).

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, password, company name, and billing information when you create an account
• Profile Information: Business details, preferences, and settings you configure
• Campaign Content: Email templates, messages, and outreach content you create
• Imported Data: Lead lists and contact information you upload to the platform
• Communications: Information you provide when contacting our support team

1.2 Information We Collect Automatically

• Log Data: Our hosting provider (Vercel) automatically collects server logs including IP addresses, request timestamps, and error reports
• Cookies: Session cookies required for authentication and keeping you logged in

1.3 Information from Third Parties

• OAuth Providers: Profile information from Google or LinkedIn when you use social login
• Payment Processors: Transaction information from Stripe for billing purposes

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Services
• Process transactions and send related information
• Send administrative messages, updates, and security alerts
• Respond to your comments, questions, and support requests
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent or illegal activities
• Personalize and improve your experience
• Comply with legal obligations

3. Lead Data and Third-Party Information

Our Services enable you to discover and collect business contact information from publicly available sources. It is important to understand:

• Lead data is sourced from publicly indexed information via search APIs
• Email addresses may be algorithmically generated based on common patterns
• We do not verify the accuracy of generated email addresses unless explicitly stated
• You are the data controller for any lead data you collect and use
• We maintain a global lead cache to improve service quality and prevent duplicates

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party vendors who provide services on our behalf, including cloud hosting, payment processing, email delivery, data enrichment, and AI processing services. These providers are contractually obligated to protect your information and may only use it to provide services to us.

For a complete list of our subprocessors, contact us at privacy@annabot.io.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, government agencies).

4.3 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide you with the Services. We may also retain and use your information as necessary to:

• Comply with our legal obligations
• Resolve disputes and enforce our agreements
• Maintain security and prevent fraud

Lead data in our cache may be retained to improve service quality and prevent duplicate processing. You can request deletion of your data as described in Your Rights section below.

6. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of sensitive data at rest and in transit (TLS/SSL)
• Secure storage of credentials using industry-standard encryption
• Access controls and authentication requirements
• Regular security assessments and monitoring

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have certain rights regarding your personal information:

7.1 All Users

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and data
• Export: Request a portable copy of your data

7.2 European Economic Area (GDPR)

If you are in the EEA, you have additional rights including:

• Right to object to processing based on legitimate interests
• Right to restrict processing
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

7.3 California (CCPA/CPRA)

California residents have the right to:

• Know what personal information is collected and how it's used
• Delete personal information held by us
• Opt-out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising your rights

To exercise any of these rights, please contact us at privacy@annabot.io.

8. Cookies

We use only essential cookies required for the platform to function:

• Session Cookies: Required for authentication and keeping you logged in securely

We do not use analytics or tracking cookies. Disabling cookies in your browser may prevent you from logging in to the platform.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant authorities, to protect your information during such transfers.

10. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete that information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the “Last updated” date. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Email: privacy@annabot.io
Support: Contact Support

13. Data Processing Agreement

For enterprise customers and users who require a Data Processing Agreement (DPA) for GDPR compliance, please contact us at privacy@annabot.io.