Privacy policy
How CloudFloo handles contact, analytics, service inquiry, and limited business outreach data.
What we collect
We collect the information you send through contact and pilot qualification forms, email, and direct business communication. That may include name, work email, company, role, company size, timeline, process context, and the message you provide. For campaign measurement we also store the landing path, referrer, UTM parameters, experiment variant, and a LinkedIn click identifier when those values are present in the URL.
Business contact sources
For a limited business-to-business campaign, we may obtain a person’s name, professional role, employer, work email, and source or verification metadata from the employer’s website, a public professional profile, or a business contact provider such as Hunter. We do not infer an address or contact a person when identity or current employer has not been confirmed.
How we use it
We use this data to answer a specific inquiry, assess fit for a pilot, prepare delivery conversations, secure the website, and understand which campaigns create qualified requests. Where national electronic-marketing law permits it, we may use narrowly selected professional data for one relevant business approach based on our legitimate interest in developing CloudFloo’s services. We do not rely on legitimate interests where prior consent is required. Sending a service inquiry does not subscribe you to marketing email. We do not sell contact data.
Business outreach controls
Before any approach, we review current employer, role relevance, mailbox evidence, the recipient-country rule, previous objections, and the suppression list. The message identifies CloudFloo and provides a free reply-based opt-out. We do not use an open-tracking pixel. If you object, we stop direct marketing and keep only the minimum data needed to ensure that we do not contact you again. We do not make automated decisions about who receives an email.
AI-assisted intake
If we introduce a guided AI assessment, the interface will identify itself, explain what information is used, and require you to approve the summary before it is submitted. The agent will not autonomously send customer messages, make commercial commitments, or book a meeting on your behalf.
Recipients and transfers
We disclose personal data only to service providers needed for hosting, approved outreach delivery, email, security, and suppression handling. They act under contractual terms. If a provider processes data outside the European Economic Area, we use an applicable transfer mechanism and safeguards.
Retention
We keep business communication for as long as it is useful for the relationship, accounting, security, or legal obligations. Outreach research is kept only for the review and audit of a bounded campaign. A minimal suppression record may be kept longer so an objection remains effective.
Your rights and complaints
You can request access, correction, deletion, restriction, or a copy of your data. You can object to direct marketing at any time and without giving a reason. You may also lodge a complaint with the Polish supervisory authority at uodo.gov.pl.
Contact
For privacy questions, write to hello@cloudfloo.io.