Privacy Policy

1. The Scope of This Policy

This policy applies to three distinct categories of individuals:

• Customers: You, the user who registers for and uses the InboundIQ platform.
• Website Visitors: Individuals who visit our Customers' websites where the InboundIQ tracking script is installed.
• Prospects: External individuals whom the InboundIQ AI Agent identifies and contacts on behalf of our Customers.

2. Information We Collect

A. From Our Customers

• Account & Billing Data: Name, email, company details, and payment information required to manage your subscription.
• CRM & Integration Data: Data synced from your connected CRMs (e.g., Salesforce, HubSpot), including existing customer lists, to prevent the AI from contacting current clients.
• Platform Usage Data: Information about how you interact with our dashboard, campaign configurations, and AI Agent parameters.

B. From Customer Website Visitors (Via Tracking Script)

Anonymized Behavioral Data: If a Customer installs our tracking script, we collect anonymized telemetry data (pages visited, time on site, click patterns) to understand firmographic intent.

Note: We do not collect personally identifiable information (PII) from your website visitors, nor do we ever use this data to contact your direct visitors.

C. From and About Prospects

• Publicly Available Data: To facilitate outreach, our AI engine collects B2B contact information (names, corporate email addresses, job titles, LinkedIn profiles) from publicly available sources and third-party data providers.
• Communication Data: The contents of emails sent to and received from Prospects, including meta-data, open rates, and replies. This is strictly used by our sentiment analysis engine to determine if a Prospect is a "Qualified Lead."

D. From Your Connected Google Calendar

If you connect your Google Calendar account, we access:

• Availability Data: Free/busy time slots, working hours, and existing event times, used solely to identify open meeting slots. We do not read event titles, descriptions, attendees, or notes.
• Event Creation Data: When a Prospect becomes a Qualified Lead and books a meeting, we create a new calendar event on your behalf, including a Google Meet link and invite details.

3. How We Use the Information

We use the collected data for the following purposes:

• To Provide the Service: Operating your AI Agent, drafting communications, and executing outbound campaigns based on your configurations.
• Lookalike Prospecting: Analyzing the anonymized behavioral signals of Customer Website Visitors to build Ideal Customer Profiles (ICPs) and identify external Prospects who match those patterns.
• Sentiment Analysis & Billing: Processing Prospect replies to categorize their intent (e.g., positive engagement, unsubscribe request) and calculate performance-based billing.
• Calendar Scheduling: We use Google Calendar data to check your real-time availability and automatically create meeting events with interested Prospects, eliminating manual scheduling and double-booking. We access your calendar only for this purpose and do not use calendar data for AI model training, advertising, or any purpose unrelated to meeting scheduling.
• AI Model Improvement: We use aggregated, anonymized engagement metrics (e.g., which email structures yield higher reply rates) to improve our global AI models. We never use your proprietary company context or your specific CRM data to train global models or competitors' agents.

4. How We Share Information

We do not sell personal data. We may share information only in the following circumstances:

• With Service Providers: We use trusted third-party vendors for hosting, payment processing, and core LLM (Large Language Model) infrastructure. These providers are strictly bound by data processing agreements and cannot use the data for their own purposes.
• With the Customer: Prospect contact details and communication history are pushed directly to the Customer's CRM once a Prospect becomes a Qualified Lead.
• For Legal Reasons: We may disclose data if required to do so by law, in response to a valid subpoena or court order, or to protect the rights, property, or safety of Momentum Labs Inc, our users, or others.

5. Opt-Outs and Anti-Spam Compliance

We programmatically enforce strict anti-spam measures:

• Unsubscribe Links: Every initial communication sent by the AI Agent contains a clear, functioning opt-out link.
• Automated Do-Not-Contact (DNC): If a Prospect replies with "not interested," "unsubscribe," or similar negative sentiment, our AI automatically tags them and adds them to a global suppression list to prevent future contact from your account.
• Customer Obligations: Customers are legally responsible for ensuring their use of the platform complies with all local and international anti-spam laws (including CAN-SPAM, CASL, and GDPR).

6. Data Security and Retention

• Security: We implement industry-standard administrative, technical, and physical safeguards designed to protect data against accidental or unlawful destruction, loss, alteration, and unauthorized disclosure.
• Retention: We retain Customer Account Data for as long as the account is active. Prospect communication data is retained only as long as necessary to facilitate the campaign and process billing disputes (typically rolling 90 days), after which it is anonymized or deleted, unless successfully synced to the Customer's CRM.

7. Google Calendar Data — Additional Terms

Our use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We request the calendar.readonly scope to check your availability, and the calendar.events scope to create new meeting events on your calendar.
• We do not store the content of your existing calendar events beyond what is needed to check availability at the time of scheduling.
• Calendar data is never sold, shared for advertising, or used to train AI models.
• You may revoke InboundIQ's access to your Google Calendar at any time via your Google Account permissions or from within the InboundIQ dashboard.
• Calendar access data is retained only as long as your account remains active and connected; disconnecting immediately halts further access.

8. Your Privacy Rights (GDPR, CCPA, etc.)

Depending on your location, you (and the Prospects we contact) may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your personal data ("Right to be Forgotten").
• Restrict or Object to our processing of your data.

To exercise these rights: Customers can manage their data via the InboundIQ dashboard. Prospects who wish to be removed from our database or exercise their rights can click the "Opt-Out" link in any email they receive or contact our compliance team directly at [email protected].

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will notify Customers of any material changes via email or an in-app notification prior to the changes taking effect.