Privacy Policy

1. Introduction

ContactPull Technologies Inc. ("ContactPull," "we," "us," or "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our B2B contact discovery platform and related services (the "Service").

As a company incorporated in British Columbia, Canada, we comply with applicable privacy laws including:

• Personal Information Protection and Electronic Documents Act (PIPEDA)
• British Columbia Personal Information Protection Act (PIPA)
• General Data Protection Regulation (GDPR) for EU users
• California Consumer Privacy Act (CCPA) for California residents
• Canada's Anti-Spam Legislation (CASL)

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, company name, job title, phone number
• Billing Information: Credit card details, billing address, tax information (processed securely through our payment processor)
• Communications: Support inquiries, feedback, and other correspondence
• Search Queries: Business types, locations, and other search parameters you use

2.2 Information Collected Automatically

• Usage Data: Features used, searches performed, results viewed
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, pages viewed, referring URLs
• Cookies: Session cookies, preference cookies, and analytics cookies

2.3 Business Contact Information

Our Service discovers and provides publicly available business contact information:

• Professional names and titles
• Business email addresses and phone numbers
• Company information and business addresses
• Professional social media profiles
• Publicly available business information

3. How We Use Your Information

3.1 To Provide Our Services

• Process your searches and deliver contact information
• Manage your account and authentication
• Process payments and billing
• Provide customer support
• Send service-related communications

3.2 To Improve Our Services

• Analyze usage patterns and trends
• Develop new features and functionality
• Improve accuracy and data quality
• Conduct research and analytics

3.3 Legal and Security Purposes

• Comply with legal obligations
• Protect our rights and property
• Prevent fraud and abuse
• Enforce our terms of service

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process personal data based on:

• Consent: When you explicitly agree to specific processing
• Contract: To fulfill our service agreement with you
• Legitimate Interests: To operate and improve our business
• Legal Obligation: To comply with applicable laws

5. How We Share Information

We do not sell your personal information. We may share information with:

5.1 Service Providers

• Payment processors (Stripe, PayPal)
• Cloud hosting providers (AWS, Google Cloud)
• Analytics providers (Google Analytics)
• Customer support tools

5.2 Legal Requirements

We may disclose information when required by law, court order, or government request.

5.3 Business Transfers

In case of merger, acquisition, or sale of assets, information may be transferred to the successor entity.

6. Data Security

We implement industry-standard security measures including:

• Encryption of data in transit (TLS/SSL) and at rest
• Regular security audits and vulnerability assessments
• Access controls and authentication
• Employee security training
• Incident response procedures

7. Your Privacy Rights

7.1 Under Canadian Privacy Laws (PIPEDA/PIPA)

• Access: Request access to your personal information
• Correction: Request correction of inaccurate information
• Withdrawal of Consent: Withdraw consent for certain uses
• Complaint: File a complaint with the Privacy Commissioner

7.2 Under GDPR (EU Residents)

• Access: Obtain a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion ("right to be forgotten")
• Restriction: Limit processing of your data
• Portability: Transfer data to another service
• Object: Object to certain processing

7.3 Under CCPA (California Residents)

• Know: What personal information we collect and how it's used
• Delete: Request deletion of your information
• Opt-Out: Opt-out of sale (we do not sell data)
• Non-Discrimination: Equal service regardless of privacy choices

8. Data Retention

We retain personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Meet legitimate business needs

Account data is retained for the duration of your subscription plus 90 days. Usage logs are retained for 12 months.

9. International Data Transfers

As a Canadian company, we primarily store data in Canada. When we transfer data internationally, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses for EU data transfers
• Privacy Shield compliance where applicable
• Adequate security measures with all processors

10. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children.

11. Updates to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or through the Service. Your continued use constitutes acceptance of the updated policy.

12. Contact Information