Privacy policy
What we collect, why, where it goes, and how to remove it. Last updated June 2026.
What we collect
Account data (name, work email, company), product usage events, and the CRM content your team puts in: contacts, deals, notes, voice notes. On this marketing site we use Google Analytics. In the EEA, the UK and Switzerland we ask before loading it, and nothing is requested from Google until you accept. Everywhere else it loads with the page, as it does on most sites. It tells us which pages were read, roughly where in the world the reader was, and how they arrived. Advertising and personalisation signals are switched off, and we use no cross-site advertising trackers. If your browser sends a Global Privacy Control signal we treat that as a refusal everywhere and do not ask. You can switch analytics off for this browser at any time: Done. Analytics is off in this browser.
Why we collect it
To run the product: transcribing voice notes, scoring leads, sending the nudges you configure, and billing. We do not sell your data, and we do not train shared AI models on your CRM content.
Where it lives
Data is hosted in Germany (see Security), and is encrypted in transit. Stored credentials are also encrypted at rest. Subprocessors are listed in the Trust Center and updated before any change.
AI processing
Voice notes and emails are processed by AI to extract structured CRM fields. Processing is per-tenant; your content is not used to improve anyone else's results. AI usage is metered and visible in your dashboard.
Your rights
Export your data anytime (CSV/JSON). Ask us to delete your tenant and we complete it within 30 days, backups included. Data-subject requests: privacy@boldreach.io.
Contact
Privacy questions: privacy@boldreach.io · DPA requests: legal@boldreach.io