Privacy policy

1. Controller

Scitodate B.V. (KVK 75263369), Bos en Lommerplein 280, 1055 RW Amsterdam, is the data controller of all personal data processed via Unblockly. As controller, we alone determine the purposes and means of processing your data.

2. Data We Collect

2.1 Data You Provide

• Account Information: name, email, organization, billing details.

• User‑Uploaded Data: company names, URLs, locations, and any personal data (e.g. lead names, email addresses) you import into Google Sheets.

2.2 Automated Data

• Usage Data: logs of your interactions with the extension (features used, timestamps) and error reports.

2.3 Third‑Party & Public Sources

• Enrichment Data: company and professional data retrieved from public sources and our enrichment partners (e.g. Apollo.io)

3. How We Use Your Data

• Provide & Improve the Service: to generate prospecting tables, enrich your sheets, and debug issues.

• Billing & Payments: process subscriptions and credits via Stripe.

• Communications: send account notifications, updates, and marketing (with opt‑out).

• Compliance & Security: prevent fraud, enforce our T&C, and comply with legal obligations.

• Google user data: We DO NOT share, transfer, or disclose Google user data with any third party.

• Other uses: We DO NOT use user data obtained through Workspace APIs or any other APIs to develop, improved, or train generalized AI and/ or ML models.

4. Legal Bases for Processing

• Consent: for marketing communications.

• Contract Performance: to deliver features you request, handle billing, and support.

• Legitimate Interests: to improve our Service, prevent abuse, and maintain security.

• Legal Obligations: to comply with VAT and other regulatory requirements.

5. Third‑Party Processors

We engage sub‑processors to help deliver the Service. Each is bound by written agreements that meet GDPR Article 28 requirements:

• Apollo.io: prospect and enrichment database.

• OpenAI: LLM services for prospect generation.

• Supabase.com: hosting and database infrastructure.

• Stripe: payment processing.

6. Cookies & Tracking

We use cookies and similar technologies to:

• Authenticate you and maintain sessions.

• Analyze usage patterns (via Google Analytics).

• Personalize your experience.

You may manage cookie preferences through your browser settings or via our in‑app banner.

7. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes described:

• Account & Billing Data: 7 years to comply with tax laws.

• Usage Logs: 1 year for troubleshooting and analytics.

• User‑Uploaded & Enrichment Data: until you delete your account.

8. International Transfers

Data is stored in the EU. If any processing occurs outside the EEA (e.g., OpenAI’s U.S. servers), we rely on:

• Standard Contractual Clauses or other safeguards under the EU‑US Data Privacy Framework.

9. Your Rights

Under GDPR (EU) and CCPA (California) you have the right to:

1. Access your personal data.

2. Correct inaccuracies.

3. Delete your data (“Right to be forgotten”).

4. Restrict or object to processing.

5. Portability of your data.

6. Opt‑out of sale or sharing (CCPA).

To exercise any right, contact us at info@scitodate.com.

10. Security

We implement industry‑standard measures, including:

• Encryption in transit (TLS) and at rest.

• Access Controls: role‑based permissions and secure authentication.

• Regular Audits and staff training on data privacy.

• ISO‑certified EU hosting for our infrastructure.

11. Children’s Privacy

Our Service is not intended for individuals under 16. We do not knowingly collect data from children; if discovered, we will delete it promptly.

12. Changes to This Policy

We may update this Policy periodically. Material changes will be notified by email and posted on our website with an updated “Last Updated” date.

13. Contact Us

If you have questions or wish to exercise your rights, please contact:
Data Protection Officer
Scitodate B.V.
Bos en Lommerplein 280, 1055 RW Amsterdam, NL
Email: info@scitodate.com

Last updated: April 29, 2025