Privacy Policy

1. Introduction

Thawio is the brand and trading name of Thawio ("the Company," "we," "our," or "us"), the legal entity that provides the Service and the data controller for the personal data described in this policy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered sales development platform.

2. Information We Collect

2.1 Information You Provide

• Account information (name, email, company details)
• Contact data and prospect lists you upload
• CRM and third-party integration data
• Email content and campaign data
• Payment and billing information

2.2 Automatically Collected Information

• Log data (IP address, browser type, pages visited)
• Device information
• Cookies and similar tracking technologies
• Usage data and analytics

3. Personal Data About Prospects and Third Parties

Thawio helps customers identify and reach business prospects. As part of the Service we process limited business-contact information about individuals who are not our direct users ("prospects"), such as name, business email, job title, employer, and publicly available professional and company information, together with engagement or intent signals (for example, hiring, funding, or company web activity).

We obtain this data from: information our customers provide or upload; publicly available sources such as company websites and public professional profiles; and third-party data and enrichment providers.

Where the Service detects website or other online activity, we may identify the organization associated with that activity (for example, by matching a public IP address to a company) to provide account-level intent signals. We do this at the company level only and do not use it to identify individual visitors.

Our role: for prospect data a customer uploads or instructs us to process, the customer is the data controller and we act as a processor on their behalf. For prospect data we independently source or enrich, we act as the data controller.

Legal basis (EEA/UK): we and our customers rely on legitimate interests in business-to-business outreach and sales development, balanced against the rights of the individuals concerned. We do not process special categories of personal data for this purpose.

Your choices: if you are a prospect and want to access, correct, or delete your data, object to processing, or opt out of outreach, contact support@thawio.com. We will action your request and, where we act as a processor, pass it to the responsible customer.

4. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve our services
• Process your transactions and send notifications
• Send marketing and promotional communications (with consent)
• Analyze usage patterns and optimize performance
• Detect, prevent, and address security issues
• Comply with legal obligations
• Train and improve our AI models

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party vendors who assist in operating our platform (cloud hosting, payment processing, analytics)
• CRM Integrations: When you connect third-party services (Salesforce, HubSpot, etc.)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal data to third parties.

6. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit and at rest, regular security audits, and access controls. However, no method of transmission over the internet is 100% secure.

7. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Campaign data and analytics may be retained for up to 2 years. You can request deletion of your data at any time.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your data
• Portability: Receive your data in a structured format
• Opt-out: Unsubscribe from marketing communications
• Restriction: Limit how we process your data

To exercise these rights, contact us at support@thawio.com

9. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. You can control cookie preferences through your browser settings. Types of cookies we use:

• Essential: Required for platform functionality
• Analytics: Help us understand usage patterns
• Marketing: Track campaign effectiveness

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where applicable.

11. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect information from children.

12. GDPR Compliance (EU Users)

For users in the European Union, we process data based on the following legal grounds:

• Contract performance
• Legitimate business interests
• Legal compliance
• Your explicit consent

13. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and the right to opt-out of data sales (note: we do not sell personal data).

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our platform. Continued use of our service after changes constitutes acceptance.

15. Contact Us

If you have questions about this Privacy Policy, please contact us: