Privacy Policy

1. Who we are

folowup is operated from the United Kingdom. If you have questions about this policy or your personal data, you can reach us at folowupTeam@Outlook.com.

2. What data we collect

We collect the following categories of personal data:

• Account data. your email address and a hashed password when you sign up.
• Profile data. your name, university, course, graduation year, target sectors, target firms, and your preferred writing style (where you choose to provide them).
• Contact records. names, roles, companies, notes, and other information about your professional contacts that you choose to add.
• Generated content. drafts, edits, and research outputs created when you use the Service.
• Usage data. counts of how often you use features such as draft generation, edits, and Focus research, used to enforce fair-use limits.
• Marketing preferences. whether you have opted in to marketing emails, and the date on which you gave that consent.
• Technical data. limited diagnostic information (e.g. error logs, IP address at the point of authentication) collected by our hosting providers for security and reliability.

3. How we use your data and our lawful basis

• To provide the Service (contract): creating your account, storing your contacts and drafts, generating outreach messages, and applying usage limits.
• To send marketing communications (consent): only if you have explicitly opted in at signup or in your settings. You can withdraw consent at any time.
• To improve the Service (legitimate interest): diagnosing errors, monitoring performance, and understanding feature usage in aggregate. We balance this against your interests and do not use personal content for product analytics without anonymising it first.
• To comply with legal obligations: responding to lawful requests, exercising or defending legal claims, and preventing fraud or abuse.

4. AI processing of your content

When you generate a draft, run a refinement, or use Focus research, the relevant content (such as your notes, a contact's name, role, and company) is sent to a third-party AI provider, Anthropic PBC, for processing. We do not allow our AI provider to train its models on your inputs or outputs. Anthropic processes data on our behalf as a processor under a written agreement.

5. Sub-processors

We rely on the following sub-processors to run the Service:

• Supabase Inc.. database, authentication, and storage (hosted in the EU/UK region where available).
• Anthropic PBC. large language model inference for drafting, editing, and research.
• Vercel Inc.. application hosting and content delivery.

Where any sub-processor is located outside the UK, transfers are made under the UK International Data Transfer Agreement, UK Addendum to the EU Standard Contractual Clauses, or another lawful safeguard recognised under UK GDPR.

6. Data retention

We retain account, profile, and content data for as long as your account is active. If you delete your account, we will delete or irreversibly anonymise your personal data within 30 days, except where we are required to retain it by law (for example, to deal with tax records or legal claims). Aggregate, anonymised analytics may be retained indefinitely.

7. Your rights under UK GDPR

You have the following rights in respect of your personal data:

• the right to be informed about how we use your data;
• the right of access. to request a copy of the personal data we hold about you;
• the right to rectification. to ask us to correct inaccurate data;
• the right to erasure. to ask us to delete your data, subject to legal exceptions;
• the right to restrict processing in certain circumstances;
• the right to data portability. to receive your data in a portable format;
• the right to object to processing based on legitimate interests or for direct marketing;
• the right to withdraw consent at any time where we rely on consent;
• the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

To exercise any of these rights, email folowupTeam@Outlook.com. We will respond within one month.

8. Security

We use appropriate technical and organisational measures to protect your personal data. Passwords are stored as one-way hashes; data is encrypted in transit using TLS; access to production systems is restricted. No system is perfectly secure, however, and we cannot guarantee the absolute security of data transmitted over the internet.

9. Children

The Service is intended for users aged 16 and over. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here and, where the changes are material, give reasonable advance notice by email or in-app message. The "last updated" date at the top of this page reflects the most recent version.

11. Contact

For any questions about this policy or to exercise your rights, contact us at folowupTeam@Outlook.com.