Privacy Policy
This Privacy Policy explains how Accumen Intelligence Ltd (“Accumen”, “we”, “us”, or “our”) collects, uses, and protects information when you use our platform, website and related services (the “Service”). Our registered office is 71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
The Accumen browser extension has its own policy at tryaccumen.com/extension-privacy.
1. Information We Collect
We collect:
- Account information (name, email address, company name, billing details)
- Authentication data (including when you sign in with Google)
- Workspace and team data you create
- Content you upload (documents, notes, prospect lists, DNA settings, Vault files)
- Demo requests: if you use the form beside our booking calendar, the name, work email, company, team size, what you sell and the challenge you describe
- Your reasons for stopping a plan, if you choose to give them
- Usage and technical data (IP address, browser type, device information, log data, feature usage)
- Payment information (processed by Stripe; we do not store full card numbers)
- Communications you send us, including messages in the support chat
2. How We Use Information
We use the information to:
- Provide, maintain, and improve the Service
- Authenticate users and secure accounts
- Process subscriptions and payments
- Generate AI-assisted research, analysis, and outreach content at your direction
- Arrange and prepare for demo calls you ask for
- Communicate with you about the Service, security, billing and support
- Understand which parts of the Service and our website are used, and measure our advertising
- Monitor for abuse, fraud, and technical issues
- Comply with legal obligations
2a. Data you send to connected services
If you create an API key and connect Accumen to Zapier or another service, that service can read the contact records of the workspace the key was created for — company names, decision-maker names and titles, email addresses and their verification status, and fit scores.
This happens only because you asked for it, only for the workspace you chose, and only while the key exists. Revoking the key ends the access immediately. Once data reaches a connected service it is governed by that service’s own privacy policy, not this one, and we cannot recall or delete it on your behalf.
API keys are stored only as a cryptographic hash. We cannot read your key, and a breach of our database would not reveal it.
2b. Booking a demo
On our demo page you can book a call with us. The short form beside the calendar is optional. If you fill it in, we store what you enter and email it to the Accumen team so we can prepare the call around your market.
The booking itself is made through Google Calendar: the calendar invitation, with a Google Meet link, is sent to the email address you give by Google, and the event is stored on the Accumen team’s calendar. Using the form does not subscribe you to anything, and we do not add you to a marketing list because you booked a demo.
2c. Google user data
Accumen uses Google services in two ways, and this section says exactly what is accessed and why.
Sign in with Google. If you choose it, Google gives us your name, email address and profile picture. We use them to create and sign you in to your account, and for nothing else.
Google Calendar (Accumen’s own demo calendar). To offer demo times and book them, Accumen’s server is authorised, by the Accumen team member who owns the calendar, to read when that calendar is busy or free and to create demo events on it with a Google Meet link and an invitation to the person who booked. We use the permissions calendar.events and calendar.freebusy. We do not access the calendar of any visitor or customer, and we do not read the titles, descriptions or attendees of other events — only whether a time is taken.
Accumen’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- We use Google user data only to provide and improve the features described above.
- We do not use it for advertising, and we do not sell it.
- We do not transfer it to others except as needed to provide those features, to comply with law, or as part of a merger or sale of the business.
- People do not read it, except with your consent, to investigate abuse or a security problem, or where the law requires.
The authorisation can be withdrawn at any time in the Google Account permissions page of the account that gave it, and Accumen then stops being able to reach the calendar.
3. AI Processing
When you use AI features, relevant portions of your inputs (and selected workspace context you choose to include) are sent to our AI providers to generate results. We use this data only to deliver the Service to you.
4. Business Contact Data About Third Parties
The Service identifies decision makers at companies you target and establishes their work contact details. This means we process limited personal data about people who are not our users — typically name, job title, employer, and business email address.
This information is obtained from publicly available business sources, and email addresses are checked for existence with an email verification provider. We process it on your instruction, in the context of business-to-business communication, and we do not build consumer profiles or sell it.
You are the controller of the contact data in your workspace and are responsible for having a lawful basis to contact these individuals, for honouring opt-out and erasure requests, and for complying with the marketing and data protection rules that apply in your jurisdiction and theirs. We act as your processor for this data.
If you are an individual whose details appear in a customer workspace and you want them removed, contact us and we will act on the request and pass it to the relevant customer.
4a. We do not keep a standing database of people
We do not build, buy, maintain, or sell a directory of contacts. Nobody is held in a profile waiting to be sold to whoever subscribes next. We look a company up when a customer asks us to, at the moment they ask, from sources that are publicly available at that time.
What comes back is stored in that customer’s own workspace, for that customer. It is theirs to edit, export or delete, and it goes when they delete it or when the account is closed, subject to the retention section below. We do not pool one customer’s contacts, lists, campaigns or results into another customer’s workspace, and we do not use them to build a product for anyone else.
One technical exception, stated plainly: to avoid crawling the same website repeatedly, we keep a short-lived record (currently up to seven days) of the email addresses and naming conventions a company publishes on its own public website, indexed by that company’s domain. That record is not tied to any customer and contains only what the company itself published, but it does mean a later lookup of the same domain — by us, for any customer — may be answered from it rather than by crawling again. It expires automatically.
5. Emails we send you
We send three kinds of email to people with an account. Transactional email (sign-in codes, password resets and receipts), billing email (a payment that did not go through, a plan that is set to stop) and security email are part of providing the Service and cannot be switched off while you have an account.
Product email — help getting set up, and a note when your free allowance is nearly used — is sent from what you have done in your workspace. Reply “stop” to any of it and it ends. When you schedule a plan to stop, the confirmation includes links to say why; choosing one is optional.
6. Cookies, analytics and advertising
We use cookies and similar technologies that are strictly necessary to keep you signed in and to run the Service, and others to measure use of our website and to measure and improve our advertising. The services involved are:
- Google Analytics and Google Tag Manager — counting visits and which pages and features are used
- LinkedIn Insight Tag — measuring visits that come from LinkedIn advertising and the effect of that advertising
- Cloudflare — delivering the website securely, with basic traffic measurement
You can block or delete cookies in your browser settings, or use a tracking-protection extension; the Service still works, although you may need to sign in more often. If you would like us to stop using data collected about you through these tools, contact us.
7. Sharing of Information
We do not sell your personal information.
We share information only with:
- Service providers who help us operate the platform, under contractual obligations to protect the data. Naming them so you know where data actually goes:
- Google Cloud and Firebase — hosting, authentication, and database storage
- Google (Gemini) — AI research, analysis, and outreach drafting
- Google Calendar and Google Meet — demo scheduling and video calls
- Google Analytics and Tag Manager — website and product measurement
- LinkedIn — advertising measurement through the LinkedIn Insight Tag
- Cloudflare — website delivery, security and caching
- MillionVerifier — checking whether an email address exists
- Stripe — subscription billing and payment processing
- Resend — transactional and outbound email delivery
- Professional advisors or authorities when required by law or to protect our rights
- A successor entity in the event of a merger, acquisition, or sale of assets
8. Data Retention and Deletion
We retain account and workspace data for as long as your account remains active or as needed to provide the Service. Demo requests and stopping-a-plan reasons are kept for as long as they are useful to follow up and to improve the product, and you can ask us to delete yours at any time.
After account termination we delete or anonymise personal data within a reasonable period, unless we are required to retain it for legal, security, or legitimate business purposes.
To have your data deleted, email [email protected] from the address on the account. We will confirm when it is done.
9. Security
We implement technical and organisational measures designed to protect your information, including encryption in transit, access controls on our systems, and storing API keys only as hashes. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Your Rights
Depending on your location, you may have rights to access, correct, delete, or export your personal data, or to object to or restrict certain processing.
To exercise these rights, contact us at [email protected]. We will respond in accordance with applicable law.
If you are in the United Kingdom or the European Economic Area and are not satisfied with our response, you can complain to your data protection authority; in the United Kingdom that is the Information Commissioner’s Office.
11. International Transfers
Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for such transfers.
12. Children
The Service is not directed at individuals under 18. We do not knowingly collect personal information from children.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the revised version and update the “Last updated” date. Significant changes will be communicated where appropriate.
14. Contact
For privacy-related questions or requests: [email protected]