Privacy

Draft for legal review. Kerbstack processes business contact data of client and prospect staff (name, role, work email/phone) found in public sources or provided by them, on the basis of legitimate interest for B2B contact (GDPR Art. 6(1)(f)), with an opt-out honoured on first request; client account data to provide the service (Art. 6(1)(b)); website monitoring data about public pages. Processors: hosting provider, payment provider, email provider, and (if enabled) an AI model provider for drafting texts that staff review. Retention: prospects without engagement deleted after 12 months; client records for the contract plus legal retention. Rights: access, rectification, erasure, objection; complaints to the CNPD.