Privacy policy

‍

Introduction

Referly.io (“We”, “us”, “our”) is a sales intelligence company providing tools and services to help businesses monitor buying intent and optimize sales efforts. 

We offer our Services as processors to our customers, but as we improve our Services, we process personal data as controllers. This, and our other activities as controllers, are described in this Privacy Policy..

Referly.io is committed to protecting the privacy of all users in accordance with applicable data-protection laws, including the GDPR. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, where and how long we store it, and the rights you have regarding your data.

Referly.io as Processor

Referly.io offers its platform to its customers as a processor. This means that we only collect information if our customer has instructed us to obtain information about its website visitors. 

Our customers’ responsibilities

When you use Referly.io on behalf of an organization, that organization is the Controller and we act as its Processor, processing data only on its instructions. Our customers are the controllers of the personal data obtained via our platform and we recommend that our customers take note of the General Data Protection Regulation (“GDPR”) as well as other applicable laws and regulations.

The data processed: B2B only

The data processed are the IP-address from which companies visited our customer´s websites, and technical information that enables us to tell different locations apart that are originating from the same IP-address (cookies). Our sources are, for the most part, publicly available databases which include company data and IP addresses. 

We focus only on B2B company profiles. These may include names, contact details and job titles of employees and directors. If we suspect that an IP address belongs to a consumer or other non-business visitor, we remove it and do not continue to build a profile from it. Leads profiles are created based on legitimate interest, showing our customers only the most legitimate leads profiles possible. We do not collect sensitive or special personal data. 

Referly.io as Controller

We offer our Services as processors to our customers, but as we improve our Services, we process personal data as controllers. This, and our other activities as controllers, are described in this Privacy Policy.

We process personal data under this Privacy Policy and in accordance with applicable legislation, including the General Data Protection Regulation 2016/679/EU (the “GDPR”). Our objective is to maintain a high level of protection for personal privacy. 

3. Data Collection & Deletion

Account & Profile Data: name, email address, profile photo, password, settings upon registration.‍

Contacts Data: with your explicit consent, we import and sync your contacts from third-party services (e.g., Google Contacts) solely to power lead identification features; we do not access or store your inbox contents.‍

Usage & Analytics: logs of referrals sent, feature usage, device/browser metadata, IP addresses; used to improve our service.‍‍

‍Communications: records of any feedback, support tickets, or other messages you send us.‍

Social Media data: Installing the Referly Chrome Extension allows Referly to receive access to your social media session cookies to perform actions on such as profile visits in compliance with platforms terms of services.

Deleted accounts are flagged, and data becomes inaccessible, stored for 90 days for potential recovery. You can request expedited removal of all personal data. Post-deletion, data may remain in encrypted backups for up to 35 more days. Contact hello@getreferly.com for expedited data deletion.

4. How We Use Your Data

Service Provision: to operate, maintain, and provide the core referral functionality.

Product Improvement: to analyze usage patterns and optimize features.

Communications: to send you transactional emails (e.g., password resets), service notifications.

Legal Compliance: to comply with laws, enforce our Terms of Service, and respond to lawful requests.

5. Hosting in the European Economic Area

Your data is securely stored on cloud infrastructure, primarily with Google Cloud Platform. Our Google Cloud Platform data region is the Europe, adhering to EU-US Privacy Shield standards for GDPR compliance. Personal data will not be transferred to countries outside of the European Economic Area (EEA) without adequate safeguards and compliance with data protection laws. Any such transfers will be conducted in accordance with Chapter V of the GDPR.

6. Security

We prioritize data security, using a Tier 1 cloud provider, Google Cloud Platform, for operations. In Transit: Data between our servers is secured with HTTPS/TLS. Our domains have HSTS enabled. At Rest: Data in our databases and backups are encrypted.

7. What Data Does Referly Own?

We own our code, designs, copy, and IP. We own usage, looked up, and third-party data used for service delivery.

8. What Usage Data does Referly.io store?

We track actions like sent referrals within Referly. Notes, surveys, chats, or emails about feedback or requests are stored.

9. What Third-Party Data Vendors does Referly.io use?

We utilize tools for customer service, usage analysis, website tracking, file processing, email, and marketing campaigns, and cloud hosting. Contact records are optionally enriched with data from FullEnrich, Social Media data, and Google searches, adjustable in settings.

10. What Google Account and Contacts Information does Referly.io use?

Google data access requires your explicit authorization. We offer Google contacts import upon your approval. Interaction with Google is solely via their API. Access can be revoked. Authorized access allows Referly to:Collect your Google account data like name, email, and profile pictureCollect Google contacts' names, emails, and picturesSend emails from your Google account for Referly purposes.

Referly’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google Workspace APIs are not used to develop, improve, or train generalized AI and/or ML models.

11. What Tracking & similar technologies does Referly.io use?

‍‍

Functional Cookies: to enable core site functionality.

Analytical Cookies: to understand and improve site usage.

12. Your Rights

Under the GDPR, you have the right to:

• Access your personal data.
  
  
• Rectify inaccuracies or complete incomplete data.
  
  
• Erase (“right to be forgotten”) or restrict processing.
  
  
• Object to processing (including for marketing).
  
  
• Data portability to receive your data in a structured format.
  

Withdraw consent at any time for processing based on consent. To exercise any right, contact us at contact@referly.io. We will respond within one month.

13. Privacy Policy Change?

Our Privacy Policy may evolve with Referly's development. We encourage regular policy reviews. Continued site use implies acceptance of policy changes. Contact privacy@referly.io with Privacy Policy queries.

14. Contact Us

For questions, data-subject requests, or complaints:

Email: contact@referly.io

Adress: 6 rue des Bateliers, 92110, Clichy, France.