Privacy Policy

1. Who is responsible

Victory Interactive Inc., [registered address], is the controller for this website, for our customers' account data, and for the shared knowledge of whether a business address exists. For the prospects, campaigns and conversations in a customer's workspace, the customer is the controller and we are its processor under our Data Processing Agreement.

2. Visitors to this website

The website sets no cookies and uses no analytics, advertising or tracking tools; its fonts and images are served from our own servers. Our hosting records technical request data (IP address, browser, time, page) to keep the site secure and working; these logs are kept for a limited period.

3. Our customers and their users

We use this data to provide the service under our contract with you, to bill, to support you and to keep the platform secure.

• Account data: name, business e-mail, company, role, and sign-in data.
• Billing data: handled by our payment provider; we do not store full card numbers.
• Workspace content: product profiles, goals, workflows, the e-mails written and the replies received.
• Usage data needed to run, secure and improve the platform.

4. The people the platform finds

To find decision-makers, the platform collects business information that people and companies have made public: name, role, company, business e-mail address and phone, links to public profiles, and public figures such as follower counts. The sources are professional networks, map listings, company websites, public social media profiles, app stores and ad libraries.

It verifies a business address by asking the recipient's mail server whether the mailbox exists, and hangs up before any message is sent. Verdicts are reused for thirty days.

Our customers write to these people for business purposes, relying on their legitimate interest. Every person may object at any time: whoever declines or asks to be removed is removed everywhere, for every customer, and never written to again. To ask, reply to any e-mail or write to [privacy contact e-mail].

5. AI processing

E-mails are written, and replies classified and answered, by AI language models from providers such as OpenAI, Anthropic and DeepSeek, chosen per task. They receive only what the task needs, under their API terms. No decision with legal or similarly significant effect on a person is made by automated means.

6. Who we share data with

We do not sell personal data. We share it only with the service providers that run the platform for us — cloud hosting and e-mail delivery (Amazon Web Services), payments (Stripe), error monitoring (Sentry), AI language models, and public-data providers — each bound to protect it, and with authorities where the law requires.

7. International transfers

Some providers process data outside the European Economic Area, including in the United States and China. Where they do, we rely on the safeguards the law provides, such as the European Commission's Standard Contractual Clauses [to be confirmed per provider].

8. How long we keep data

• Account and workspace data: for as long as the account is active, then deleted after the export period, except what the law requires us to keep.
• Billing records: as long as tax law requires.
• Prospect data: for as long as it serves our customers' outreach; on request, sooner.
• Opt-out records: kept, so that a person who said no is never contacted again.

9. Your rights

Depending on where you live, you may have the right to access, correct or delete your data, to restrict or object to its use — including at any time to direct marketing — and to data portability. Write to [privacy contact e-mail]; we answer within one month. You may also complain to your data protection authority.

10. Security

Each customer's data is kept apart inside the database by row-level security; traffic is encrypted in transit; secrets and provider keys are sealed with a key-management service; access inside the company is limited to those who need it.

11. Children

ForeverFriday is a business service. It is not meant for children, and it does not knowingly look for or contact them.

12. Changes and contact

We will post changes here and date them; material changes will be announced to customers. Questions: [privacy contact e-mail].