Legal

Privacy noticeACCOUNT INTELLIGENCE

Draft — not yet reviewed by counsel

This is a working draft prepared as a starting point. A privacy notice for a business that processes personal data at scale carries real legal exposure and must be reviewed by qualified counsel in each jurisdiction you operate in before publication. Treat every statement below as a proposal, not a commitment.

Intelligence X provides business contact and account intelligence to companies for business-to-business sales. This notice explains what we process about individuals, why, and what you can do about it. It applies to people whose professional details appear in our database as well as to customers who use the product.

Who we are

Intelligence X is the controller of the personal data described here. Contact details for privacy matters, and the identity of our EU and UK representatives where required, must be inserted before publication.

What we process

We process information about individuals in their professional capacity only. That means:

  • Name, job title, employer, seniority, department, and professional history
  • Business contact details: work email address and business phone numbers
  • Publicly stated professional views, such as conference talks or public posts, with the source and date recorded
  • Inferences we draw about scope of responsibility and buying role, labelled as inferences
  • Information our customers already hold about you in their own systems, where they connect those systems to ours

We do not knowingly collect personal information about anyone under 18, we do not process special category data, and we do not build profiles of consumer behaviour.

Where it comes from

Publicly accessible professional sources, licensed data providers, and our customers' own systems. The data sources page lists this field by field. We do not collect information from behind a login or a paywall.

Why we process it, and on what basis

Our basis under the UK and EU GDPR is legitimate interests: providing business contact information so that companies can communicate with other companies about relevant products. We have assessed this against your rights and concluded it is proportionate because the data is professional, the context is professional, and you can object at any time with immediate effect. Our balancing assessment is available on request. Where legitimate interests is unavailable in a jurisdiction, we rely on consent or do not process.

Who we share it with

With our customers, who are independent controllers of what they subsequently do with it, and with the categories of subprocessor listed in our trust center. We do not sell personal information for advertising. Under the CCPA definition, our disclosure of personal information to customers may constitute a "sale" or "share", and you can direct us to stop.

International transfers

Data is held in the region selected on the account, currently the United States or the European Union. Where data moves between regions we rely on Standard Contractual Clauses and maintain a transfer impact assessment.

How long we keep it

Contact records are held while the lawful basis stands. Signal history is a rolling 90-day window. If you ask us to delete you, we keep a minimal suppression record indefinitely — your email address in hashed form — because that is the only way to ensure you are not re-added the next time a source mentions you.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, object, port your data, and opt out of sale or sharing. You can exercise any of these through the opt-out form. It is free, no account is required, and we will not discriminate against you for using it. We aim to confirm within 5 business days and complete within 30 days, or 45 where the law permits an extension.

We do not use personal data to make automated decisions producing legal or similarly significant effects about the individuals in our database.

Complaints

If you are unhappy with how we have handled your data you can complain to your local supervisory authority. In the UK that is the Information Commissioner's Office; in the EU it is the authority in your member state.

Changes

We will post material changes here with a revised date and, where the change is significant and we hold a means of contacting you, notify you directly.