Privacy Policy

DBEE, Inc. ("DBEE", "Intent Leads", "we" or "us") offers Intent Leads, a sales and marketing data service through which businesses ("Customers", "Users" or "you") find people in the United States who are researching topics relevant to their work or to their own purchases (such as a new roof or life insurance), or visiting the Customer's website, and reach them for sales and marketing (the "Service").

This Privacy Policy explains how we process personal information, including business contact information, personal contact details, household details and interest signals about people at work and as consumers, and other personal information that we license, that is submitted to us through the Service, or that we otherwise collect, use, disclose or process in developing, improving or providing the Service. It also describes how we handle personal information about visitors to our website ("Website"), our marketing activities, and Customers' use of the Service.

If your information is in Intent Leads, this Privacy Policy tells you who we are, how to opt out, and what happens if you stay in. You can opt out, ask what we hold about you, or ask us to delete it, using our opt-out form or by emailing privacy@intentleads.si. The opt-out form is the fastest way to have your information removed. If you stay in Intent Leads, our Customers may contact you as part of their sales and marketing: about your work or, if you have recently researched a consumer topic such as a roof replacement or life insurance, about that. Those messages are meant to be relevant to your role or interests, but we can't guarantee you'll find them relevant or interesting.

By using the Service, visiting the Website or taking part in our marketing activities, you acknowledge the collection, use, disclosure and other handling of your information described below. Residents of California and other states that give consumers rights to opt out of, delete and access their data: see section 13 for your rights.

1. Information we use to provide the Service

Information we license from third parties. We license contact, household and interest data about people in the United States, in their business capacity and as consumers, from US data providers, which compile it from their own data suppliers, identity partners, websites that use their technology, and public sources. This includes:

• name, job title, seniority, department and job function; past job titles and employers, schools and profile headline; employer and company details (domain, industry and industry codes, size, revenue, address and description); home city, state and ZIP code;
• household details: age range, gender, household income and net worth bands, and whether the person owns their home, is married or has children at home. Income and net worth bands, and some of the other household details, are estimates our data providers model from other data;
• business email address and its validation status; personal email address; mobile, direct and company phone numbers with do-not-call flags; LinkedIn profile URL;
• interest ("intent") signals: business or consumer topics a person has recently researched online (for example "outsourced SDR teams" or "roof replacement"), with a strength, a score and the dates seen. We don't receive or give out which pages or websites were read;
• hashed (SHA-256) email addresses and record identifiers, used to match removals and avoid duplicates.

We also obtain public professional profile details (photo, headline, current title, company and location) for identified website visitors who have a LinkedIn profile.

Intent Leads covers people in the United States only. We do not knowingly hold data about people in the UK, the EEA or Switzerland, or about children, and we don't hold government ID numbers or financial account numbers.

Sensitive topics. Intent topics may include sensitive areas, such as religion, sexual orientation, disability or financial hardship. Customers who choose topics in those areas are contractually responsible for using the data lawfully (our Terms of Service, section 5). We don't currently offer consumer topics about health conditions, mental, reproductive or sexual health, medicines or substance use.

Information Customers and Users submit to us. Customers and their Users provide information through the Service, including:

• Users' own contact and account details: name, email address, organization and role, sign-in details (including Google sign-in if chosen), and the IP address and time they accepted our Terms;
• lists Customers upload to include or exclude people and companies, such as company domains and LinkedIn pages, and email addresses and LinkedIn profiles, which we store only as one-way hashes;
• payment details, which our payment processor collects directly to process top-ups and invoices (we never see or store full card numbers);
• settings, keywords, webhook addresses and support messages.

Information collected on Customers' websites. When a Customer installs our website snippet, it sets a cookie and collects page-visit information (page visited, time, browser and device data, cookie and hashed identifiers, and IP address) from visitors' browsers. For visitors in the United States, we may match the visit to contact details we already license and give them to that Customer, with the pages visited. We never identify visitors located in the UK, the EEA or Switzerland, or browsers that send the Global Privacy Control signal. The Customer is responsible for telling its visitors about this and getting any consent its law requires (see our Cookie Consent requirements).

We refer to all of the information in this section as "Service Information". Our use of Service Information is also governed by our Terms of Service, our Data Protection Addendum and our other agreements with Customers.

2. Information we collect automatically

When you use the Website or the Service, our servers log technical information such as IP address, browser, pages or API endpoints requested, and time, for security, troubleshooting and abuse prevention. We also record how the Website and the Service are used (pages viewed, buttons clicked, and actions in your account such as signing up, setting up a lane or search, adding funds and exporting) to understand and improve them, as described in section 6 (together, "Usage Information"). Our Website uses cookies and similar storage to sign you in, keep you signed in, remember your choices and, where allowed, for analytics (section 6). We don't use advertising cookies.

3. Information we collect from marketing and sales activities

When you contact us, sign up for updates, book a call or talk to us at an event, we collect what you give us, such as your name, business email, company and role ("Marketing Information").

4. How we use information

Service Information, to:

• provide the Service: make contact, household and interest data about people in the United States available to Customers for sales and marketing to businesses and consumers, under contracts that require Customers to follow marketing and privacy laws (including consent and do-not-call rules for calls and texts, and the rules for any sensitive topics they choose) and forbid other uses (including decisions on credit, insurance, employment or housing);
• apply Customers' exclusion and company lists, removals and opt-outs;
• identify US website visitors for the Customers whose websites they visit;
• verify identities, set up and run accounts, bill, and support Customers;
• evaluate, maintain and improve the Service and the accuracy of its data;
• secure the Service, and prevent fraud and abuse.

Usage Information, to provide, secure, troubleshoot and improve the Website and Service.

Marketing Information, to send updates and information we think may interest you. You can unsubscribe at any time.

We also use information to comply with the law, to enforce our Terms, and as otherwise described to you when we collect it.

5. Sharing information

We share Service Information with:

• Customers, as part of the Service. Giving contact data to Customers for payment is a "sale" of personal information under some US state laws;
• our data providers, to supply and match data, apply removals and run website visitor identification;
• service providers that process it on our behalf under contracts limiting their use, such as hosting, payments, sign-in, email delivery and analytics (our Sub-processors list).

We share Usage Information and Marketing Information only with service providers that help us run the Website, the Service and our marketing.

We may also share information:

• with a buyer or successor if we are involved in a merger, acquisition or sale of assets;
• to detect and address fraud, security or technical issues;
• where the law requires, or to protect the rights, property or safety of DBEE, our Customers or others;
• without restriction when it is aggregated or de-identified so it no longer identifies anyone.

6. Analytics, advertising and do-not-track

Analytics. We use two analytics services on the Website and in the Service, as our service providers: PostHog (product analytics and session recordings) and Google Analytics (website statistics, with Google's advertising features turned off). They tell us how people find the Website, which pages they read and where they get stuck, and how Users use the Service. We don't use analytics data for advertising or sell it.

• Cookies only with permission where it's needed. Visitors in the UK, the EEA and Switzerland are asked first. Until they accept, and whenever a visitor rejects, analytics run without cookies or other storage on the device: we count visits, but we don't recognise a returning browser or record sessions. Elsewhere, analytics cookies are on unless the browser sends Global Privacy Control or Do Not Track, or you turn them off. You can change your choice at any time with Cookie settings at the bottom of the Website.
• Session recordings (PostHog) show how pages were used: clicks, scrolling and page changes. They never include what you type into forms, and inside the Service they hide all text on the page, so no lead or customer data is recorded.
• Account activity. When you have an account, we record actions in it (for example signing up, creating a lane, adding funds, exporting, and using the API, CLI or MCP) with your user ID and email, so we can see how Users get value from the Service. This is how we run and improve the Service, and doesn't depend on cookies.
• Analytics data is kept for up to 14 months, and session recordings for up to 30 days.

Advertising. We don't use third-party advertising technologies on our Website.

Do-not-track signals. We treat the Global Privacy Control (GPC) signal as a request to opt out of sale and sharing for the browser that sends it: on Customers' websites, the Intent Leads snippet doesn't identify that browser. On our own Website, GPC and Do Not Track also turn off analytics cookies. A browser signal doesn't tell us who you are, so to be removed from our data itself, use our opt-out form. You can also use the Network Advertising Initiative's and the Digital Advertising Alliance's consumer opt-out pages for cookie-based advertising generally.

7. Your choices, and how to remove your information

Anyone can ask us, through our opt-out form or at privacy@intentleads.si:

• to opt out of Intent Leads, and of the sale or sharing of their information ("Do Not Sell or Share My Personal Information");
• to know whether we hold information about them, and to get a copy of it;
• to delete it;
• to correct it.

When you opt out or ask us to delete, we remove you from Intent Leads, tell every Customer who received your details to delete or suppress them within 10 business days, and pass your request on to our data providers. Include the email address(es) and phone number(s) you want covered. We may ask for information to confirm your identity before giving you a copy of data (we don't need it to opt you out). We answer within 45 days, and we don't charge you or treat you differently for asking. An authorized agent can ask for you with your signed permission. If we decline a request, you can appeal by replying to our decision with "Appeal", and we'll respond within 45 days.

Customers' Users can update their account details in the dashboard, and ask us to close their account at support@intentleads.si.

8. Security

We protect information with access controls, encryption in transit, hashing of API keys and of uploaded email lists, separation of each Customer's data, and logging, as described on our Security page and in our Information Security Addendum. No system is perfectly secure. If a breach affects your information, we will tell you, our Customers and the authorities as the law requires.

9. Third-party links and services

The Website and Service may link to, or connect with, third-party websites and services (such as a CRM or AI assistant a Customer connects). Their own privacy policies govern them.

10. Children

The Service is for businesses. We don't knowingly collect information about children, and we don't sell or share the personal information of anyone we know is under 16. If you believe we hold a child's information, contact privacy@intentleads.si and we'll delete it.

11. Information for European and UK residents: our legal bases and your rights

Intent Leads doesn't cover people in the UK, the EEA or Switzerland (see our GDPR page). If you are a Customer's User in those places, we process your account information:

• to perform our contract with your organization (running your account and the Service);
• for our legitimate interests in securing, supporting and improving the Service and in marketing it to businesses;
• to meet legal obligations, such as tax and accounting records;
• with your consent, where the law requires it.

You may ask for access to, correction, deletion or restriction of your information, object to our processing of it, ask for a portable copy, and withdraw consent at any time, at privacy@intentleads.si. You may also complain to us at privacy@intentleads.si, and to your data protection authority (in the UK, the Information Commissioner's Office at ico.org.uk).

12. International transfers

DBEE is a US company. The Intent Leads application and database are hosted in the European Union (Netherlands), and our data providers, payment processor and some service providers are in the United States. When we receive personal information from the UK, the EEA or Switzerland, we protect it with the safeguards in our Data Protection Addendum and its UK, EEA and Swiss terms (Schedule 1), including the EU Standard Contractual Clauses and the UK International Data Transfer Addendum.

13. US state privacy rights (including California)

Notice at collection. In the last 12 months we have collected, and sold or disclosed for a business purpose, these categories of personal information:

Some interest signals, such as a topic about a religion or about sexual orientation, may reveal sensitive personal information as defined in the CCPA, or support inferences about it. We supply a topic's signals only to Customers who choose that topic. Apart from intent strength and score, we don't make our own inferences about people: the household estimates above come from our data providers as they are.

Purposes. The business and commercial purposes in section 4. We sell personal information to Customers so they can market to businesses and consumers, under terms that forbid other uses.

Retention. We keep licensed data while it is part of the data we offer; when our data providers update or remove a record, it changes or leaves Intent Leads. We keep a record of what we supplied to which Customer, so removals can be passed on, while that Customer's account is open and for up to 12 months after. We keep Users' account information while the account is open and for up to 30 days after it closes, and billing and tax records as long as the law requires (usually 7 years). Server logs are kept for up to 90 days, analytics data for up to 14 months and session recordings for up to 30 days.

Your rights. Depending on where you live, you have the right to know what personal information we collect, use, disclose and sell about you, and to get a copy; to delete it; to correct it; to opt out of its sale or sharing; to limit the use and disclosure of sensitive personal information; and not to be discriminated against for using these rights. Use our opt-out form or email privacy@intentleads.si, as section 7 explains. California residents can also use California's Delete Request and Opt-out Platform (DROP).

Do Not Sell or Share My Personal Information. You can opt out of the sale and sharing of your personal information at any time through our opt-out form. We honor the Global Privacy Control signal as described in section 6.

14. Changes to this policy

We'll post any change here with a new date, and tell Customers by email or in the dashboard if it is significant.

15. How to contact us

DBEE, Inc., 10685-B Hazelhurst Dr. #40657, Houston, TX 77043, USA. Email privacy@intentleads.si (privacy) or support@intentleads.si (everything else).