Privacy Policy

This Privacy Policy explains how we collect, use, disclose and safeguard personal data in connection with DataInside — a business-to-business (B2B) sales-intelligence platform that provides company and contact data, buying-intent signals, data enrichment and outreach tooling.

It applies to (a) visitors to datainside.ai, (b) users of the Service and their accounts, and (c) the business professionals whose information is included in the DataInside database. Where we determine the purposes and means of processing, we act as a data controller. When a customer uses the Service to process data for their own purposes, that customer is an independent controller of the data they access, export or upload, as described in our Terms of Service.

We collect the following categories of personal data:

• Account data. When you create an account or sign in (including via Google), we collect your name, work email address, a securely hashed password (for email/password accounts), your workspace and organization details, and your role. We never store passwords in plain text.
• Business-contact data in the platform.DataInside maintains a database of business professionals and companies. For a contact this may include name, job title, seniority, department, work email address, business phone number, professional social profile (e.g. LinkedIn URL), and their employer’s firmographics. See Section 3 for how this is sourced and the basis on which we process it.
• Usage & device data. Log data such as IP address, browser and device type, pages viewed, searches run, features used, and timestamps — used to operate, secure and improve the Service.
• Communications. Records of emails, support requests and other correspondence with us.
• Cookies & similar technologies. See Section 10.

Most records in the DataInside database relate to people who are not our account holders. Under the GDPR, UK GDPR, and the UAE and Saudi Personal Data Protection Laws, work-related contact data is still personal data— there is no blanket “B2B exemption.” We therefore treat transparency, a lawful basis, and rights-handling as core controls.

• Sources. We compile this data from public and openly available sources, our own collection processes, and vetted third-party data providers. We do not knowingly process special categories of data (e.g. health, religion) for this purpose.
• Purpose & lawful basis.We process professional contact data to provide the Service — helping businesses identify and reach potential customers, partners and suppliers. Where the GDPR/UK GDPR applies, our lawful basis is our and our customers’ legitimate interestsin B2B prospecting, balanced against the rights and expectations of the data subject; where a given regime requires a different basis (such as consent), we apply that regime’s standard for records tied to that jurisdiction.
• Your controls. If you are included in our database, you may object to processing, request access, correction or deletion, or ask to be added to our do-not-contact / suppression list so your record is excluded from exports and outreach. See Section 9.

We use personal data to:

• provide, operate, maintain and secure the Service and your account;
• build, verify, enrich and keep current the company and contact intelligence in the platform;
• power search, ICP fit scoring, buying-intent signals, lists, exports and outreach tooling;
• send service, security and transactional communications (and, with any required consent, product updates);
• respond to requests, provide support, and handle data-subject and legal requests;
• detect, prevent and investigate fraud, abuse and security incidents; and
• comply with legal obligations and enforce our agreements.

Where the GDPR or UK GDPR applies, we rely on: legitimate interests (operating the platform and B2B prospecting, and securing the Service); performance of a contract (providing the Service to account holders); consent (where required, e.g. certain marketing — which you may withdraw at any time); and legal obligation (to meet our legal duties). Where the UAE PDPL, Saudi PDPL, or other applicable laws govern a record, we process on the basis that law permits and apply the strictest applicable standard per record, keyed to the data subject’s jurisdiction.

We do not sell your account data. We share personal data only as follows:

• Service providers (sub-processors) who process data on our behalf under contract — including cloud hosting and infrastructure, our email delivery provider (Resend), authentication (Google Sign-In for users who choose it), and search/analytics infrastructure. They may act on our instructions only.
• Our customers. The platform makes business-contact and company data available to customers, who then act as independent controllers of the data they access or export and are responsible for their own lawful use of it.
• Legal, safety and corporate transactions. Where required by law or legal process, to protect rights and safety, or in connection with a merger, acquisition or financing (subject to this Policy).

We operate across the MENA region, the EU/UK and the US, and may transfer and process personal data in countries other than your own. Where we transfer data internationally, we implement appropriate safeguards required by applicable law — such as the European Commission’s Standard Contractual Clauses (and the UK Addendum) or an adequacy mechanism — to protect the data.

We retain personal data for as long as necessary for the purposes described in this Policy — for the life of your account plus any period required to meet legal, accounting or security obligations, and for the database, for as long as the record remains relevant to the Service. We delete or de-identify data when it is no longer needed, and we honor verified deletion and suppression requests as described below.

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent where processing is based on it. You may also lodge a complaint with your local data-protection authority.

• Do-not-contact / opt-out. Use our self-service opt-out & privacy-request page to have your record suppressed from outreach and excluded from exports — no account required, effective immediately.
• How to exercise your rights. Submit an access or deletion request from the opt-out & privacy-request page, or email [email protected]. We will verify your request and respond within the timeframe required by applicable law. These rights are free to exercise, subject to legal limits.

We use strictly necessary cookies and similar technologies to keep you signed in (session cookies), remember your preferences (such as light/dark theme), and secure the Service. Where required, we use analytics only with your consent. You can control cookies through your browser settings; disabling strictly necessary cookies may prevent parts of the Service from working.

We use technical and organizational measures designed to protect personal data — including encryption in transit, hashed credentials, access controls, tenant isolation between workspaces, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

The Service is intended for business use by adults and is not directed to children. We do not knowingly collect personal data from children under 16. If you believe a child has provided us personal data, contact us and we will delete it.

We may update this Policy from time to time. We will post the updated version here and revise the “Last updated” date; material changes may be notified through the Service or by email. Your continued use of the Service after an update constitutes acceptance of the revised Policy.

For privacy questions or to exercise your rights, contact our privacy team at [email protected].

networkngn, Inc.
Attn: Privacy
[Registered office address]