Privacy Policy

SDR Pilot is the controller for account data, and your processor for lead data.

SDR Pilot (KvK 70562431, VAT NL002399377B14, The Hague, the Netherlands) is the controller for your account, billing and marketing data. For the data of the leads and contacts you target, and the conversations with them, you are the controller and SDR Pilot processes that data on your behalf under the Data Processing Agreement at /dpa/. Contact: [email protected].

Only what is needed to run your account and your outreach.

• Account data: your email address, your name and a hash of your password. We never store the password itself.
• Billing data: handled by Stripe. We receive your billing contact and invoice details, and we never store card numbers.
• LinkedIn session data: the session cookies of each connected LinkedIn account, stored encrypted.
• Lead data: the LinkedIn profile data of the people you choose to target.
• Conversation content: the messages sent and received through your connected accounts.
• Usage logs: technical records of what happened in your account, used for security and troubleshooting.
• Proxy assignment: the dedicated IP address assigned to each of your senders.

Mostly to perform our contract with you, and marketing email only with your consent.

For the life of your account, then deleted within 30 days, except invoices.

• Account, lead, session and conversation data: kept while your account exists, and deleted within 30 days after you delete the account.
• Invoices and billing records: kept for 7 years, because Dutch tax law requires it.
• Usage logs: short-lived, kept only as long as needed for security and troubleshooting.

Only the sub-processors that help us run SDR Pilot, listed in full.

We do not sell personal data and we do not share it with advertisers. The companies that process data for us, such as hosting, payments, email and AI processing, are listed with their country and purpose at /subprocessors/. We give 14 days notice by email before adding a new one. We may also disclose data where the law requires it.

Where data leaves the EU, Standard Contractual Clauses protect it.

SDR Pilot is hosted in the EU, in Germany. Some sub-processors are based outside the European Economic Area, for example in the United States or Singapore. Those transfers are covered by the European Commission's Standard Contractual Clauses, with extra safeguards where they are needed.

You can ask us to show, correct, delete or hand over your data at any time.

• Access: ask for a copy of the personal data we hold about you.
• Rectification: have inaccurate data corrected.
• Erasure: have your data deleted.
• Portability: receive your data in a machine-readable format.
• Restriction: ask us to limit how we use your data.
• Objection: object to processing based on legitimate interest.
• Withdraw consent: stop marketing email at any time, with the link in each email or by writing to us.
• Complaint: lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens.

Email [email protected] to use any of these rights. We answer within one month. If you are a lead contacted through an SDR Pilot customer, that customer is the controller of your data, and we will pass your request to them and help them answer it.

No advertising or analytics trackers on sdrpilot.ai.

We use only strictly necessary cookies and those Stripe sets during checkout. Strictly necessary cookies keep you signed in and the app secure. We do not use advertising or analytics trackers.