Legal
Privacy Policy
Last updated: June 21, 2026
This Privacy Policy explains how B2Tool (“B2Tool,” “we,” “us”) collects, uses, and protects personal information in connection with our AI-powered B2B lead-generation service (the “Service”). It covers both the people who use B2Tool (our customers) and the business contacts whose publicly available details our Service helps surface.
1. Who we are
B2Tool is the data controller for the personal information described in this policy. You can reach us at the postal address and email in the Contact section.
2. Information we collect
- Account information — the email address and authentication details you use to sign in, and any organization or billing information you provide.
- Usage data — how you interact with the Service, including searches, saved leads, and product activity, plus standard technical logs (IP address, device and browser information) used for security and reliability.
- Credentials you connect — if you bring your own AI provider key or connect a sending mailbox, we store those credentials encrypted and use them only to operate the features you enabled.
- Prospect data — business contact details (such as company name, website, business email, phone, and role) that our agents compile from public, online sources on your behalf so you can evaluate and reach out to potential customers.
- Outreach & conversations — the outreach messages you send through the Service and the conversation with your business contacts. To keep that conversation complete, we read your connected mailbox (the inbox and sent folders) and record the messages exchanged with your contacts — their replies and the replies you send from your own email client — so you can see the full exchange in your CRM and we can stop automated follow-ups once someone responds. We only store messages that match one of your business contacts; other mail is not retained. We keep a short snippet and message details, not the full message body, and prune this history on a rolling schedule.
3. Business contacts sourced from public sources
A core part of the Service finds and verifies business leads from information that is publicly available online. Where that information identifies an individual (for example, a role-based work email), we process it to provide the Service to our customers. Consistent with Article 14 of the GDPR, every outreach email sent through B2Tool tells the recipient that their business was found in public sources and offers a one-click way to opt out. If you are a business contact and want your details removed, use the unsubscribe link in any message or contact us directly and we will suppress your information.
4. How we use information
- To provide, operate, and improve the Service;
- To generate and, at your direction, send outreach emails from your connected mailbox;
- To measure delivery and engagement (such as opens and clicks) for messages you send;
- To read your connected mailbox and record the conversation (your contacts' replies and the replies you send) with the business contacts you reach out to, so you can see the exchange in your CRM and we can stop automated follow-ups when a recipient replies, unsubscribes, or otherwise engages;
- To secure the Service, prevent abuse, and meet legal obligations;
- To communicate with you about your account and important product updates.
5. Legal bases (EEA/UK)
Where the GDPR or UK GDPR applies, we rely on: performance of a contract (to provide the Service); our legitimate interests (to operate, secure, and improve the Service and to facilitate B2B outreach), balanced against individuals’ rights; your consent where required; and compliance with legal obligations.
6. Email outreach & your responsibilities
Messages you create are sent from your own connected mailbox. Every message includes our postal address and an unsubscribe link, and we honor opt-outs across the platform. You are responsible for ensuring your use of outreach features complies with applicable laws (including CAN-SPAM, CASL, and the GDPR) in the jurisdictions you contact.
7. How we share information
We do not sell personal information. We share it only with service providers that help us run the Service (for example, cloud hosting, database, and infrastructure providers), under contracts that limit their use of the data, and where required by law or to protect our rights. Your AI provider key and mailbox credentials are used only to call the services you connected — we are not a data sub-processor for the content you generate.
8. Data retention
We keep personal information for as long as your account is active or as needed to provide the Service, then retain or delete it as required to meet legal, accounting, or security obligations. You can delete leads and other content from within the product at any time.
9. Security
We use technical and organizational measures appropriate to the risk, including encryption of sensitive credentials in storage and access controls. No method of transmission or storage is perfectly secure, but we work to protect your information and to respond promptly to any incident.
10. Your rights
Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to opt out of marketing. To exercise any of these rights, contact us using the details below. Business contacts can opt out at any time via the unsubscribe link in any message.
11. International transfers
We operate in the United States. If you access the Service from outside the U.S., your information may be processed in the U.S. and other countries, with appropriate safeguards where required by law.
12. Children
The Service is intended for businesses and is not directed to children under 16.
13. Changes to this policy
We may update this policy as the Service evolves. Material changes will be reflected by the “Last updated” date above and, where appropriate, communicated to you directly.
14. Contact
Questions, requests, or removals — reach us at:
B2Tool Raleigh, NC 27612, USA[email protected]