Privacy Policy

This Privacy Policy explains how Data Holdings OÜ (registry code 17512052, registered at Sepapaja tn 6, Lasnamäe linnaosa, 15551 Tallinn, Estonia), which operates the website datasend.ai and the DataSend.ai platform ("DataSend", "we", "us"), processes personal data. We act as the data controller for the processing described below. Contact: info@datasend.ai.

1. The data we process

We process personal data in two distinct contexts, each with its own legal basis:

• Platform users — individuals who register for and use DataSend.
• Business-contact records — information about companies and their publicly listed business representatives that forms our B2B database.

2. Platform users

For account holders we process identifying and account data (name, work email, phone number, company, credentials), billing data (processed by our payment provider) and technical and usage data (IP address, device and log data, cookies).

Legal basis

• Contract (Art. 6(1)(b) GDPR) — to provide the service you sign up for.
• Legitimate interests (Art. 6(1)(f)) — security, fraud prevention and product improvement.
• Consent (Art. 6(1)(a)) — non-essential cookies and marketing messages.
• Legal obligation (Art. 6(1)(c)) — accounting and tax records.

3. The business database

Our database contains company information — names, registration data, industry, revenue, headcount and websites — together with business contact details such as role-based or publicly listed work emails and phone numbers. Where a record relates to an identifiable individual, it constitutes personal data.

Sources

This information is compiled from publicly available sources, including official business and trade registers, company websites and other lawful public sources.

Legal basis

We process this data on the basis of our legitimate interests (Art. 6(1)(f) GDPR) in operating a business-to-business prospecting service, limited to a professional context and balanced against the rights of the individuals concerned. Individuals may object at any time (see Section 7) and we act on opt-out and erasure requests.

Customer responsibility. When you use data obtained through DataSend to contact a person, you act as the controller for that outreach and are responsible for complying with the GDPR and applicable rules on electronic communications.

4. How we use data

• To provide, secure and improve the platform and database.
• To operate search, CRM, campaign, analytics and AI-assistant features.
• To process payments and administer subscriptions.
• To send service communications and, with consent, marketing.
• To meet legal and regulatory obligations.

5. Recipients and processors

We share data only with service providers that act on our instructions under data-processing agreements:

• Stripe — payment processing.
• Vercel — hosting and content delivery.

We do not sell platform-user personal data. We may disclose data where required by law.

6. International transfers

Certain providers (such as Stripe and Vercel) are based in the United States. Such transfers are governed by the European Commission's Standard Contractual Clauses and, where applicable, the providers' Data Privacy Framework certification.

7. Your rights

You have the right to access, rectify, erase, restrict and port your personal data, and to object to processing. Where we rely on legitimate interests you may object at any time; where we rely on consent you may withdraw it at any time.

Removal from the database. If you appear in our database and wish to be removed, contact info@datasend.ai. We action verified requests without undue delay and record the suppression so the data is not re-added.

To exercise any right, contact info@datasend.ai. You may also lodge a complaint with your supervisory authority; in Estonia this is the Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).

8. Retention

We retain account data for the life of the account and, thereafter, for the period required by law — in particular the seven-year retention period for business records under the Estonian Accounting Act. Database records are re-verified regularly and invalid records are removed.

9. Cookies

We use essential cookies and, with your consent, analytics cookies. You can manage your choice through the cookie banner.

10. Security

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and regular review.

11. Changes

We may update this Policy. Material changes will be published here with a revised date.

12. Contact

Data Holdings OÜ
Sepapaja tn 6, Lasnamäe linnaosa, 15551 Tallinn, Estonia
info@datasend.ai