Privacy policy

Last updated: [DATE]

This page explains what personal data ChatUp handles, why, and what your rights are. We keep it short and plain. If anything is unclear, email us at hello@chatup.sk.

2. People we contact in outreach

When we run outreach for ourselves or for a client, we process business contact details of people in relevant roles: name, job title, company, work email address, and publicly available professional information, such as a company website or news about the company.

  • Where it comes from: public sources such as company websites and professional profiles, and B2B contact data providers.
  • Why, and on what legal basis: to contact businesses about services that are relevant to them. The legal basis is legitimate interest (Art. 6(1)(f) GDPR): ours, or our client's when we act on their behalf.
  • Your right to object: you can object at any time by replying "stop" or emailing hello@chatup.sk. We stop contacting you and keep only what's needed to make sure you aren't contacted again.
  • How long we keep it: if there's no response, we delete your details within 12 months. If you reply, we keep the conversation for as long as it's relevant, and no longer than 24 months. Entries on our do-not-contact list are kept for as long as needed to honour your objection.
  • When we work for a client: we act as their processor under a data processing agreement, and the client is the controller.

3. Website visitors

  • Our site doesn't use advertising or tracking cookies of its own. The booking calendar is provided by Calendly, which sets its own cookies when it loads; Calendly's cookie policy applies to those.
  • Fonts: our fonts are loaded from Google Fonts, so Google receives your IP address when the page loads.
  • Fonts: our fonts are loaded from Google Fonts, so Google receives your IP address when the page loads.
  • Hosting: our website hosting provider processes technical data such as IP addresses in server logs for security. These logs are kept for up to 30 days.

4. Booking a call

When you book a call through Calendly, we receive your name, email address and any answers you give. We use them to prepare for and hold the call. The legal basis is taking steps at your request before a possible contract (Art. 6(1)(b) GDPR). Calendly's own privacy policy also applies. We keep this data for up to 24 months unless we start working together.

5. Clients

For clients, we process contact and billing details to deliver our services and to meet our accounting obligations (Art. 6(1)(b) and (c) GDPR). Accounting records are kept for 10 years, as Slovak law requires.

6. Who we share data with

We share data with our clients, when we contact you on their behalf, and with the service providers we need to run the business, under agreements that protect your data: email hosting and sending tools, B2B contact data and email verification providers, a workflow automation tool, an AI assistant for research and drafting, our call booking tool (Calendly), and website hosting.

Some of these providers are based outside the EU. In those cases, transfers are covered by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We never sell personal data.

7. Your rights

You can ask us to access, correct or delete your data, to restrict or object to its use, or to send it to you in a portable format. Email hello@chatup.sk and we'll reply within one month.

You can also complain to a data protection authority: in Slovakia, the Office for Personal Data Protection (Úrad na ochranu osobných údajov SR, dataprotection.gov.sk), or the authority in your own country, for example Datatilsynet in Denmark.

8. Security

Access to data is limited to the people who need it, our accounts are protected with two-factor authentication, and we keep only the data needed for the purposes above.

9. Changes

If we change this policy, we'll update the date at the top of this page.