Legal

Privacy Policy

Last updated: [DATE]  ·  Effective: [DATE]
⚠ Draft for legal review — do not publish as-is. This is a structured starting point, not legal advice. Because Brio3 sources personal contact data from third-party aggregators and places automated calls, the data-sourcing, calling-consent, and consumer-rights sections in particular must be reviewed by a qualified attorney (CCPA/CPRA, TCPA, and applicable state laws). Fill in every [BRACKET] before review.

01 Who we are

This Privacy Policy describes how [LEGAL ENTITY NAME] ("Brio3," "we," "us," or "our") collects, uses, and shares information in connection with our B2B lead-generation platform, which combines a voice calling agent, ideal-customer-profile (ICP) curation services, and aggregated business contact data (the "Services").

Our registered address is [COMPANY ADDRESS]. If you have questions about this policy, contact us using the details in the "Contact us" section below.

02 Scope of this policy

This policy applies to information we process about two broad groups of people:

  • Customers and website visitors — the businesses and individuals who visit our website, request a demo, or subscribe to the Services.
  • Business contacts — individuals whose professional contact information is included in the data we aggregate and use to make outbound calls on behalf of our customers, or who interact with our voice agent on inbound calls.

This policy covers personal information of U.S. residents. [If you later serve or call contacts outside the U.S., this policy must be revised to address GDPR/UK GDPR and other non-U.S. laws.]

03 Information we collect

Information you provide

  • Contact details you submit through demo requests or forms (name, work email, company, phone).
  • Account and billing information if you become a customer.
  • Communications you send us (support requests, emails).

Information collected automatically

  • Device and usage data (IP address, browser type, pages viewed) via cookies and similar technologies.
  • [List analytics tools you use, e.g. Google Analytics, and any product analytics.]

Business contact information

As part of delivering the Services, we process professional/business contact information about individuals at target companies — such as name, job title, employer, business email, and business phone number. The sources of this information are described in the next section.

04 Data from third-party sources

A core part of the Services is aggregating and reconciling business contact data from third-party data providers. We obtain business contact information from sources that may include [LIST YOUR ACTUAL PROVIDERS — e.g. ZoomInfo, Cognism, Apollo, and others].

We rely on these providers' representations that they have collected and are permitted to share this information in compliance with applicable law. Our use of data from each provider is also subject to that provider's own terms. [Confirm with legal that your use of each provider's data — including for automated outbound calling — is permitted under that provider's license terms.]

Where required, we honor requests from individuals to access, correct, or delete the business contact information we hold about them, as described in "Your privacy rights" below.

05 How we use information

We use the information we collect to:

  • Provide, operate, and improve the Services, including curating ICPs and generating call lists for customers.
  • Place outbound calls and handle inbound calls through our voice agent on behalf of our customers.
  • Communicate with you about demos, your account, billing, and support.
  • Maintain the security and integrity of our platform and prevent misuse.
  • Comply with legal obligations and enforce our agreements.

06 Automated calling & voice data

The Services include an automated voice agent that places and receives phone calls. In connection with these calls we may process:

  • Call metadata (numbers dialed, time, duration, outcome).
  • Call audio and/or transcripts, where calls are recorded. [State clearly whether calls are recorded, and note that call-recording consent requirements vary by state — several states require all-party consent. Legal review required.]

Outbound calling is subject to federal and state telemarketing and robocall laws, including the Telephone Consumer Protection Act (TCPA) and applicable state statutes. [Describe how consent, do-not-call scrubbing, calling-time restrictions, and disclosure of automated/AI voice are handled. This is a high-risk area — confirm your calling practices and disclosures with counsel.]

07 How we share information

We share information as follows:

  • With customers — we deliver leads, call outcomes, and related data to the customer on whose behalf we perform lead generation.
  • With service providers — vendors who help us operate the platform (hosting, telephony, analytics, payment processing), bound by contract to protect the information. [List categories of vendors.]
  • For legal reasons — when required by law, to respond to legal process, or to protect our rights, users, or the public.
  • In a business transfer — in connection with a merger, acquisition, or sale of assets.

[State whether you "sell" or "share" personal information as those terms are defined under CCPA/CPRA — this determines what opt-out mechanisms you must provide. See section 12.]

08 Cookies & tracking

We use cookies and similar technologies on our website to keep it functioning, remember preferences, and understand usage. You can control cookies through your browser settings. [If you use advertising or cross-site tracking cookies, disclose them and provide any legally required opt-out / consent banner.]

09 Data retention

We retain personal information for as long as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods for business contact data, call recordings, and account data are described in our internal retention schedule. [State your actual retention periods, especially for call recordings/transcripts.]

10 Data security

We maintain administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. [Optionally describe key measures — encryption in transit/at rest, access controls, etc.]

11 Your privacy rights (California)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, gives you the right to:

  • Know what personal information we collect, use, and disclose.
  • Request access to and deletion of your personal information.
  • Request correction of inaccurate personal information.
  • Opt out of the "sale" or "sharing" of personal information (see section 12).
  • Not be discriminated against for exercising your rights.

To exercise these rights, contact us using the details below. We will verify your request before responding. You may use an authorized agent to submit a request on your behalf. [Add other states' rights if you expand — e.g. Virginia, Colorado, Texas — and confirm which state laws apply to your operations.]

12 Do Not Sell or Share My Personal Information

Under the CPRA, certain data-sharing practices may qualify as "selling" or "sharing" personal information. [Determine with counsel whether your aggregation and disclosure of contact data constitutes a "sale" or "share." If so, you must provide a clear opt-out mechanism — commonly a "Do Not Sell or Share My Personal Information" link — and honor opt-out preference signals such as Global Privacy Control (GPC).]

To opt out, [describe the mechanism / link once determined].

13 Children's privacy

The Services are intended for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe we have collected such information, contact us and we will delete it.

14 Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.

15 Contact us

For questions about this policy or to exercise your privacy rights:

  • Email: [privacy@brio3.com]
  • Mail: [COMPANY NAME, MAILING ADDRESS]
  • [Phone / request form link, if offered]