Privacy Policy

SQUIB LLC · squibb.ai Last Updated: October 4, 2026 | Effective: July 10, 2026

SQUIB LLC ("SQUIB," "we," "us"), a Wyoming limited liability company located at 30 N Gould St Ste R, Sheridan, WY 82801, provides an AI-powered outbound sales platform (the "Service") at squibb.ai. This Privacy Policy explains how we handle personal data — both the data of our customers (people who use Squibb) and the data of prospects (people our customers reach out to through Squibb). If you received an email sent through our platform and want to know why, see Section 4.

For privacy questions or to exercise any right described here: support@squibb.ai.

1. Our Roles

• For customer account data and for the prospect database that the Service sources and maintains, SQUIB is a data controller.
• For data our customers upload (such as their own contact lists) and for campaign execution on a customer's instructions, SQUIB is a processor acting for that customer, who is the controller. Our Data Processing Addendum ("DPA"), available on request at support@squibb.ai, governs that processing.

2. Data We Collect About Customers

• Account data: name, email, company, phone, billing address, and payment details (handled by our payment processor; we do not store full card numbers).
• Usage data: log data (IP address, browser, device, referral URLs) and interaction data (features used, pages visited).
• Campaign data: your business information and playbook, email content, campaign settings, results, and analytics.
• AI interaction data: your inputs to AI features and the outputs generated.
• Communications: support requests and correspondence with us.
• Cookies and similar technologies, as described in our Cookies Policy.

3. Data We Collect About Prospects

The Service identifies and enriches business contact information about prospective customers of our users, sourced from publicly available professional and business sources and licensed third-party data providers. This typically includes: name, job title, employer, business contact details (including business email address), professional profile information, and business signals (such as company news, hiring activity, or public posts). We verify email addresses before sending to reduce misdirected mail.

We process prospect data to provide the Service to our customers: matching prospects to a customer's stated target audience, enriching and verifying contact details, personalizing outreach, and maintaining suppression lists so that opt-outs are honored permanently.

Engagement signals. Emails sent through Squibb may contain a tracking image and tracked links. When an email is opened or a link is clicked, our servers receive technical information from the mail client or browser (IP address, user agent, language preference). We derive and keep only coarse values from it: time zone, country, preferred language, device type and mail client family, and the local hour the email was read. The IP address is used to derive the time zone and country and is not stored. Our customers use these values to send at a reasonable local hour and to write in the recipient's language. Legal basis: our legitimate interests and those of our customers (Art. 6(1)(f) GDPR); you can object, and opt out of further email, as described in Section 4.

Legal basis (EEA/UK prospects): our legitimate interests and those of our customers in business-to-business marketing (Art. 6(1)(f) GDPR), balanced against prospects' rights — we limit collection to professional, business-related data; we contact people only in a business capacity; every email includes a clear way to opt out; and opt-outs are honored immediately and permanently.

4. If You Received an Email Sent Through Squibb

The email was sent by one of our customers, whose identity appears in the message. Squibb provided the sending technology and, in some cases, sourced your business contact details from public or licensed sources as described in Section 3.

The email may contain a tracking image and tracked links. If your mail client loads the image or you click a link, we record that the email was opened or the link followed, together with coarse technical values described in Section 3 (time zone, country, language, device type, mail client family). We do not store your IP address. Blocking remote images in your mail client prevents the open from being recorded, and the opt-out below stops further email and any further recording.

You can: opt out using the unsubscribe mechanism in the email. The opt-out applies immediately and permanently to the customer that sent the email: no campaign from that customer's Squibb workspace will email you again. It does not cover a different Squibb customer, whose emails carry their own unsubscribe link. To stop every Squibb customer from contacting you, or for anything else, contact support@squibb.ai to ask what data we hold about you, have it corrected or deleted, or object to processing. If you request deletion, we retain only a hashed record of your address on our suppression list so that you are not contacted again.

5. How We Use Personal Data, and Why We're Allowed To

We do not use "consent by using the Service" as a legal basis. Where consent is the basis, you can withdraw it at any time by emailing support@squibb.ai. For analytics and advertising cookies you can also change your choice yourself, at any time, through "Cookie settings" in the footer of squibb.ai (see the Cookies Policy).

6. Sharing and Disclosure

• Service providers (subprocessors): hosting, payment processing, email infrastructure, AI model providers, analytics, and support tooling — bound by contract to process data only to provide services to us. A current list is available on request at support@squibb.ai.
• Your recipients: if you are a customer, the content of your campaigns is, by design, delivered to the prospects you target.
• Affiliate attribution: if you arrive through an affiliate or referral link, first-party cookies attribute your visit to the referring partner so referrals can be credited and referral discounts applied, and we log the referral click (including a hashed IP address) for attribution and fraud prevention. Details are in our Cookies Policy. Referral attribution data (not your account contents) is visible to the referring affiliate for their referrals.
• Analytics and advertising measurement. Vercel Analytics and Google Analytics (GA4) measure usage of our marketing site and our product, and PostHog measures usage of the marketing site only, as service providers to us. The Meta Pixel and Meta's Conversions API measure signups and purchases from our own advertising; Meta receives those events (page views, checkout and purchase events, with browser identifiers and, for a purchase, a hashed email address and phone number) under its terms. For visitors in the European Economic Area, the United Kingdom and Switzerland, none of these tools load, and nothing is sent to Meta, unless the visitor accepts them in our cookie banner. Elsewhere they load with the page unless the visitor has declined them in "Cookie settings" or their browser sends a Global Privacy Control signal. Details are in our Cookies Policy. We do not sell prospect or campaign data to third parties, and no prospect or campaign data is sent to any advertising platform.
• Legal: where required by law, legal process, or to protect rights, safety, or the integrity of the Service.
• Business transfers: in a merger, acquisition, or asset sale, with notice before your data becomes subject to a different policy.

7. AI and Automated Processing

The Service is built on AI. What that means for your data:

• Your inputs and campaign content are processed by third-party AI model providers under agreements restricting use to providing services to us; we select providers that do not train their generally available models on our customers' data.
• We may use aggregated, de-identified data to improve the Service. We do not use your identifiable business information or campaign content to train models made available to other customers without your consent.
• Automated selection: the Service uses automated processing to select and prioritize prospects matching a customer's target profile. This affects whether a prospect receives marketing email; it does not produce legal or similarly significant effects on any individual. Prospects may object at any time (Section 4).

8. Retention

• Customer data: retained while your account is active. After your subscription ends, your data remains exportable for 30 days (and your account reactivatable), after which we delete it within 90 days of termination.
• Prospect data: retained while relevant to providing the Service, refreshed against sources, and deleted or anonymized when no longer needed or upon a valid objection or deletion request.
• Suppression records: retained indefinitely, in hashed form where feasible — this is deliberate and necessary to keep honoring opt-outs.
• Exceptions: records required for legal, tax, accounting, or dispute purposes; and aggregated, de-identified data, which may be retained indefinitely.

9. Security

We use industry-standard safeguards including encryption in transit (TLS) and at rest, access controls, logging, and periodic security review. No system is perfectly secure; if a personal data breach affects you, we will notify affected customers without undue delay and, where SQUIB is the controller, notify supervisory authorities and individuals as required by applicable law.

10. International Transfers

We are a U.S. company; data is processed in the United States and in countries where our subprocessors operate. For transfers of EEA/UK personal data, we rely on appropriate safeguards including the European Commission's Standard Contractual Clauses and the UK Addendum/IDTA, and assess transfers as required. Details are available in our DPA.

11. Your Rights

Everyone (customers and prospects): you may request access to, correction of, or deletion of your personal data; object to or ask us to restrict processing; request portability; and withdraw consent where processing is based on consent — by emailing support@squibb.ai. We respond within 30 days (or sooner where law requires). We may need to verify your identity; we will not discriminate against you for exercising rights.

EEA/UK: you also have the right to lodge a complaint with your supervisory authority (in the UK, the ICO).

U.S. state rights (California and other states with comprehensive privacy laws): you have rights to know/access, delete, correct, and opt out of "sale"/"sharing" and targeted advertising. In the preceding 12 months we have collected the categories of personal information described in Sections 2–3, from the sources and for the purposes described there, and disclosed them to the categories of recipients in Section 6. We do not sell personal information for money. We do use the Meta Pixel and Meta's Conversions API to measure our own advertising (Section 6), and some state laws treat that as "sharing" personal information for cross-context behavioral advertising, or as targeted advertising. It covers visitors to our sites and people who buy a subscription; it never covers prospect or campaign data. You can opt out at any time in either of two ways: choose "Decline" under "Cookie settings" in the footer of squibb.ai, or turn on Global Privacy Control in your browser, which we treat as an opt-out automatically and without asking you to confirm. You can also email support@squibb.ai. Once you have opted out, the pixel does not load in that browser and your checkout or purchase is not reported to Meta. We do not knowingly sell or share the personal information of anyone under 16. You may use an authorized agent to submit requests.

12. Children

The Service is for business use by adults. We do not knowingly collect data from anyone under 18; if we learn we have, we will delete it.

13. Third-Party Links and Connected Services

The Service and our website may link to or integrate with third-party services (including domains and mailboxes you connect). Their practices are governed by their own privacy policies.

14. Changes

We will notify you of material changes by email or in-platform notice at least 30 days before they take effect. The "Last Updated" date reflects the current version.

15. Contact

SQUIB LLC, 30 N Gould St Ste R, Sheridan, WY 82801 · support@squibb.ai