Privacy Policy
SQUIB LLC · squibb.ai Last Updated: July 10, 2026 | Effective: July 10, 2026
SQUIB LLC ("SQUIB," "we," "us"), a Wyoming limited liability company located at 30 N Gould St Ste R, Sheridan, WY 82801, provides an AI-powered outbound sales platform (the "Service") at squibb.ai. This Privacy Policy explains how we handle personal data — both the data of our customers (people who use Squibb) and the data of prospects (people our customers reach out to through Squibb). If you received an email sent through our platform and want to know why, see Section 4.
For privacy questions or to exercise any right described here: support@squibb.ai.
1. Our Roles
- For customer account data and for the prospect database that the Service sources and maintains, SQUIB is a data controller.
- For data our customers upload (such as their own contact lists) and for campaign execution on a customer's instructions, SQUIB is a processor acting for that customer, who is the controller. Our Data Processing Addendum ("DPA"), available on request at support@squibb.ai, governs that processing.
2. Data We Collect About Customers
- Account data: name, email, company, phone, billing address, and payment details (handled by our payment processor; we do not store full card numbers).
- Usage data: log data (IP address, browser, device, referral URLs) and interaction data (features used, pages visited).
- Campaign data: your business information and playbook, email content, campaign settings, results, and analytics.
- AI interaction data: your inputs to AI features and the outputs generated.
- Communications: support requests and correspondence with us.
- Cookies and similar technologies, as described in our Cookies Policy.
3. Data We Collect About Prospects
The Service identifies and enriches business contact information about prospective customers of our users, sourced from publicly available professional and business sources and licensed third-party data providers. This typically includes: name, job title, employer, business contact details (including business email address), professional profile information, and business signals (such as company news, hiring activity, or public posts). We verify email addresses before sending to reduce misdirected mail.
We process prospect data to provide the Service to our customers: matching prospects to a customer's stated target audience, enriching and verifying contact details, personalizing outreach, and maintaining suppression lists so that opt-outs are honored permanently.
Legal basis (EEA/UK prospects): our legitimate interests and those of our customers in business-to-business marketing (Art. 6(1)(f) GDPR), balanced against prospects' rights — we limit collection to professional, business-related data; we contact people only in a business capacity; every email includes a clear way to opt out; and opt-outs are honored immediately and permanently.
4. If You Received an Email Sent Through Squibb
The email was sent by one of our customers, whose identity appears in the message. Squibb provided the sending technology and, in some cases, sourced your business contact details from public or licensed sources as described in Section 3.
You can: opt out using the unsubscribe mechanism in the email (applied immediately and permanently across our platform); or contact support@squibb.ai to ask what data we hold about you, have it corrected or deleted, or object to processing. If you request deletion, we retain only a hashed record of your address on our suppression list so that you are not contacted again.
5. How We Use Personal Data, and Why We're Allowed To
| Purpose | Data | Legal basis (where GDPR applies) |
|---|---|---|
| Providing and operating the Service, including sending campaigns on customers' instructions | Account, campaign, prospect data | Contract performance (customers); legitimate interests (prospects) |
| Billing and transactions | Account data | Contract performance; legal obligation |
| Sourcing, enriching, verifying prospect data | Prospect data | Legitimate interests (Section 3) |
| Service communications, support | Account, communications | Contract performance; legitimate interests |
| Security, fraud and abuse prevention, protecting sending infrastructure | Usage, campaign data | Legitimate interests; legal obligation |
| Product analytics and improvement | Usage data (aggregated where possible) | Legitimate interests |
| Improving AI systems | Aggregated, de-identified data only (Section 7) | Legitimate interests |
| Marketing our own services; advertising measurement | Usage data, cookies | Consent (where required); legitimate interests |
| Legal compliance and claims | As required | Legal obligation; legitimate interests |
We do not use "consent by using the Service" as a legal basis. Where consent is the basis (e.g., non-essential cookies), we ask for it explicitly and you can withdraw it at any time.
6. Sharing and Disclosure
- Service providers (subprocessors): hosting, payment processing, email infrastructure, AI model providers, analytics, and support tooling — bound by contract to process data only to provide services to us. A current list is available on request at support@squibb.ai.
- Your recipients: if you are a customer, the content of your campaigns is, by design, delivered to the prospects you target.
- Affiliate attribution: if you arrive through an affiliate or referral link, first-party cookies attribute your visit to the referring partner so referrals can be credited and referral discounts applied, and we log the referral click (including a hashed IP address) for attribution and fraud prevention. Details are in our Cookies Policy. Referral attribution data (not your account contents) is visible to the referring affiliate for their referrals.
- No advertising trackers. We do not use advertising pixels or cross-site tracking on our website or in the product, and we do not sell prospect or campaign data to third parties. Our analytics (a privacy-oriented, cookieless pageview tool) measures usage of our site and product as a service provider to us.
- Legal: where required by law, legal process, or to protect rights, safety, or the integrity of the Service.
- Business transfers: in a merger, acquisition, or asset sale, with notice before your data becomes subject to a different policy.
7. AI and Automated Processing
The Service is built on AI. What that means for your data:
- Your inputs and campaign content are processed by third-party AI model providers under agreements restricting use to providing services to us; we select providers that do not train their generally available models on our customers' data.
- We may use aggregated, de-identified data to improve the Service. We do not use your identifiable business information or campaign content to train models made available to other customers without your consent.
- Automated selection: the Service uses automated processing to select and prioritize prospects matching a customer's target profile. This affects whether a prospect receives marketing email; it does not produce legal or similarly significant effects on any individual. Prospects may object at any time (Section 4).
8. Retention
- Customer data: retained while your account is active. After your subscription ends, your data remains exportable for 30 days (and your account reactivatable), after which we delete it within 90 days of termination.
- Prospect data: retained while relevant to providing the Service, refreshed against sources, and deleted or anonymized when no longer needed or upon a valid objection or deletion request.
- Suppression records: retained indefinitely, in hashed form where feasible — this is deliberate and necessary to keep honoring opt-outs.
- Exceptions: records required for legal, tax, accounting, or dispute purposes; and aggregated, de-identified data, which may be retained indefinitely.
9. Security
We use industry-standard safeguards including encryption in transit (TLS) and at rest, access controls, logging, and periodic security review. No system is perfectly secure; if a personal data breach affects you, we will notify affected customers without undue delay and, where SQUIB is the controller, notify supervisory authorities and individuals as required by applicable law.
10. International Transfers
We are a U.S. company; data is processed in the United States and in countries where our subprocessors operate. For transfers of EEA/UK personal data, we rely on appropriate safeguards including the European Commission's Standard Contractual Clauses and the UK Addendum/IDTA, and assess transfers as required. Details are available in our DPA.
11. Your Rights
Everyone (customers and prospects): you may request access to, correction of, or deletion of your personal data; object to or ask us to restrict processing; request portability; and withdraw consent where processing is based on consent — by emailing support@squibb.ai. We respond within 30 days (or sooner where law requires). We may need to verify your identity; we will not discriminate against you for exercising rights.
EEA/UK: you also have the right to lodge a complaint with your supervisory authority (in the UK, the ICO).
U.S. state rights (California and other states with comprehensive privacy laws): you have rights to know/access, delete, correct, and opt out of "sale"/"sharing" and targeted advertising. In the preceding 12 months we have collected the categories of personal information described in Sections 2–3, from the sources and for the purposes described there, and disclosed them to the categories of recipients in Section 6. We do not currently sell personal information or "share" it for cross-context behavioral advertising as those terms are defined under applicable state laws; if that ever changes, we will update this policy first and provide the required opt-outs, including honoring Global Privacy Control signals. We do not knowingly sell or share the personal information of anyone under 16. You may use an authorized agent to submit requests.
12. Children
The Service is for business use by adults. We do not knowingly collect data from anyone under 18; if we learn we have, we will delete it.
13. Third-Party Links and Connected Services
The Service and our website may link to or integrate with third-party services (including domains and mailboxes you connect). Their practices are governed by their own privacy policies.
14. Changes
We will notify you of material changes by email or in-platform notice at least 30 days before they take effect. The "Last Updated" date reflects the current version.
15. Contact
SQUIB LLC, 30 N Gould St Ste R, Sheridan, WY 82801 · support@squibb.ai