Privacy Policy

1. Who we are

reboundQ ("we", "us") operates the website reboundq.com and provides an inbound pipeline system that helps B2B companies identify, qualify, nurture, and score website visitors for sales follow-up. This policy explains what personal data we collect, why, and the rights you have over it. For any privacy-related question or request, contact us at hello@reboundq.com.

2. Data we collect

• Data you give us directly: name, company, email address, and message contents when you submit our contact form or request a signal audit.
• Website usage data: pages visited, referring source, device and browser information, collected to operate and improve the site.
• Service data processed on behalf of customers: when we run pipeline operations for a customer, we process business contact data (such as name, role, company, and engagement history) as a processor under that customer's instructions.

We do not use scraped email lists, and we verify consent before any contact enters automated sequences. If a record is in doubt, we don't add it.

3. How we use data

• To respond to your enquiries and deliver the services you request.
• To operate, secure, and improve our website and product.
• To send service communications you have opted into. You can unsubscribe at any time.
• To comply with legal obligations.

We do not sell personal data, and we do not share it for cross-context behavioral advertising.

4. Legal bases (GDPR)

Where the EU or UK GDPR applies, we process personal data on the basis of: consent (e.g. opt-in communications), performance of a contract (e.g. delivering services you request), and legitimate interests (e.g. operating and securing our website) balanced against your rights.

5. Sharing and processors

We share data only with service providers who process it on our behalf under contract, such as hosting, email delivery, and CRM platforms (for example Netlify, Resend, and the CRM systems our customers connect, such as HubSpot or Salesforce). We require processors to protect data to standards consistent with this policy. Where data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses.

6. Retention

We keep personal data only as long as needed for the purposes described above, then delete or anonymize it. Contact-form submissions are retained while we handle your enquiry and for a reasonable period afterwards.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict processing, and to withdraw consent at any time.

• GDPR (EU/UK): you may exercise the rights above and lodge a complaint with your supervisory authority.
• CCPA/CPRA (California): you may request to know, delete, or correct personal information we hold about you, and you will not be discriminated against for exercising these rights. We do not sell or share personal information as defined by the CCPA.

To exercise any right, email hello@reboundq.com. We will verify your request and respond within the timeframes required by applicable law.

8. Security

We use technical and organizational measures appropriate to the risk, including encryption in transit, access controls, and audit logging, to protect personal data against unauthorized access, loss, or misuse.

9. Changes to this policy

We may update this policy from time to time. We will post the revised version here with an updated date, and material changes will be highlighted on this page.