Privacy Policy

Last updated: 25 September 2026

1. Who we are

0effort FZ-LLC (a YoungCaesar FZ LLC company), Anwa, Al Mina St, Dubai Maritime City, Dubai, United Arab Emirates (“0effort”, “we”, “us”), provides an outbound sales platform that sources leads, runs multichannel outreach (email, LinkedIn, voice) and manages replies and meetings on behalf of its users. 0effort FZ-LLC is the controller of your account data and acts as your processor for prospect data (see Section 4). This policy explains what data we process and why.

2. Data we process

• Account data — your name, email address and authentication credentials when you register.
• Connected accounts — mailboxes, LinkedIn seats and phone numbers you connect are used solely to send and receive the outreach you configure.
• Prospect data — contact and company records you import, or that the platform sources at your request, processed on your behalf and under your instructions.
• Usage data — application logs needed to operate, secure and improve the service.
• Advertising measurement — if you arrive from one of our ads, we store the campaign parameters of that visit (UTM tags, click identifiers) and may use the Meta Pixel and Meta Conversions API to measure signups attributable to advertising. Email addresses shared for this purpose are hashed before transmission. This runs only when advertising measurement is enabled.

3. How we use it

We use data exclusively to provide the service: sending and receiving messages you configure, scoring and enriching prospects you target, classifying replies, booking meetings and showing you analytics. We do not sell personal data.

4. Legal basis & your rights (GDPR)

Where GDPR applies, we process account data to perform our contract with you and prospect data as your processor. Data subjects may request access, correction, deletion or export of their personal data. Every outreach email we send includes an unsubscribe mechanism, and suppression lists are enforced across all channels.

5. Retention & deletion

Account and prospect data are retained while your account is active. You can delete contacts, campaigns or your entire workspace at any time, after which the data is removed from production systems within 30 days.

6. Security

Data is encrypted in transit, access is restricted to authenticated sessions, and connected-account credentials are stored using industry-standard secret management.

7. Subprocessors

We rely on these subprocessors strictly to deliver the features you use:

• Hosting — DigitalOcean (Frankfurt, EU)
• Transactional email — Resend (EU region)
• Mailbox providers — Google Workspace, Zapmail, Mailin.ai
• Telephony — Vapi, Telnyx
• AI models — MiniMax, OpenAI
• Lead sourcing — Apify
• LinkedIn connectivity — Unipile
• Mailbox warm-up — ReachInbox
• Payments — Stripe
• Error monitoring — Sentry
• Advertising measurement — Meta Platforms (only when advertising measurement is enabled)

Several of these providers are based outside the EU (for example in the United States), so data used by the features they support may be processed outside the EU.

A current list is available on request.

8. Contact

For privacy questions or data-subject requests, contact us through your account workspace or the support channel listed in the application.