Privacy Policy

1. Introduction

Centralyse, Inc. ("the Company," "we," "us," or "our") operates the website centralyse.com and the Centralyse sales-intelligence platform (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the rights you have over your data. It applies to information collected through the Service and through direct communications with us.

Centralyse is an AI agent that helps B2B sales teams map account relationships, track deal signals, and prioritize outreach. When a customer organization connects their CRM or authorizes calendar and email metadata access, the Company processes that data as a service provider on the customer's behalf. This policy also describes how we handle information submitted directly to us through our marketing website.

The Company is based at 500 Boylston Street, Suite 2400, Boston, MA 02116. Questions can be sent to [email protected].

2. Information We Collect

2.1 Information You Provide

When you submit a contact form, request early access, or communicate with us directly, we collect:

• Contact details: name, work email address, phone number;
• Company information: employer name, role, team size;
• The content of messages and inquiries you send us.

2.2 Customer-Connected Data (Data Processor Role)

When a customer organization subscribes to the Centralyse platform and connects their CRM or grants OAuth access to calendar and email metadata, the Company processes that data strictly to deliver the Service. The categories of data we process in this role include:

• CRM contact and account records from Salesforce or HubSpot: names, job titles, email addresses, phone numbers, company affiliations, and deal-stage information;
• Email and calendar metadata: sender/recipient addresses, meeting timestamps, subject lines (but not full email body content unless the customer explicitly enables deeper message-content analysis), and cadence signals such as reply frequency and meeting-accept rates;
• Relationship-signal data derived by the platform: influence scores, engagement trend indicators, and relationship-health metrics computed from the above inputs;
• Usage data: which accounts, contacts, and signal types are being reviewed, and how reps interact with nudge recommendations.

In this capacity the Company acts as a data processor. The subscribing organization remains the data controller responsible for the lawfulness of transferring their contacts' data to the Service. We do not use customer-connected CRM data or email/calendar metadata to train machine-learning models, develop competing products, or share with third parties beyond the sub-processors described in Section 4.

2.3 Information Collected Automatically (Marketing Website)

When you visit centralyse.com, we automatically collect limited technical information:

• IP address and approximate location at city/region level;
• Browser type, operating system, and device class;
• Pages visited, referring URLs, and time on page;
• Cookie and similar identifiers (see Section 5 and our Cookie Policy).

2.4 We Do Not Knowingly Collect Children's Data

centralyse.com is a B2B platform not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact [email protected] and we will delete it.

3. How We Use Information

3.1 Marketing Website and Prospect Inquiries

We use information you submit through the marketing website to:

• Respond to inquiries and evaluate early-access requests;
• Send product updates and (where required by applicable law, with your consent) marketing communications;
• Detect and prevent fraud or abuse;
• Comply with legal obligations.

3.2 Customer Platform Data

We use customer-connected CRM and email/calendar data solely to:

• Build and maintain relationship maps and signal timelines for each account;
• Generate nudge recommendations for sales reps;
• Provide deal-health dashboards and alerts;
• Maintain, troubleshoot, and improve the Service for the subscribing customer.

We do not use this data for any purpose outside of delivering and improving the Service to the customer who provided it.

3.3 No Sale of Personal Information

We do not sell personal information for monetary value. Where applicable state law treats certain advertising arrangements as a "sale" or "sharing," see your state's section below.

4. Sharing of Information

We share personal information only with:

• Service providers and sub-processors acting on our behalf (for example, cloud hosting infrastructure, transactional email delivery, and product analytics) under contractual terms that limit their use of data to performing services for us;
• The subscribing customer organization, in the context of delivering relationship-intelligence reports and nudge feeds they have requested;
• Authorities, when required by law or to protect the rights, safety, or property of the Company or others;
• A successor entity in the event of a merger, acquisition, or asset sale, subject to this Policy and applicable law.

We do not sell personal information to third parties and do not share it for cross-context behavioral advertising.

5. Cookies and Tracking

We use cookies and similar technologies on the marketing website to operate the site, remember preferences, and measure usage. For the full list, lifetime, and your opt-out options, see our Cookie Policy.

6. Data Retention

We retain personal information only as long as needed for the purposes described in this Policy, to comply with legal or accounting obligations, and to resolve disputes.

• Prospect and marketing-list contacts are purged after 24 months of inactivity;
• Customer platform data is retained for the duration of the subscription and deleted within 60 days of contract termination, unless the customer requests earlier deletion or applicable law requires a longer period;
• Server access logs are retained for 90 days and then aggregated or deleted.

Customers with specific data-retention requirements (for example, archiving obligations under applicable financial-services or compliance regulations) should contact us at [email protected] to discuss custom retention configurations.

7. Security

We use administrative, technical, and physical safeguards designed to protect personal information. These include TLS encryption in transit, restricted-access databases with least-privilege access controls, and logging of access to production data systems. OAuth tokens for CRM and calendar integrations are stored encrypted and are scoped to the minimum permissions required to deliver the Service. No system is perfectly secure; we cannot guarantee absolute security and encourage customers to use strong credentials and monitor their connected-app authorizations.

8. Your General Rights

Depending on your jurisdiction, you may have rights including access to, correction of, and deletion of personal information we hold about you, as well as the ability to restrict or object to certain processing. To make a request, email [email protected] with a description of your request and enough information to verify your identity. We will respond within the timeframe required by applicable law.

If you are an employee or contact of a Centralyse customer and your data was processed through a customer's CRM integration, please contact the subscribing organization directly, as they are the data controller for that data.

9. Massachusetts Residents

Massachusetts does not currently have a comprehensive consumer privacy statute. As a matter of policy, the Company extends the following baseline rights to all U.S. residents regardless of state of residence.

9.1 Baseline Rights

• Right to Know: request the categories of personal information we have collected about you.
• Right to Delete: request deletion of personal information you have provided.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out of Marketing: unsubscribe from marketing emails or opt out via the unsubscribe link in any marketing message.

9.2 How to Exercise

Email [email protected] with a description of your request and enough detail for us to verify your identity. We respond within 45 days.

9.3 Sector-Specific Rights

If you are protected by federal sector laws (for example, GLBA or other financial-services statutes), those laws may give you additional rights with respect to data covered by them.

9.4 California Visitors

If you are a California resident, you may also exercise the rights granted under the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA"), including the right to know, the right to delete, the right to correct, and the right to opt out of sale or sharing of personal information. The Company does not sell personal information and does not share personal information for cross-context behavioral advertising.

To submit a CCPA or CPRA request, email [email protected] with the subject line "California Privacy Request."

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by a new "Last updated" date at the top of this page and, where appropriate, a notice through the Service. Continued use of the Service after a material change constitutes acceptance of the updated Policy.

11. Contact

Questions, requests, or complaints about this Privacy Policy can be sent to: