This Privacy Policy explains how Sumora (“Sumora”, “we”, “us”) collects, uses, and shares information when you use our lead-generation and outreach platform at trysumora.comand its subdomains (the “Service”). By using the Service, you agree to this policy.
Who we are
Sumora is a B2B software product that helps businesses discover potential customers (“leads”), and manage outreach across channels such as LinkedIn, Instagram, and email. Our customers are businesses and their team members who operate their own outreach through the Service.
Information we collect
- Account information. When you sign up, our authentication provider Clerk collects your name, email address, profile image, and, if you sign in with Google or X (Twitter), the basic profile those providers share. We use this to create and secure your account.
- Business and workspace data. Information you add about your business, campaigns, message templates, and settings.
- Lead data. Contact and professional information about potential customers that you research, import, or generate through the Service (for example, name, job title, company, and public professional profile). You are responsible for having a lawful basis to process this data.
- Connected accounts. If you connect a LinkedIn, Instagram, or email account, we store the credentials and tokens needed to send and receive messages on your behalf, and the message content and delivery status of those conversations.
- Usage and device data. Log data, IP address, browser type, and product analytics used to operate, secure, and improve the Service.
- Payment data. If you subscribe to a paid plan, our payment processor handles your card details directly. We do not store full card numbers.
How we use information
- To provide, operate, and secure the Service and your account.
- To generate leads, qualify them against your ideal-customer profile, and draft and send outreach that you review and approve.
- To provide support and respond to your requests.
- To detect, prevent, and address fraud, abuse, and security issues.
- To analyze and improve the Service and develop new features.
- To comply with legal obligations.
We do not sell your personal information, and we do not use your business or lead data to train third-party AI models.
How outreach and AI work
Sumora uses AI models (via Google Vertex AI) to help research leads and draft messages. Outreach messages are queued for your review and are only sent on your instruction and through the accounts you connect. You are responsible for the content you send and for complying with the terms of the platforms you connect (including LinkedIn, Instagram, and email providers) and with applicable anti-spam and data-protection laws.
Sharing
We share information only with:
- Service providers that operate the Service on our behalf, including Clerk (authentication), Neon (database hosting), Cloudflare (hosting and delivery), Google Vertex AI (AI models), and our payment processor. They may only use the data to provide services to us.
- Platforms you connect (such as LinkedIn, Instagram, and email providers), to the extent needed to carry out the actions you request.
- Legal and safety recipients, when required by law or to protect rights, safety, and the integrity of the Service.
- Business transfers, if Sumora is involved in a merger, acquisition, or sale of assets.
Data location and retention
Our database is hosted in the United States. We retain your information for as long as your account is active and as needed to provide the Service. We delete or anonymize data within a reasonable period after you close your account or request deletion, except where we must retain it to meet legal obligations.
Security
We use technical and organizational measures to protect your data, including tenant isolation so each workspace can only access its own data, encrypted connections, and scoped access controls. No method of transmission or storage is completely secure, but we work to protect your information.
Your rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights, contact us at hi@trysumora.com. If you are a lead whose data a Sumora customer holds, please contact that customer, who controls that data; we will assist them as their processor.
Children
The Service is for business use and is not directed to anyone under 18. We do not knowingly collect data from children.
Changes
We may update this policy from time to time. If we make material changes, we will update the date above and, where appropriate, notify you.
Contact
Questions about this policy or your data? Email us at hi@trysumora.com.