Legal

Privacy Policy

Effective date: 5 May 2026  ·  Compliant with GDPR / AVG (Dutch implementation)

1. Data Controller

The data controller responsible for the processing of your personal data is:

Beckon
Amsterdam, the Netherlands
KVK registration in progress
Email: beckon@polsia.app

For questions about this Privacy Policy or our data processing practices, contact us at the email above.

2. Personal Data We Collect

2.1 Account Data

When you register for Beckon, we collect:

  • Email address
  • Name (if provided)
  • Password (stored as a bcrypt hash — we never store plain-text passwords)
  • Subscription status and billing history

2.2 Usage Data

As you use the Service, we collect:

  • Prospect research queries (the ICP descriptions and search criteria you enter)
  • Outreach emails generated and their status
  • Session tokens (stored in your browser cookie, linked to your account)
  • Log data: IP address, browser type, pages visited, timestamps

2.3 Prospect Data

When you use Beckon to find and reach out to prospects, the platform processes personal data about those individuals (names, email addresses, company names, LinkedIn URLs, websites). You provide this data and you are the controller of it — Beckon processes it on your behalf as a data processor.

2.4 Payment Data

Payment processing is handled by our payment service provider. We do not store full credit card numbers or card CVV codes. We receive and store limited payment metadata (transaction IDs, subscription status, payment method type).

2.5 Waitlist Data

If you signed up for the Beckon waitlist before the Service launched, we stored your email address to notify you of availability.

3. Legal Basis for Processing

Under GDPR Article 6, we process your personal data on the following legal grounds:

Processing purpose Legal basis
Providing the Service (account, sessions, feature access) Performance of a contract (Art. 6(1)(b))
Processing subscription payments Performance of a contract (Art. 6(1)(b))
Sending transactional emails (account confirmations, invoices) Performance of a contract (Art. 6(1)(b))
Security, fraud prevention, abuse detection Legitimate interests (Art. 6(1)(f))
Service improvement and analytics Legitimate interests (Art. 6(1)(f))
Legal obligations (tax records, dispute resolution) Legal obligation (Art. 6(1)(c))
Marketing emails (product updates, new features) Consent (Art. 6(1)(a)) — opt-in only

4. How We Use Your Data

We use your personal data to:

  • Create and manage your account and subscription
  • Provide the AI-powered prospecting and outreach features
  • Process payments and send billing receipts
  • Send service notifications (account changes, upcoming renewals, policy updates)
  • Detect and prevent fraud, abuse, and violations of our Terms of Service
  • Improve and develop the Service (in aggregate, anonymised where possible)
  • Comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising purposes on third-party platforms.

5. Third-Party Processors

We share data with the following categories of third-party processors, each under appropriate data processing agreements:

Category Purpose Data shared
Cloud hosting (Render) Application and database hosting All application data
Database hosting (Neon) PostgreSQL database All structured data
Payment processor (Stripe) Subscription billing Email, payment details
AI provider AI content generation (prospect research, email drafting) Prompts, ICP descriptions, prospect info you submit
Email delivery Transactional emails Email address, message content

We only engage processors who provide sufficient guarantees about their GDPR-compliant data protection measures, and we have or will have Data Processing Agreements in place with each.

5.1 International Transfers

Some of our processors are based outside the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure it is protected by appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) as required by GDPR Chapter V.

6. Data Retention

We retain your personal data for as long as necessary to provide the Service and fulfil our legal obligations:

Data type Retention period
Account data (email, name) For the duration of the subscription + 30 days after termination, unless a longer period is required by law
Prospect and outreach data For the duration of the subscription + 30 days after termination
Billing records 7 years (Dutch tax law requirement)
Session tokens 30 days, or until logout
Log data (IP, access logs) Up to 90 days
Waitlist data Until the waitlist is processed or you request deletion

You may request earlier deletion under Section 7 (Your Rights) below.

7. Your Rights Under GDPR/AVG

As a data subject under GDPR, you have the following rights:

Right of access (Art. 15)

You can request a copy of the personal data we hold about you.

Right to rectification (Art. 16)

You can request that we correct inaccurate or incomplete data.

Right to erasure (Art. 17)

You can request deletion of your personal data ("right to be forgotten"), subject to any legal retention requirements.

Right to restriction (Art. 18)

You can request that we limit how we process your data in certain circumstances.

Right to data portability (Art. 20)

You can request your data in a structured, commonly used, machine-readable format.

Right to object (Art. 21)

You can object to processing based on legitimate interests. We will stop processing unless we can demonstrate compelling legitimate grounds.

Right to withdraw consent (Art. 7)

Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

How to exercise your rights: Email us at beckon@polsia.app with your request. We will respond within 30 days. We may request verification of your identity before processing the request.

Right to complain

You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl, or the supervisory authority in your EU country of residence.

8. Cookies and Tracking

8.1 Session Cookie

We set a single functional cookie (beckon_session) when you log in. This cookie is strictly necessary to authenticate your session. It expires after 30 days or when you log out. No consent is required for this cookie under the Dutch Telecommunicatiewet (strictly necessary exemption).

8.2 Analytics

We use Polsia's internal analytics beacon to measure basic page views and conversion events. This sends minimal data (page URL, event type) for internal product analytics. No third-party advertising trackers are used.

8.3 No Advertising Cookies

We do not place advertising or retargeting cookies. We do not share your data with ad networks.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:

  • Passwords stored as bcrypt hashes (never plain text)
  • All data transmitted over HTTPS/TLS
  • Database access restricted to application processes only
  • Session tokens randomly generated with cryptographic entropy

No system is perfectly secure. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, we will notify you and the Dutch Data Protection Authority as required by GDPR Article 33/34.

10. Children's Privacy

The Service is intended for business use by adults. We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us at beckon@polsia.app and we will delete it promptly.

11. Beckon as Data Processor (Prospect Data)

When you use Beckon to research and contact prospects, Beckon processes prospect personal data on your behalf. In this relationship:

  • You are the data controller — you determine the purpose and means of processing prospect data
  • Beckon is the data processor — we process prospect data only on your documented instructions (i.e., the prospect research and outreach you initiate)

You, as controller, are responsible for ensuring you have a lawful basis to contact the individuals you target. This includes complying with GDPR, the Dutch Telecommunicatiewet, and any anti-spam laws applicable in the prospect's jurisdiction.

Beckon processes prospect data only for the purpose of providing the Service to you, and will not use that data for any other purpose.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the effective date at the top of this page. We encourage you to review this policy periodically.

Continued use of the Service after the effective date of an updated Privacy Policy constitutes acceptance of the changes.

13. Contact and DPO

For any privacy-related questions, data subject requests, or concerns, contact us at:

beckon@polsia.app
Beckon, Amsterdam, the Netherlands

We aim to respond to all privacy requests within 30 days. If you are not satisfied with our response, you have the right to contact the Autoriteit Persoonsgegevens (Dutch Data Protection Authority) at autoriteitpersoonsgegevens.nl.