If CupidKnows emailed you

The controller of your data for CupidKnows' own emails is Cupid Solutions, a Danish business (CVR 43973746) in Aalborg, Denmark. Cupid Solutions runs CupidKnows and also trades as Cupid Reach.

This page is for the emails CupidKnows sends for itself. When we email you on behalf of one of our clients, the client named in the email is the controller and its own notice applies; how we handle that is in our privacy notice at cupidknows.com/privacy (section 4).

Questions and requests: reply to any email we sent you, or ask in the chat on this website. Each request is recorded and answered within one month.

Your role fits what CupidKnows offers, so we contact people in such roles at companies that may need it. We do this under our legitimate interest in offering a relevant service to businesses (GDPR and UK GDPR Art. 6(1)(f)), and only in markets where business cold email is allowed without prior consent.

AI models help research your company and write our emails; a person approves each campaign and its sample emails before anything is sent.

• Your name, work email, job title, company, public profile link and location, and public information about your role and company.
• When we read them: your recent public LinkedIn posts (up to 5: text and date) and a short note of your writing style. Posts that touch health, religion, politics or similar, and for now any post not written in English, are discarded unread and never kept.
• The emails written and sent to you, and your replies.

• Business contact data from Apollo, found through lead-finder tools run on Apify. Your work address is checked with an email-verification service run on Apify.
• Your company's website, its public pages and news about it.
• Your recent public LinkedIn posts, when we read them (through a tool run on Apify).

These services process your data for us:

• Lovable Cloud (managed Supabase, EU): hosting and our database.
• Smartlead (521 Products Pty Ltd, Australia; hosted on Amazon Web Services in Sydney, per its data processing agreement): sends the emails and holds the lead lists, the emails written for each person and the reply threads.
• Google (Google Workspace): the mailboxes the emails are sent from and the replies arrive in.
• Cheap Inboxes (United States): registers our sending domains and sets up the Google Workspace mailboxes on them.
• OpenRouter (US), and the model providers it reaches, Anthropic and OpenAI (US): the AI models that research and write. We ask OpenRouter to route only to providers that don't keep what they are sent for their own use or train on it.
• Apify (Czech Republic, with servers that can be outside the EU): the lead-finder tools, page and news reading, reading public LinkedIn posts and email verification.
• Apollo (US): the business contact data, used under licence.

Where your data goes outside the EU/EEA or the UK, the transfer relies on the EU-US Data Privacy Framework (and its UK extension) where the provider is certified, or on the standard contractual clauses in our agreement with it. Smartlead's data processing agreement uses the EU standard contractual clauses and the UK Addendum. For Cheap Inboxes, the agreement and the transfer basis are still to be signed.

• If you don't reply: deleted 12 months after the last email of the sequence, here and in the sending tool.
• The text of your LinkedIn posts, and the notes written from them: deleted after 30 days.
• If you reply: the full email as received (quoted thread, signature) goes after 30 days, and your reply stays with your record.
• If we found you but never emailed you: deleted 30 days after we collected it.
• If you object: only your address and the reason, on a do-not-contact list kept for as long as we send email, so the objection keeps working.

You can object at any time, free of charge, to our use of your data for these emails. Reply “no” or “stop” to any of our emails and we stop: we then keep only your address and the reason on our do-not-contact list, so you aren't emailed again.

You can ask for a copy of your data (also in a portable form), ask us to correct it, delete it or limit how we use it. Reply to our email or write to us (section 1): we answer within one month.

You can complain to us first: reply to any of our emails or write to us (section 1), and we acknowledge a complaint within 30 days. You can also complain to a data protection authority:

• in Denmark, where we are established: Datatilsynet, the Danish data protection authority, at datatilsynet.dk;
• in the UK: the Information Commissioner's Office (ICO), ico.org.uk;
• or the authority of the country where you live or work.