Draft template. Adapted for Namari as a starting point. Have it reviewed by a lawyer and complete the bracketed items before public launch.

Privacy Policy

Version 2026-07-08 · Effective 2026-07-08

1. Who we are

Namari ([NAMARI LEGAL ENTITY], [REGISTERED ADDRESS]) provides lead-handling, appointment-setting, and sales services to businesses. This policy explains what personal data we handle, why, and what rights you have. Questions: [PRIVACY CONTACT EMAIL, e.g. privacy@namari.com].

2. The two different roles we play

This is the most important part of this policy, because we handle two very different kinds of data:

  • Your data (we are the controller). Information about you as our client — your name, business email and phone, company details, onboarding answers, and billing contact. We decide how this is used, and this policy governs it.
  • Your leads’ data (we are the processor). The contact details and notes for the people in the lead lists you give us. That data is yours. We only act on your instructions, and our handling of it is governed by our Data Processing Agreement, not by this policy. You remain responsible for having a lawful basis to share it with us.

3. What we collect

  • Account & onboarding: company name, website, industry, contact name, email, phone, timezone.
  • Service configuration: your offer, process, qualifying criteria, agent instructions, business rules.
  • Tool access metadata: which CRM/dialer/calendar you use and the status of the access you granted. We do not collect or store your passwords.
  • Billing: billing contact and a payment-card token. Card numbers are handled by Stripe and never touch our servers.
  • Service records: results logged by agents (booked meetings, closed sales), invoices, and support correspondence.
  • Technical: IP address, browser/device information, and log data, used for security, abuse prevention, and rate limiting.

4. Why we use it

  • To provide the Services and assign and brief your dedicated agent.
  • To bill you accurately for outcomes and fees (contractual necessity).
  • To communicate about your account, results, and invoices.
  • To secure the platform, prevent abuse, and meet legal obligations.
  • With your consent where required, to send product or marketing updates. You can opt out at any time.

Where GDPR applies, our legal bases are performance of a contract, our legitimate interests in operating and securing the Services, consent (for marketing), and compliance with legal obligations.

5. Who we share it with

We do not sell personal data. We share it only with the service providers needed to run Namari, each bound by contract:

ProviderPurposeLocation
VercelWebsite and application hostingUnited States / global edge
SupabaseDatabase, authentication, and lead-file storage[SELECT YOUR REGION]
StripePayment processing and card storageUnited States / global
[EMAIL PROVIDER]Transactional email (receipts, notifications)[REGION]

We may also disclose data where legally required, or in connection with a merger or acquisition (with notice to you).

6. How long we keep it

  • Account and billing records: for the life of your account and then as required for tax and accounting purposes (typically [7] years).
  • Lead data you upload: deleted or returned within [30] days of your request or of your account closing, per the DPA.
  • Logs: typically [90] days.

7. Security

We use encryption in transit, access controls, and least-privilege access for agents. Lead files are stored in private storage. We never ask for or store your tool passwords — you invite our user instead, and you can revoke that access at any time. No system is perfectly secure, but we will notify you promptly if a breach affects your data.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, port, or restrict use of your personal data, to object to processing, and to withdraw consent. Under CCPA/CPRA you may request disclosure or deletion and are entitled not to be discriminated against for exercising those rights — and note that we do not sell or share personal data for cross-context behavioral advertising. To exercise any right, contact [PRIVACY CONTACT EMAIL]. If your request concerns lead data, we will refer you to our client, who controls it.

9. International transfers

Our providers may process data outside your country, including in the United States. Where required, we rely on Standard Contractual Clauses or another approved transfer mechanism.

10. Cookies

We use strictly necessary cookies to keep you signed in and to secure the site. [IF YOU ADD ANALYTICS OR AN ADVERTISING PIXEL, DESCRIBE IT HERE AND ADD A CONSENT BANNER — this is required in the EU/UK and recommended elsewhere.]

11. Children

The Services are for businesses. We do not knowingly collect data from anyone under 16.

12. Changes and contact

We may update this policy; we will change the version and effective date above and, for material changes, notify you. Contact: [PRIVACY CONTACT EMAIL], [NAMARI LEGAL ENTITY AND ADDRESS].