Privacy policy

Who is responsible

Newsletters and businesses use Closed Loop Enrich to learn which companies and roles their subscribers come from. The business that imports its list decides what is enriched and why: it is the controller of its subscribers’ data. Closed Loop processes that data only on its behalf, under the data processing terms below (see the Data processing page).

If you are on such a list, the business that sends you its emails is the first one to ask. You can also write to us at privacy@getclosedloop.io, or stop all enrichment of your address yourself at https://enrich.getclosedloop.io/remove.

What Enrich looks at

• Only public information anyone can see without logging in: public professional profiles and company websites.
• Enrich never logs in to any site and never uses a LinkedIn (or any other) session cookie. Lookup tools that need one are never run.
• It never reads private accounts, private messages or anything behind a login.

What it keeps

Derived fields only: company, industry, company size, job title, seniority band, job function, country and the public profile link, and a grade (A to D) with the reasons for it. These are stored with the contact in the customer’s workspace and, if the customer asks, written to its own email platform as custom fields.

The answer a lookup returns is kept for 30 days so the same address is never paid for twice. After that a daily job reduces it to company, seniority band, job function and country, and drops the lookup provider’s run references.

Contacts in the EU, the EEA and the UK

For these contacts Enrich keeps company-level fields only (company, industry, company size, seniority band, job function and country): no name, title, location or profile link, in the contact or in the lookup history. A customer gets full fields for them only after recording that it has documented a legitimate-interest assessment, and every such record is kept with who made it and when.

No shared people database

Every lookup answer stays in the workspace that ran it. Closed Loop does not build a database of people across customers and does not sell or share personal data. Only non-personal company data (a company website’s title and description, whether a domain belongs to a mail provider) is reused between workspaces.

AI grading

A customer can grade its contacts against a description of its ideal customer. The model sees the derived professional fields, the address’s company domain and the company website’s description. It never sees the email address or the name.

The grade helps the customer decide whom to send which offer. It is not a decision with legal or similarly significant effects on anyone (GDPR Art. 22).

How to opt out

• The remove-me form (https://enrich.getclosedloop.io/remove) puts a one-way hash of your address on a suppression list. Every run, for every customer, skips it from then on, including lists imported later.
• It also deletes what was already derived about you (a match, a grade) in every workspace, and stops any pending write of those fields to an email platform.
• The business whose list you are on can delete you from Enrich entirely: every list, every lookup answer and grade about you, at once.
• For a copy of your data, a correction, an objection or a complaint, write to privacy@getclosedloop.io. We answer within 30 days. You can also complain to your data protection authority.

Where it is processed

Enrich runs on the sub-processors listed on the Sub-processors page, in the United States. Transfers from the EU, the EEA and the UK are covered by the European Commission’s Standard Contractual Clauses and the UK Addendum.