Privacy Policy

Last updated: 19 July 2026

This policy is a starting template. Have it reviewed by a solicitor and complete the details in src/config/site.ts (registered entity, address, ICO registration) before relying on it.

1. Who we are

Kaizen Alerts Ltd (“Kaizen Alerts”, “we”, “us”) provides a job-alert and business-development platform for UK recruitment agencies. We are the data controller for the personal data described in this policy.

Contact: privacy@kaizenalerts.com. Registered address: United Kingdom.

2. The data we collect

Account data — your name/agency name, work email, hashed password, plan, role and team membership.

Prospect & contact data — the companies and criteria you choose to track, the roles our scanner surfaces from public job sources, and — only when you choose to reveal it — the name, job title and business email of a decision-maker, sourced from our data provider (Apollo).

Integration data — if you connect Outlook, we store access/refresh tokens (encrypted); if you subscribe, we store your Stripe customer and subscription identifiers. We do not store card details.

Usage & technical data — alerts, triggered roles, emails you send through the platform, and standard server logs (IP address, browser, timestamps) plus cookies (see our Cookie Policy).

3. How and why we use it (lawful bases)

To provide the service (performance of a contract) — running your account, scanning for roles, surfacing contacts and generating pitches you request.

Business-development contact data (legitimate interests) — we surface the business contact details of decision-makers so recruitment consultants can make relevant B2B approaches. We balance this against those individuals’ rights; they may object at any time (see section 6). This data relates to people in their professional capacity.

Payments (contract / legal obligation) — billing and tax records via Stripe.

Cookies & advertising (consent) — non-essential cookies, including ads shown to free-plan users, are used only where you consent.

Your own outreach. When you email a prospect through the platform, you are the controller of that communication and are responsible for complying with UK GDPR and PECR (including any required lawful basis and opt-outs) for the messages you send.

4. Who we share it with (sub-processors)

We use trusted providers to run the service, each under a data-processing agreement:

  • Vercel — application hosting
  • Neon — database hosting
  • Resend — transactional email
  • Apollo.io — decision-maker contact data
  • Anthropic — AI pitch and contact-targeting generation
  • Microsoft — sending email from your connected Outlook mailbox
  • Stripe — payment processing
  • Reed, Adzuna and applicant-tracking systems — public job-listing data
  • Google AdSense — advertising shown to free-plan users (with consent)

We do not sell your personal data.

5. International transfers

Some providers are based outside the UK (for example in the US). Where personal data is transferred internationally, we rely on UK adequacy regulations or the International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses, with appropriate safeguards.

6. Your rights

You (and individuals whose contact data we hold) have the right to access, rectify, erase, restrict or object to processing, and to data portability. To exercise any of these, email privacy@kaizenalerts.com.

If a decision-maker asks us to stop processing or delete their details, we will remove them from our systems. You can also complain to the UK Information Commissioner’s Office (ico.org.uk).

7. Retention

We keep account data for as long as your account is active, and for a reasonable period afterwards to meet legal and accounting obligations. Revealed contact data is retained while relevant to your business development and removed on request or when your account is deleted. Outlook tokens are held until you disconnect.

8. Security

Passwords are hashed (bcrypt), OAuth tokens are encrypted at rest (AES-256-GCM), and all traffic is encrypted in transit (HTTPS). Access to production data is restricted.

9. Changes

We may update this policy; we’ll change the “last updated” date above and, for material changes, notify you.