Privacy notice

Who is responsible

The controller is Stanislau Bublik, trading as MONO Live, al. 1 Maja 5/9a, 90-717 Łódź, Poland, tax ID (NIP) 7272896439. For any question about your data, write to human@replies.live.

Visiting the website

To deliver pages and keep them secure, our servers process technical data such as your IP address, browser type, the page you request and the time. We use no analytics and no advertising trackers. Legal basis: our legitimate interest in a working and secure website (Art. 6(1)(f) GDPR).

Cookies

We set only the cookies the site needs: one remembers the language of the pages you open (for one year), and if you sign in, session cookies keep you signed in. In the product, your browser also stores your display theme and a working copy of your workspace, which is cleared when you sign out. None of this is used for tracking or advertising.

Applying for the pilot

We store the answers you send: your name and role, company and website, what you sell, who your customers are, deal size and revenue ranges, how you handle leads, and your contact details. A rule-based score helps us sort applications; a person reads every application and makes the decision. Our team is notified about each new application in Telegram. To prevent spam, we keep a keyed hash of your network address, not the address itself, for one hour.

Legal basis: steps you asked us to take before a possible agreement (Art. 6(1)(b) GDPR) and our legitimate interest in handling applications and preventing abuse (Art. 6(1)(f) GDPR).

Using the product

For client accounts we process sign-in data (your email, or your Google account if you sign in with Google) and the work you do in the product: target customer descriptions, companies, notes, letter drafts and settings. Legal basis: providing the service under our agreement (Art. 6(1)(b) GDPR).

People we research for outreach

Signal Prospector helps businesses find companies that have a reason to hear from them. For this it collects business information from public sources: company websites, search results, news, public company registries, job postings, public social media posts, ad libraries and public professional profiles. It may also look up and verify the work email address of a relevant decision maker. This can include your name, job title, employer, public posts and work contact details. We do not intentionally collect sensitive data. The product never sends messages by itself: our clients review every draft and send it with their own tools.

If a public professional profile or directory listing shows a photo or a company logo, we keep a copy so our client can recognise the person or company in the product. It is shown only to that client and deleted when the person asks not to be contacted.

Legal basis: the legitimate interest of our clients and ours in business-to-business outreach (Art. 6(1)(f) GDPR).

You can object at any time by writing to human@replies.live. We will then stop, delete your data and keep only a minimal note so that you are not contacted again.

Service providers

These providers receive only the data they need for their task:

• Vercel: website hosting and servers (servers in Ireland, company in the USA)
• Supabase: database and sign-in (data stored in Ireland)
• Anthropic: AI analysis of public company information and letter drafts (USA)
• Apify: collection of public web pages and search results (Czech Republic)
• Icypeas: work email lookup (France)
• Findymail: work email lookup
• Hunter: work email lookup
• Bouncer: email address verification (Poland)
• PredictLeads: public job openings of companies
• Google: sign-in with a Google account, if you choose it
• Telegram: notifications to our team about new pilot applications

Some of these providers are based outside the European Economic Area. Where their terms provide for it, transfers rely on the EU–US Data Privacy Framework or on the European Commission's standard contractual clauses.

How long we keep data

• Pilot applications: up to 12 months after our last contact, unless we start working together.
• Client accounts: while the account is active and up to 90 days after it is closed.
• Research data: as long as the client's campaign needs it; we review it at least once a year and delete what is no longer needed.
• Spam-protection hashes: one hour. Server logs: a few days.

Your rights

You can ask us for access to your data, correction, deletion, restriction of processing and a copy in a portable format, and you can object to processing based on legitimate interests. Write to human@replies.live; we reply within one month.

You can also lodge a complaint with a data protection authority: in Poland, the President of the Personal Data Protection Office (UODO, uodo.gov.pl), or the authority where you live or work.

Changes

We update this notice when our processing changes; the date at the top shows the current version. If language versions differ, the English version prevails.