Our Privacy Policy

Last Updated: July 29, 2026

Thank you for being part of our community at Salesbot Labs, Inc., a Delaware corporation doing business as Bowtie ("Bowtie", "Company", "we", "us" or "our"). If you have any questions or concerns about this Privacy Policy or our practices with regard to your personal information, please contact us at privacy@getbowtie.ai.

When you visit our website www.getbowtie.ai and use our services, you may provide us with your personal information. In this Privacy Policy, we explain as clearly as possible what information we collect, how we use it, and what rights you may have in relation to it. Please take the time to read it carefully. If there are any terms in this Privacy Policy that you do not agree with, please discontinue use of our site, application, products, and services.

This Privacy Policy applies to all information collected:

• Through our website, www.getbowtie.ai (the "Website"), from our website visitors ("Website Users");
• Through our services, sales, marketing, or events (collectively, the "Services"), from our customers' representatives ("Business Contacts"); and
• Through Bowtie's product (the "Product") and through third-party sources such as LinkedIn, from potential contacts ("Leads"), where we act as the data controller of that information; that is, as the party that determines what personal data to collect and for what purposes.

Important note for Leads: This Privacy Policy does not apply to the processing of personal information that we handle on behalf of our customers. Our use of that information is governed by our agreements with those customers. If you interact with the Product through a Bowtie customer, or we have processed your information at the direction of a Bowtie customer, and you have questions about how and why your information is collected, the legal basis for processing, or requests regarding your information, please refer to that customer's privacy policy and direct your inquiries to that customer or its administrator.

What personal information do we collect?

Personal information you disclose to us

The personal information we collect depends on the context of your interactions with us. It can include the following:

From Website Users:

• Application data: your name, email, LinkedIn URL, phone number, and any other information you disclose on our Careers page.
• Contact form data: your first name, last name, business email, job title, phone number, preferred contact method, company size, message, referral code, and Internet Protocol (IP) address.

From Business Contacts:

• Business and personal contact data: your first and last name, email address, postal address, phone number, professional title, company name, and other similar contact data.
• Payment information: your payment card or ACH information.
• Transaction information: information about payments to and from you, and other details of products or services you have purchased from us.
• Marketing information: your preferences for receiving communications about our activities, events, and publications, and details about how you engage with our communications.
• Communications on third-party platforms: if you opt into the Gmail or Microsoft Outlook APIs as part of the Services, through automated means and in accordance with those platforms' terms, we may collect sender and recipient information, subject headings, and email content.
• Third-party platform data: we give you the option to register using third-party account details, such as your Google, Microsoft, or other social media account. If you register this way, we collect the personal information described in "How do we handle your third-party platform logins?" below.

From Leads:

• Lead contact data, which may include:
  • identification data (such as first name, last name, and email address);
  • education information (such as institutions attended, dates of attendance, and degrees conferred);
  • location data (with accuracy up to the city);
  • identifiers (such as a unique personal identifier or account name);
  • inferences (such as conclusions drawn about preferences, characteristics, behavior, attitudes, and aptitudes);
  • online identifiers (such as IP address and social media profiles);
  • professional or employment information (such as current and past employers, job titles, qualifications, language capabilities, employment dates, and employment locations); and
  • lead status data (such as status mapped from a CRM).

From all (Website Users, Business Contacts, and Leads):

• Account information, profile information, and credentials: your username, passwords, password hints, and similar security information used for authentication and account access.
• Content you upload: text, images, files, and the metadata associated with the files you upload to the Website, Services, or Product.
• Feedback or correspondence: information you provide when you contact us with questions or feedback, or otherwise correspond with us online.
• Usage information: information about how you use the Website, Services, and Product and interact with us, including information you provide when you use any interactive features.

Information collected automatically

We, our service providers, and our business partners may automatically collect certain information when you visit, use, or navigate the Website, Services, or Product. This may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and other technical information. Our service providers and business partners may collect this type of information over time and across third-party websites and mobile applications.

On our webpages, this information is collected using cookies, browser web storage (also known as locally stored objects, or "LSOs"), Flash-based LSOs (also known as "Flash cookies"), web beacons, and similar technologies. Our emails may also contain web beacons. See our Cookie Policy for more information.

Information collected from others

We may receive personal information from third-party sources. This may include information from publicly available sources (such as published content), marketing partners, data providers, and other business partners. In particular, we collect publicly available information about Leads that is published on the internet, which may include sources such as social media platforms or other websites.

Information we create or generate using artificial intelligence

We may rely on machine learning and artificial intelligence ("AI") to make certain predictions about a Lead's profile on behalf of our customers. We may also further process a Lead's personal information to enrich our own database, acting as a controller. We may infer new information from other data we collect, including using automated means to generate information about a Lead's preferences or other characteristics ("inferences").

We do not use Google user data to develop, improve, or train AI or machine learning ("ML") models. Google Workspace APIs are not used to develop, improve, or train generalized or non-personalized AI or ML models. We do not transfer Google user data to third-party AI tools.

How do we use personal information?

We may use personal information collected via the Website, Services, or Product for the purposes described below and as otherwise described in this Privacy Policy or at the time of collection.

From Website Users:

• To process your job application, if you express interest in one of our open positions and seek more information from us.
• To answer information requests, for example when you contact us or complete a form to speak with our team.
• For internal business purposes, including to maintain the Website and ensure its proper functioning, to carry out statistical analyses on how the Website is used, to improve the Website and customize your browsing experience, and to detect and deter fraudulent or inappropriate activity.

From Business Contacts:

• To operate the Services, including to facilitate account creation and login (including where you link a third-party account such as Google or Microsoft), to provide the Product to our customers, and to provide support and maintenance.
• To send administrative information, such as product and feature updates and changes to our terms, conditions, and policies.
• To respond to your requests, questions, and feedback, and to contact you about your use of the Services.
• To send emails on your behalf and to review and track those emails for the purpose of tracking outreach, if you have authorized access to your Gmail or Microsoft Outlook as part of the Services.
• To understand your needs and interests and personalize your experience with the Services and our communications.
• To send marketing and promotional communications. We and our third-party marketing partners may use personal information for marketing purposes. This does not include personal information obtained through any Gmail or Microsoft Outlook integration you enable as part of the Services. You can opt out of our marketing emails at any time (see "What are your privacy choices?" below).
• To display advertisements. We may work with advertising partners to display advertisements on the Services or elsewhere online. See "Targeted online advertising" below.

From Leads:

• To conduct analytics related to use of the Product, to identify opportunities for development and to improve and personalize the Product.
• To maintain a database of Leads, enhanced with machine learning and AI.
• To make our data available to customers, on a reciprocal basis for customers who have not opted out, so that relevant contacts can be surfaced within the Product.

From all (Website Users, Business Contacts, and Leads):

• For research and development, to improve the Website, Services, and Product and to develop new products and services.
• For compliance, fraud prevention, and safety, including to protect rights, privacy, safety, and property, to enforce our terms, and to investigate and deter fraudulent or unlawful activity. We may disclose information to law enforcement, government authorities, and private parties where we believe it is necessary or appropriate.
• With your consent, in cases where we specifically ask for it.
• To create anonymous, aggregated, or de-identified data, which we may use and share for lawful business purposes.

Will personal information be shared with anyone?

We may process or share personal information in the following situations:

• Service-related third-party vendors: vendors, consultants, contractors, and agents who perform services on our behalf or help us operate the Website, Services, or Product, such as data analysis, email delivery, hosting, customer service, and marketing.
• Payment processors: payment card information you use to make a purchase is collected and processed directly by our payment processors, such as Stripe, in accordance with their privacy policies (see https://stripe.com/privacy).
• Partners: excluding personal information collected from any Gmail or Microsoft Outlook integration, we may share your personal information with partners or allow selected third parties to collect information via tracking technology on the Website, Services, or Product.
• Third-party platforms and social media networks: where you connect the Website, Services, or Product to a third-party platform or social media network, we may disclose the personal information you authorized us to share. We do not control the third party's use of that information.
• Business transfers: we may sell, share, or transfer your information in connection with, or during negotiations of, any merger, sale of assets, reorganization, financing, acquisition, bankruptcy, or dissolution.
• Business customers: certain personal information (other than information collected through any third-party platform integration) may be viewed by our business customers. We do not control how they use it.
• Professional advisors: lawyers, bankers, auditors, and insurers, where necessary in the course of the services they provide to us.
• For compliance, fraud prevention, and safety, as described above.

Do we use cookies and other tracking technologies?

We, our service providers, and our business partners may use cookies and other tracking technologies to collect and store your information. See our Cookie Policy for more information.

How do we handle your third-party platform logins?

The Website, Services, or Product may offer you the ability to register and log in using your third-party account details, such as your Google or Microsoft login. If you choose to do this, we may collect certain information about you from that provider. The profile information we receive varies by provider but often includes your name, email address, profile picture, and other information you choose to make public.

We use the information we receive only for the purposes described in this Privacy Policy or otherwise made clear to you. We do not control, and are not responsible for, other uses of your personal information by your third-party provider. We recommend that you review their privacy policy to understand how they collect, use, and share your personal information, and how you can set your privacy preferences.

Is personal information transferred internationally?

We are headquartered in the United States and may have service providers in other countries. If you access the Website, Services, or Product from outside the United States, your information may be transferred to, stored, and processed by us and by third parties with whom we share it, in the United States and other countries. Laws in these countries may be less protective than the laws in your country. European Economic Area and United Kingdom ("EEA/UK") users should read the section below on transfers outside the EEA/UK.

How long do we keep personal information?

We keep your personal information only for as long as necessary for the purposes for which we collected it, including to satisfy legal, accounting, or reporting requirements, to establish or defend legal claims, or for fraud prevention. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes of processing, whether we can achieve those purposes by other means, and applicable legal requirements. When we no longer need the information, we will delete or anonymize it, or, if that is not possible (for example, because it is stored in backup archives), we will securely store it and isolate it from further processing until deletion is possible. If we anonymize your information, we may use it indefinitely without further notice to you.

Do we collect information from minors?

We do not knowingly collect data from or about children under 18 years of age. If we learn that we have collected personal information from anyone under 18 without the consent of a parent or guardian, we will delete it as soon as reasonably practicable. If you believe we have collected data from a child under 18, please contact us at privacy@getbowtie.ai.

What are your privacy choices?

This section describes the rights and choices available to all individuals. Individuals located in the EEA/UK or California can find additional information about their rights below.

• Cookies and similar technologies. Most browsers accept cookies by default. You can set your browser to remove or reject cookies, though this may affect certain features. See our Cookie Policy for details.
• Opting out of email marketing. Business Contacts can unsubscribe from our marketing list at any time using the link in our emails or by contacting us. We may still send service-related emails about the administration and use of your account.
• Accessing or updating account information. Business Contacts can log into their account settings to review or change their information, or to terminate their account. Some information may be retained to prevent fraud, resolve issues, assist investigations, meet invoicing and bookkeeping needs, enforce our Terms of Service, or comply with legal requirements.
• For Leads. If you would like to access, update, or delete your data, please email us at privacy@getbowtie.ai or use the contact details in "How can you contact us about this Privacy Policy?" below.
• Targeted online advertising. Some business partners that collect information about activity on our Services may be members of the Network Advertising Initiative or the Digital Advertising Alliance, which offer opt-out choices. European users may opt out through the European Interactive Digital Advertising Alliance. Some companies offer their own opt-out mechanisms and may not participate in these programs. If you opt out, you will still see advertisements, but they may be less relevant to you.
• Choosing not to share your personal information. Where we are required by law to collect your information, or need it to provide the Services or Product, we may not be able to provide the Services or Product if you do not provide it (or later ask us to delete it). We will tell you what information is required at the time of collection or through other appropriate means.

Controls for Do-Not-Track features

Most browsers and some operating systems include a Do-Not-Track ("DNT") setting you can activate to signal your privacy preference. No uniform standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. To learn more about Do Not Track, visit http://www.allaboutdnt.com.

Do California residents have specific privacy rights?

California Civil Code Section 1798.83, the "Shine the Light" law, permits California residents to request, once a year and free of charge, information about the categories of personal information (if any) we disclosed to third parties for their direct marketing purposes, and the names and addresses of those third parties. To make such a request, submit it in writing to the contact information below, include the statement "Your California Privacy Rights," and provide your name, street address, city, state, and ZIP code. See "Important information for California residents" below for more.

Do Texas residents have specific privacy rights?

The entity maintaining this website, Salesbot Labs, Inc., is classified as a data broker under Texas law. Under Texas Administrative Code 106.5(1), data brokers must register with the Texas Secretary of State ("Texas SOS") to conduct business in Texas. Detailed information about data broker registrants is available on the Texas SOS website.

Updates to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by a revised "Last Updated" date. If we make material changes, we may notify you by prominently posting a notice or by sending a direct notification, if required by law. We encourage you to review this Privacy Policy regularly. Your continued use of the Website, Services, or Product after any modified Privacy Policy is posted indicates your acceptance of the modified terms.

How can you contact us about this Privacy Policy?

If you have questions or comments about this Privacy Policy, you may email us at privacy@getbowtie.ai or write to us by post:

Salesbot Labs, Inc.
[Company mailing address]
United States

How does this Privacy Policy apply to other sites and services?

The Website, Services, or Product may contain links to other websites and online services operated by third parties. These links are not an endorsement of, or representation that we are affiliated with, any third party. We do not control third-party websites, applications, or services and are not responsible for their actions. We encourage you to read the privacy policies of the other websites, applications, and online services you use.

Does Bowtie have security practices?

The security of your personal information is important to us. We use a number of organizational, technical, and physical safeguards designed to protect the personal information we collect. However, security risk is inherent in all internet and information technologies, and we cannot guarantee the security of your personal information.

How does this Privacy Policy apply to European users?

The information in this section applies only to individuals in the EEA/UK.

Personal information. References to "personal information" in this Privacy Policy are equivalent to "personal data" governed by EEA/UK data protection legislation.

Controller. Bowtie is the controller of your personal information for purposes of EEA/UK data protection legislation (the EU GDPR and the UK GDPR, as applicable, the "GDPR"). See "How can you contact us about this Privacy Policy?" above for our contact details, or email privacy@getbowtie.ai.

Legal bases for processing. We use your personal information only as permitted by law. Our legal bases are:

Automated decision-making and profiling. We may use automated decision-making or profiling for some services and products, for example to rank Leads that match the criteria you provide. Individuals can request a manual review of the accuracy of an automated decision, or limit or object to such processing, by contacting us at privacy@getbowtie.ai.

Your rights. If you are located in the EEA/UK, you may ask us to:

• Access your personal information and receive a copy of it.
• Correct inaccuracies in your personal information.
• Delete your personal information where there is no lawful reason for us to continue storing or processing it. We may not always be able to comply for specific legal reasons, which we will explain if applicable.
• Port a machine-readable copy of your personal information to you or a third party, in certain circumstances.
• Restrict the processing of your personal information in certain circumstances.
• Object to our processing where we rely on legitimate interests, and to any processing for direct marketing.
• Withdraw consent at any time where we rely on your consent. This does not affect the lawfulness of processing before withdrawal.

To exercise these rights, email privacy@getbowtie.ai or write to the postal address above. We may request information to confirm your identity. If we reject a request, in whole or in part, we will explain our grounds, subject to legal restrictions.

Complaints. If you are not satisfied with our response, you can complain to the data protection regulator where you live. EEA users can find their regulator at https://edpb.europa.eu/about-edpb/board/members_en. UK users can contact the Information Commissioner's Office, Water Lane, Wycliffe House, Wilmslow, Cheshire SK9 5AF, tel. +44 303 123 1113, https://ico.org.uk/make-a-complaint/.

Cross-border data transfer. We may transfer your personal information outside the EEA/UK. Some recipients are in countries covered by an adequacy decision of the European Commission or UK Government. Where we transfer information to a recipient in a country without an adequacy decision (a "Restricted Country," such as the United States), we will either enter into Standard Contractual Clauses approved under GDPR Article 46, or rely on another appropriate means permitted by the GDPR that ensures an adequate level of protection. You may request a copy of these data transfer agreements by contacting us using the details above.

Important information for California residents

This section applies only to California residents. It describes how we collect, use, and share Personal Information of California residents and their rights with respect to it. For purposes of this section, "Personal Information" has the meaning given in the California Consumer Privacy Act ("CCPA") and does not include information exempted from the CCPA.

Your California privacy rights. As a California resident, you have the rights below. These rights are not absolute, and in certain cases we may decline your request as permitted by law.

• Right to information about how we collected and used your Personal Information over the past 12 months, including the categories collected, the sources, the business or commercial purpose, the categories of third parties with whom we share it, and whether we have disclosed or sold it.
• Right to access a copy of the Personal Information we collected about you over the past 12 months.
• Right to deletion of the Personal Information we collected from you.
• Right to opt out of sales. If we sell your Personal Information, you can opt out. We do not knowingly collect the Personal Information of minors under 16, so we do not sell such information.
• Nondiscrimination. We will not discriminate against you for exercising your rights, for example by denying services, changing prices, or reducing service quality.

How to exercise your California rights. You can exercise your information, access, and deletion rights by emailing privacy@getbowtie.ai or by submitting a request through our CCPA page. To opt out of the sale of your Personal Information, use the "Do Not Sell My Personal Information" option on that page. We will confirm your identity and California residency before processing your request. You may designate an authorized agent by providing a valid power of attorney, the requester's valid government-issued identification, and the agent's valid government-issued identification.

Categories of Personal Information we collect, use, and share. The table below summarizes our practices during the 12 months preceding the effective date of this Privacy Policy, using the statutory categories in the CCPA.

Glossary of statutory categories.

• Education Information: information from an educational record, such as name of school(s) attended, dates of attendance, degrees earned, certifications earned, and language.
• Identifiers: such as real name, alias, postal address, telephone number, and social media profiles.
• Inferences: conclusions drawn from other categories of Personal Information to create a profile reflecting preferences and characteristics, which may be derived from device data and online activity data.
• Online Identifiers: persistent identifiers used to recognize a person or device over time and across services, such as device identifiers, IP addresses, cookies, and similar technologies.
• Professional or Employment Information: information relating to a person's current, past, or prospective employment or professional experience, such as job history, job title, and salary.
• Protected Classification Characteristics: such as age (40 or older), race, color, ancestry, national origin, citizenship, religion, marital status, medical condition, disability, sex (including gender identity and expression), sexual orientation, veteran or military status, and genetic information. This may be revealed through identity data or inferences.

Response times under the Delete Act (SB 362). In compliance with the Delete Act of 2023, below are the median and mean number of days within which we substantively responded to consumer requests to delete, know, access, opt out of the sale or sharing of, or limit the use of Personal Information:

• Median response time: 2 days
• Mean response time: 1.3737 days

Bowtie's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.