Snapshot 45691
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Topsail® Topsail Privacy Policy How Topsail handles personal data across our products, integrations, website, lead and research workflows, communications, and support operations. Latest revision: September 1, 2026 1. Who We Are Topsail is operated by Easy Company Consulting, LLC, doing business as Topsail (“Topsail,” “we,” “us,” or “our”). Topsail provides business development software and services that help businesses and individual sellers identify and prepare leads, organize prospecting and account development, execute outreach, manage CRM workflows, and understand sales activity. This Privacy Policy explains how Topsail collects, uses, stores, and shares personal data in connection with Topsail products and services, including Topsail ONE, our website, integrations, support, and related operations. 2. Our Role The role Topsail plays depends on the information and how it is used. For data contained within a customer account or workspace (“Customer Data”), Topsail generally acts as a service provider or processor on behalf of the customer and processes that information according to the customer’s instructions and our agreement with the customer. For information related to our website, account administration, billing, product security, support, and our own business operations, Topsail may act as a controller or business responsible for determining how that information is processed. Our customers are responsible for determining that they have the appropriate rights and lawful basis to provide Customer Data to Topsail and to use Topsail for their business development activities. 3. Personal Data We Process Depending on how Topsail is used, we may process the following categories of information. Account Data Names, business email addresses, company information, user roles, account or tenant identifiers, authentication information, preferences, and related account details. Lead and Prospect Data Business information used to identify, research, prepare, and manage leads and prospects, such as: name; business email address; business phone number; employer or company; job title and role; business location; professional profile links; company characteristics; account and contact research; enrichment information; lead status and activity; and other information relevant to business-to-business prospecting and account development. Lead and prospect information may come from customers, customer-connected systems, third-party data and research providers, publicly available business sources, or information generated or organized through Topsail. CRM and Customer Workspace Data Information from customer systems or entered into Topsail, such as contacts, companies, deals, notes, meetings, tasks, calls, emails, associations, activity history, outcomes, sales stages, and related customer records. Integration Data Information required to connect and operate customer-authorized integrations, such as OAuth tokens, provider identifiers, permissions, sync metadata, email metadata, webhook information, CRM identifiers, and other integration-related information. Outreach and Communication Data Information used to facilitate business communications, including email addresses, phone numbers, outreach messages, templates, call activity, messaging activity, opt-out and suppression status, communication outcomes, and related metadata. Depending on the workflow, Topsail may prepare, initiate, transmit, or record information relating to a communication using a customer-authorized account, third-party communications provider, application, or device. Not every communication facilitated by Topsail necessarily passes through or is stored by Topsail. For example, certain workflows may open or prepare content within an application or service controlled by the user. AI, Research, and Enrichment Data Information used in AI-assisted, research, and enrichment workflows, such as prompts, customer instructions, generated drafts and summaries, ICP information, company and contact research, profile information, enrichment outputs, classifications, and review decisions. Subscription and Billing Data Information relating to subscriptions and payments, such as plan selection, subscription status, billing cycle, transaction information, invoices, payment status, and identifiers supplied by our payment processor. Payment card information is generally processed directly by our payment provider rather than stored by Topsail. Marketing and Website Data Information such as website activity, page paths, referral and attribution information, form submissions, cookie or consent state, and analytics information where permitted. Support and Feedback Data Information provided through customer support, troubleshooting, onboarding, product feedback, surveys, or other communications with Topsail. Security and Diagnostic Data Information used to operate and protect Topsail, such as request metadata, account and user identifiers, IP addresses, authentication activity, operational logs, error reports, device or browser information, and security events. 4. How We Collect Information We may collect personal data: directly from customers and users; through information entered or uploaded into Topsail; through customer-authorized CRM, email, and other integrations; from third-party business information, research, and enrichment providers; from publicly available business and professional sources; automatically when users interact with Topsail or our website; and through support, onboarding, billing, and other direct communications with Topsail. 5. How We Use Personal Data We use personal data as reasonably necessary to: provide and operate Topsail; identify, research, enrich, prepare, and organize leads and accounts; operate customer-authorized CRM, email, calling, messaging, reporting, and other workflows; provide AI-assisted drafting, research, analysis, and other functionality requested by customers; authenticate users and manage accounts; process subscriptions and billing; configure and support customer accounts; provide customer service and troubleshoot issues; protect Topsail, our customers, and our systems from unauthorized activity, abuse, fraud, or security threats; honor opt-out, suppression, deletion, consent, and other applicable requests; analyze product performance and improve Topsail using aggregated or de-identified information; understand website performance where analytics are permitted; enforce our agreements and policies; and comply with applicable legal, contractual, accounting, and security obligations. 6. AI-Assisted Features and Model Training Topsail may use artificial intelligence and machine-learning service providers to support features such as research, summarization, drafting, classification, and other customer-requested workflows. When Customer Data is processed through an AI-assisted feature, Topsail uses that information as necessary to provide the requested functionality. Topsail does not use Customer Data to train Topsail AI models or general-purpose AI models. This includes Customer Data such as: customer ICP information; outreach messages and templates; sequences and sales playbooks; CRM information; customer account information; and lead and prospect information contained in a customer workspace. Topsail also does not provide Customer Data to AI providers for the purpose of training their general-purpose AI models. Topsail may use aggregated or de-identified information that does not reasonably identify a customer, user, lead, or prospect to analyze, develop, and improve Topsail products and services. 7. Email, Calling, Texting, and Other Communications Topsail may facilitate communications initiated or authorized by customers through customer-connected accounts, third-party providers, applications, or devices. Depending on the feature being used, this may include: sending email through a customer-authorized mailbox; initiating telephone calls; preparing or facilitating text messages; preparing messaging for use in external services; and recording communication activity and outcomes. Customers control their business development activities and are responsible for determining whom they contact, which communication methods they use, what messages they send, and whether their activities comply with applicable laws and requirements. Mobile and SMS Information Topsail does not sell mobile information or share mobile opt-in information, phone numbers, or text-message consent information with third parties or affiliates for their own marketing or promotional purposes. Topsail and its service providers may process mobile information where necessary to provide communications functionality requested by the customer, maintain consent and suppression records, prevent abuse, or comply with applicable law. Outlook and Microsoft 365 data For details about our Microsoft Graph email connection, including mailbox permissions, data processing, retention, and customer controls, see the Outlook Privacy Statement and Outlook integration terms. Google Workspace and Gmail data Connecting a Google account is optional. When you connect Gmail, Topsail requests your basic Google account identity and the permissions needed to send emails you direct Topsail to send and to read Gmail messages, threads, and send-as settings for reply detection, delivery-failure processing, and your email signature. Topsail does not request permission to delete, modify, or label Gmail messages. Google Calendar access is not part of the current Gmail connection. Topsail stores the OAuth credentials needed to maintain the connection, connected-account identifiers, email and thread identifiers, relevant message metadata, limited reply snippets, and delivery or reply status. Topsail may process message content when needed to identify a reply or delivery failure and provide the email features you use. Google user data is used only to provide and secure the user-facing features you authorize. It is not sold or used for advertising. Access is limited to authorized Topsail personnel and service providers when necessary to operate, secure, or support those features and subject to appropriate confidentiality and data protection obligations. You can disconnect Gmail in Topsail or revoke Topsail's access in your Google Account. You may also request deletion by contacting us. Disconnecting or revoking access stops new Google API access but does not automatically remove data that must be retained under a customer agreement or applicable law. Topsail's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Additional terms for the integration are available in the Google Workspace integration terms. 8. Legal Bases Where laws such as the GDPR require a legal basis for processing, the applicable basis depends on the activity. Common legal bases may include: performance of a contract; legitimate interests; consent; and compliance with legal obligations. For Customer Data processed within a customer workspace, the customer’s agreement with Topsail and the customer’s instructions generally determine the permitted processing. 9. Service Providers and Subprocessors Topsail uses third-party service providers and subprocessors to operate our products and business. These may include providers supporting: cloud infrastructure and hosting; authentication; databases and storage; CRM integrations; email integrations; telephony and communications; payment processing; analytics; enrichment and business research; search; AI-assisted workflows; and product and customer support. Some providers are used only when a customer enables the related feature or integration. Our current providers and their purposes are listed on our Subprocessors page. We require service providers to process information only as appropriate to provide their services to Topsail and subject to applicable contractual, privacy, and security obligations. 10. International Data Transfers Personal data may be processed in the United States and in other countries where Topsail or our service providers operate. Where required by applicable law, Topsail uses appropriate mechanisms for international transfers, which may include data-processing agreements, Standard Contractual Clauses, recognized data-transfer frameworks, or other legally permitted safeguards. 11. Selling and Sharing Personal Data Topsail does not sell Customer Data or personal data for money. We do not use Customer Data for third-party advertising or provide Customer Data to third parties for their own independent marketing purposes. We may disclose information to service providers and subprocessors as necessary to operate Topsail, provide customer-enabled functionality, maintain security, process payments, and otherwise carry out the purposes described in this Privacy Policy. We may also disclose information: when directed or authorized by a customer; when required by applicable law, legal process, or governmental request; when reasonably necessary to protect Topsail, our customers, users, or others; in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, subject to appropriate confidentiality and legal protections; or with consent or as otherwise disclosed when information is collected. 12. Retention and Deletion Topsail retains personal data for only as long as reasonably necessary for the purposes described in this Privacy Policy, customer instructions, contractual requirements, and applicable law. Customer Data After a Subscription Ends Following expiration or termination of a customer subscription, Topsail provides a 30-day period for the customer to retrieve or request export of Customer Data. After that 30-day period, Topsail may delete Customer Data from active systems in accordance with our data-retention practices. Information may remain for a longer period in backups, security records, system logs, billing and accounting records, suppression lists, or other systems where retention is reasonably necessary for security, recovery, fraud prevention, legal compliance, dispute resolution, or other legitimate business purposes. Information remaining in backups is deleted as those backups rotate or expire under Topsail's normal backup and recovery practices. Topsail may retain aggregated or de-identified information that no longer reasonably identifies a customer or individual. 13. Security Topsail maintains administrative, technical, and organizational safeguards designed to protect the confidentiality, integrity, and availability of Customer Data. These safeguards include measures such as: access controls; least-privilege access practices; authentication protections; encryption in transit; encryption at rest within production infrastructure where applicable; monitoring and logging; and security and incident-response procedures. No internet-connected service can be guaranteed to be completely secure. If Topsail becomes aware of a security incident affecting personal data, we will investigate and provide notifications as required by applicable law and our contractual obligations. 14. Your Choices and Privacy Rights Depending on your location, your relationship with Topsail, and applicable law, you may have rights regarding your personal data, including the right to request: access; correction; deletion; export or portability; restriction of certain processing; objection to certain processing; or withdrawal of consent where processing is based on consent. If your information appears within a Topsail customer workspace, the Topsail customer generally controls that information. We may therefore direct your request to that customer or work with the customer to fulfill the request. We may need to verify your identity before completing certain requests. Topsail maintains suppression and opt-out information where necessary to honor requests not to receive certain communications. Retaining limited suppression information helps us avoid reintroducing information that has been appropriately opted out. 15. Cookies and Website Analytics Topsail uses cookies, local storage, and similar technologies for functions such as authentication, security, user preferences, and website operation. Where required, analytics technologies are used only after appropriate consent. Additional information and available choices are described in our Cookie Notice. 16. Business Use and Children Topsail is designed for business and professional use and is not directed to children. We do not knowingly collect personal data from children through Topsail for consumer or personal use. 17. Changes to This Privacy Policy We may update this Privacy Policy from time to time as our products, providers, practices, or legal obligations change. When we make material changes, we will provide reasonable notice where required or appropriate, such as through our website, within Topsail, or by email. The “Latest revision” date at the top of this page identifies when this Privacy Policy was last updated. 18. Contact Us For privacy questions, requests, or concerns, contact: Topsail Easy Company Consulting, LLC d/b/a Topsail 1671 NW Albany Avenue Bend, Oregon 97703 United States Email: austin@topsail.app