Privacy Policy
Last Updated: November 23, 2025
Want to request deletion of your data? Visit our Data Deletion Request page.
1. INTRODUCTION
Ahoy Technologies Inc. and its subsidiary Ahoy Technologies (Ireland) Limited (collectively "Ahoy," "we," "us," or "our") are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our customer relationship management platform and services (the "Services").
For users in the European Economic Area (EEA), United Kingdom (UK), and Switzerland, this Privacy Policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
Please read this Privacy Policy carefully. By using our Services, you agree to the collection, use, and disclosure of your information as described in this Privacy Policy.
2. INFORMATION WE COLLECT
2.1 Information You Provide to Us
Account Information:
- Name, email address, phone number
- Company name, job title
- Payment information (processed by third-party payment processors)
- Password and authentication credentials
Customer Data:
- Contact information for your customers and prospects
- Communication history and notes
- Sales pipeline and opportunity data
- Any other data you choose to input into the Services
Communications:
- Messages you send to our support team
- Feedback, survey responses, and testimonials
- Any other communications with Ahoy
2.2 Information We Collect Automatically
Usage Information:
- Features used, pages viewed, time spent
- Search queries and interactions
- Click patterns and navigation paths
Device and Technical Information:
- IP address, browser type and version
- Device type, operating system
- Unique device identifiers
- Cookies and similar tracking technologies (see Section 8)
Log Data:
- Access times and dates
- Error logs and diagnostic information
- Service performance data
2.3 Information from Third Parties
Integration Partners:
- Data imported from third-party applications you connect (e.g., email providers, calendar services)
- Authentication information from single sign-on providers
Business Partners:
- Information from companies that help us market and sell our Services
- Data enrichment services that supplement your contact information
3. HOW WE USE YOUR INFORMATION
3.1 Lawful Bases for Processing (GDPR)
We process your personal data under the following lawful bases:
Contract Performance: To provide and maintain the Services you've subscribed to
Legitimate Interests: To improve our Services, prevent fraud, ensure security, and communicate about our Services
Consent: Where you have provided explicit consent for specific processing activities
Legal Obligation: To comply with legal requirements and regulations
3.2 Purposes of Processing
We use your information to:
Provide and Maintain Services:
- Create and manage your account
- Process transactions and billing
- Deliver customer support
- Send service-related communications
Improve and Develop Services:
- Analyze usage patterns and trends
- Develop new features and functionality
- Improve AI models using aggregated, de-identified usage patterns and interactions
- Conduct research and analytics
Communications:
- Send product updates and newsletters (with your consent)
- Respond to your inquiries
- Send important notices about changes to our Services
Security and Fraud Prevention:
- Detect and prevent security threats
- Investigate and prevent fraudulent activities
- Enforce our Terms of Service
Legal Compliance:
- Comply with legal obligations
- Respond to legal requests and prevent harm
- Protect our rights and property
4. HOW WE SHARE YOUR INFORMATION
We do not sell your personal information. We share your information only in the following circumstances:
4.1 Service Providers
We share information with third-party service providers who perform services on our behalf:
- Cloud hosting providers (e.g., AWS, Google Cloud)
- Payment processors
- Email and communication services
- Analytics providers
- Customer support tools
These providers are contractually obligated to protect your information and use it only for specified purposes.
4.2 Business Transfers
If Ahoy is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
4.3 Legal Requirements
We may disclose your information if required to do so by law or in response to:
- Legal processes (subpoenas, court orders)
- Government or regulatory requests
- National security requirements
- Protection of rights, property, or safety
4.4 With Your Consent
We may share information with third parties when you explicitly consent to such sharing.
4.5 Aggregated and De-identified Data
We may share or use aggregated, de-identified, or anonymized data that cannot reasonably be used to identify you, including for:
- Improving our AI models and features
- Research and analytics
- Understanding usage patterns
- Marketing and business intelligence purposes
This aggregate data is stripped of all personally identifiable information before use.
5. INTERNATIONAL DATA TRANSFERS
Ahoy is headquartered in the United States, with operations in Ireland. Your information may be transferred to, stored, and processed in the United States, Ireland, or other countries where our service providers operate.
5.1 EEA, UK, and Swiss Data Transfers
For transfers of personal data from the EEA, UK, or Switzerland to countries without adequate data protection laws:
- We use Standard Contractual Clauses approved by the European Commission
- We implement appropriate technical and organizational security measures
- We ensure our service providers commit to similar protections
You may request a copy of the safeguards we use by contacting [email protected].
6. DATA RETENTION
6.1 Retention Periods
Active Accounts: We retain your information for as long as your account is active or as needed to provide Services.
Inactive Accounts: If your account becomes inactive, we may delete your data after 90 days of inactivity, unless you request earlier deletion.
Legal and Business Requirements: We may retain certain information for longer periods when required by law or for legitimate business purposes (e.g., accounting, dispute resolution).
6.2 Deletion of Data
When data is deleted:
- We remove it from active systems within 30 days
- Backup copies are deleted within 90 days
- Some metadata may be retained in anonymized form for analytics
7. YOUR RIGHTS AND CHOICES
7.1 Rights for EEA, UK, and Swiss Residents
Under GDPR and similar laws, you have the following rights:
- Right of Access: Request access to your personal data
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data
- Right to Restriction: Request restriction of processing in certain circumstances
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests or for direct marketing
- Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
- Right to Lodge a Complaint: File a complaint with your local data protection authority
7.2 Rights for California Residents (CCPA/CPRA)
California residents have additional rights:
- Right to know what personal information is collected, used, and shared
- Right to delete personal information
- Right to opt-out of sale of personal information (we do not sell personal information)
- Right to non-discrimination for exercising privacy rights
7.3 How to Exercise Your Rights
To exercise your rights:
- Email: [email protected]
- Data Deletion Request Form: https://www.ahoy.ai/data-deletion-request
We will respond to your request within 30 days (45 days for California requests). We may need to verify your identity before processing your request.
7.4 Account Management
You can also:
- Update your account information through your account settings
- Unsubscribe from marketing emails via the unsubscribe link
- Disable cookies through your browser settings (may affect functionality)
8. COOKIES AND TRACKING TECHNOLOGIES
8.1 Types of Cookies We Use
- Essential Cookies: Required for the Services to function (e.g., authentication, security)
- Performance Cookies: Collect information about how you use the Services to help us improve
- Functionality Cookies: Remember your preferences and settings
- Analytics Cookies: Help us understand usage patterns and measure effectiveness
8.2 Third-Party Cookies
We use third-party analytics services (e.g., Google Analytics) that may set cookies. These services have their own privacy policies.
8.3 Your Cookie Choices
You can control cookies through:
- Browser settings to block or delete cookies
- Our cookie consent banner (for EEA/UK users)
- Opt-out tools provided by third-party services
Note: Disabling essential cookies may prevent you from using certain features of the Services.
9. SECURITY
9.1 Security Measures
We implement industry-standard security measures to protect your information:
- Encryption of data in transit (TLS/SSL) and at rest (AES-256)
- Access controls and multi-factor authentication
- Regular security audits and penetration testing
- Employee security training and background checks
- Incident response and breach notification procedures
9.2 Your Responsibility
You are responsible for:
- Maintaining the confidentiality of your password
- Restricting access to your account
- Notifying us immediately of unauthorized access
9.3 No Guarantee
While we strive to protect your information, no security system is impenetrable. We cannot guarantee the absolute security of your data. You use the Services at your own risk.
10. CHILDREN'S PRIVACY
Our Services are not intended for children under 16 years of age (or under 13 in the US). We do not knowingly collect personal information from children.
If you believe we have collected information from a child, please contact us immediately at [email protected], and we will delete it promptly.
11. THIRD-PARTY LINKS AND SERVICES
Our Services may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.
12. AI AND MACHINE LEARNING
12.1 How We Use AI
Our Services incorporate artificial intelligence and machine learning to:
- Provide intelligent recommendations and insights
- Automate routine tasks
- Improve search and data organization
- Generate content suggestions
12.2 Your Data and AI
How We Use Your Data with AI:
- AI uses your Customer Data as context to provide personalized results and recommendations for you
- We may use aggregated, de-identified usage patterns and interactions to improve AI features for all customers
- Your specific proprietary information (customer names, deal details, private notes, etc.) is never used to train models accessible to other customers
13. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.
Notice of Material Changes:
- We will notify you of material changes via email at least 30 days before they take effect
- We will also post a notice on our website
- The "Last Updated" date at the top will reflect the most recent changes
Your Continued Use: Your continued use of the Services after the effective date of changes constitutes acceptance of the revised Privacy Policy. If you do not agree to the changes, you must stop using the Services.
14. CONTACT US
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
General Privacy Inquiries:
Email: [email protected]
GDPR/EU-Specific Inquiries:
Email: [email protected]
Data Deletion Requests:
Online Form: https://www.ahoy.ai/data-deletion-request
Email: [email protected]
Data Protection Authorities:
- Ireland: Data Protection Commission (www.dataprotection.ie)
- UK: Information Commissioner's Office (ico.org.uk)
- Switzerland: Federal Data Protection and Information Commissioner (www.edoeb.admin.ch)
By using our Services, you acknowledge that you have read, understood, and agree to this Privacy Policy.