What we collect, why we collect it, and what we never do with it.
Last updated: 1 October 2026
ABM Copilot is an account-based marketing platform for B2B revenue teams. It identifies the companies engaging with your advertising and your website, scores their intent, and connects that activity to the deals they become in your CRM. This policy explains what personal data we handle in doing that, on what basis, and how you stay in control of it.
This policy covers the ABM Copilot website and the ABM Copilot application. It is written for two audiences: our customers, who decide what data enters the platform, and the individuals whose data may be processed within it.
ABM Copilot is operated by {{LEGAL ENTITY NAME}}, registered at {{REGISTERED ADDRESS}}. For anything in this policy, including data subject requests, write to support@abmcopilot.com.
For personal data about our own customers and website visitors, we act as a data controller. For personal data that a customer brings into the platform — their CRM records, their advertising audiences, the contacts they research — we act as a data processor on that customer's instructions.
The product works by connecting to systems you already use. You choose which, and you can disconnect any of them at any time.
Where a customer installs our tracking script on their own website, we process visitors' IP addresses, pages viewed, referrer and approximate location in order to identify the organisation a visit is likely to have come from. The output is company-level. We do not attempt to identify individual visitors by name, and we do not build cross-site profiles of individuals.
Customers can search for decision-makers at target companies. Where a customer chooses to reveal a contact, we retrieve business contact details — name, job title, employer, LinkedIn profile and work email address — from third-party business data providers. This is professional contact data, not personal or private data, and it is processed on the customer's instruction.
We use privacy-respecting analytics to understand which pages are read. We do not run advertising trackers on this site.
Summary: we ask for permission to send email as you. We never ask for permission to read your mailbox, and we could not read it even if we wanted to.
ABM Copilot lets you connect your own Google account so you can send individual, personalised sales emails to contacts you have selected inside ABM Copilot.
With your permission we request a single Gmail permission, gmail.send. This permission allows us to send email on your behalf. It does not allow us to read, search, download or delete any message in your mailbox, and we never request read access to your Gmail. We also request your basic profile and email address (openid, userinfo.email, userinfo.profile) so we can show you which mailbox is connected.
For one purpose only: to send the emails that you compose and explicitly approve inside ABM Copilot, from your own address, to the recipients you select. We do not send anything you have not reviewed, and we do not send on a schedule you have not set.
We store an encrypted Google refresh token so we can keep sending on your behalf without asking you to sign in repeatedly. We also store the content of the emails you compose, the recipients, and the delivery status of each message, so you can see what was sent. Tokens are encrypted at rest, are never exposed to your browser, and are never accessible to other customers.
We do not read your mailbox. We do not use Google user data to train machine-learning or AI models. We do not sell, rent or transfer Google user data to third parties, and we do not use it for advertising.
You can disconnect your mailbox at any time in ABM Copilot under Settings → Mailboxes, or revoke our access directly at myaccount.google.com/permissions. On revocation we stop sending immediately and delete the stored tokens.
Tokens are deleted when you disconnect the mailbox or close your account. Records of sent messages are retained while your account is active; you may request deletion at any time by writing to support@abmcopilot.com.
ABM Copilot's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
| What | Lawful basis |
|---|---|
| Running your account and providing the service | Performance of a contract |
| Identifying organisations behind website visits and ad engagement | Legitimate interests — B2B marketing analytics at company level |
| Business contact data for B2B outreach | Legitimate interests, balanced against the individual's rights |
| Sending email through your connected mailbox | Performance of a contract, on your explicit instruction |
| Service and security notifications | Legitimate interests |
| Marketing emails from us to you | Consent, withdrawable at any time |
We do not sell personal data. We share it only with the service providers needed to run the platform, each under contract and only for the purpose described:
| Provider | Purpose |
|---|---|
| Supabase | Database, authentication and backend hosting |
| Vercel | Application and website hosting |
| Apollo.io | Business contact data, when a customer reveals a contact |
| {{PAYMENT PROCESSOR}} | Billing and payments |
| {{EMAIL PROVIDER}} | Transactional email such as sign-in and alerts |
We may also disclose data where we are legally required to, or to protect our rights or the safety of others.
Data is hosted in {{HOSTING REGION}}. Where data is transferred outside the UK or EEA, that transfer is covered by Standard Contractual Clauses or an equivalent safeguard.
Depending on where you live, you may have the right to access, correct, delete, restrict or object to our processing of your personal data, to portability, and to withdraw consent. To exercise any of these, write to support@abmcopilot.com and we will respond within 30 days.
If a customer of ours holds your data in the platform, we will direct your request to them, since they decide what is held and for how long.
In the UK you may also complain to the Information Commissioner's Office at ico.org.uk. In the EEA, to your local supervisory authority.
ABM Copilot is a business tool. It is not directed at anyone under 16, and we do not knowingly collect their data.
We will post any changes on this page and update the date at the top. For material changes affecting how we use your data, we will notify account holders by email.
Questions, requests or complaints: support@abmcopilot.com. See also our Terms of Service.