Privacy Policy

How we handle your data and protect your privacy

Last Updated: November 18, 2025

What We Collect

We collect:

  1. Your email address when you sign up for our waitlist
  2. Anonymous, cookieless analytics data when you visit our website

Why We Collect It

Email: To notify you when ToWhom.ai launches and send occasional updates about our progress.

Analytics: To understand how visitors use our website and improve the user experience.

Legal Basis:

  • Email: Your consent when you sign up
  • Analytics: Our legitimate interest in understanding and improving our service

Where We Store It

Email: Your email is stored with Loops.so, our email service provider. Loops.so is based in the United States and complies with the EU-U.S. Data Privacy Framework for GDPR compliance.

Analytics: Anonymous analytics data is processed by PostHog in the EU region without using cookies or persistent identifiers.

Retention:

  • Email: Until you unsubscribe, then deleted within 30 days
  • Analytics: Anonymized data retained indefinitely (cannot be linked to individuals)

Email Communications

When you sign up for our waitlist or create an account, we collect your email address to send you:

  • Product updates and feature announcements
  • Tips and insights about job searching
  • Important account notifications

Marketing emails:

Tracking:

  • We track email opens (using invisible pixels)
    • Email opens are tracked when your email client loads a small image from our provider
  • We add UTM parameters to links for analytics
  • We do NOT use click tracking (no link redirects)

Your rights:

  • Unsubscribe anytime (link in every email footer)
  • One-click unsubscribe via email header
  • We delete your data within 30 days of unsubscribe

Third parties:

Analytics & Cookies

No Cookies: We do not use cookies on our website.

Anonymous Analytics: We use PostHog (EU region) in cookieless mode to collect anonymous analytics data including:

  • Pages visited
  • Browser type and version
  • Device type (desktop/mobile)
  • Approximate location (country level)
  • How you found us (e.g., search engine, social media, direct visit)

Privacy-Preserving: Our analytics setup:

  • Does NOT use cookies or persistent tracking
  • Does NOT track users across days or sessions
  • Does NOT collect personally identifiable information
  • Uses daily-rotating anonymous identifiers for maximum privacy
  • IP Address Handling: Your IP address is temporarily used (along with user agent, hostname, and a daily-rotating salt) to generate an anonymous identifier. The IP address is immediately discarded after generating the identifier and is never stored or logged. Because the salt changes daily, the same person appears as a different user each day, preventing long-term tracking while allowing approximate location (country-level) for analytics.

PostHog: Privacy Policy: https://posthog.com/privacy

Your Rights

You can:

We’ll respond within 30 days.

Who We Are

ToWhom.ai is operated by Dmitrii Kharlamov, based in Berlin, Germany.

Contact: hello@towhom.ai

Your Data is Safe

We will never:

  • Sell your email
  • Share it with third parties (except Loops.so for sending emails)
  • Spam you (max 1 email per week, usually less)

GDPR Compliance

You have rights under GDPR:

  • Access your data
  • Correct your data
  • Delete your data
  • Object to processing

Email privacy@towhom.ai to exercise these rights.

Supervisory Authority: If you have concerns, you can contact: Berliner Beauftragte für Datenschutz und Informationsfreiheit Website: https://www.datenschutz-berlin.de