Privacy Policy

Cordiul Ltd (“Cordiul”, “we”, “us”) provides an outbound sales platform for B2B teams. For data you give us directly, for example when you create an account or contact us, we act as the data controller. For prospect data our customers import, source, or generate inside the platform, we act as a data processor on the customer's instructions.

Questions about this policy or your data can be sent to hello@cordiul.com.

Depending on how you use Cordiul, we process:

• Account data. Name, work email, company details, and authentication data when you sign up or are invited to a workspace.
• Prospect and contact data.Business contact details that customers import (for example from a CSV or CRM) or source through the platform's lead database, plus buying signals associated with companies.
• Communication content. Emails, call recordings, voicemails, SMS and WhatsApp messages sent or received through connected channels, so the platform can run sequences, log activity, and sync it to your CRM.
• Connected account data. When you connect a mailbox, CRM, or phone provider we store the tokens needed to act on your behalf. Connections use OAuth where the provider supports it; we do not store those account passwords.
• Usage data. Log and device information used to keep the service secure and improve it.
• Enquiry data. What you send us through the contact form or by email.

• To provide, secure, and support the platform.
• To run the features you ask for: building lists, researching prospects, drafting and sending outreach, dialing, and syncing to your CRM.
• To power AI features. Duo sends relevant context, such as prospect research and your drafts, to our AI model providers to generate research summaries and writing. We do not sell your data, and we do not allow model providers to train on it.
• To bill for the service and communicate about your account.
• To meet legal obligations.

We share data only with the service providers needed to run Cordiul, under data processing agreements. Our core subprocessors include:

• Supabase — database, authentication, and storage
• Vercel — application hosting
• Twilio — calling and SMS infrastructure
• Nylas — mailbox connectivity for email sequences
• Resend — transactional email
• Anthropic — AI models behind Duo research and writing
• Inngest — background job processing
• Cal.com — demo scheduling on our website

When you connect an integration such as HubSpot, Salesforce, or WhatsApp, data flows to that provider under your instruction and their terms. We never sell personal data.

Some providers process data outside the UK and EEA. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses.

We keep data while your account is active and for as long as needed to provide the service. If you trial Cordiul and do not subscribe, we delete your workspace data within 30 days. You can ask us to delete your account data at any time; some records, such as invoices, must be kept longer where the law requires it.

Under UK and EU data protection law you can ask to access, correct, delete, or export your personal data, object to or restrict certain processing, and withdraw consent where processing is based on consent. To exercise a right, email hello@cordiul.com. You can also complain to your supervisory authority; in the UK that is the ICO.

If you have received outreach sent by a Cordiul customer, that customer controls why your data was processed. We will pass your request to them and help them honour it, and every email sent through Cordiul includes a way to opt out.

This website and app use only essential cookies: keeping you signed in and remembering preferences such as your theme. We do not run third-party advertising or tracking cookies.

If we make material changes we will update this page and, where the change affects how we handle your data, notify account owners by email. See also our Terms of Service and security practices.