Privacy Policy

8. Outreach: why you got an email from us, and your rights

This section is for people who work at a company and received an email from us about a role that company has advertised. We did not get your details from you, so Art. 14 GDPR asks us to tell you who we are, where we found them and what we do with them.

Who we are — Generum sp. z o.o., Poland (EU) sends these emails and is the controller of the data described here. Address: Bazylijska 39L, 95-100 Zgierz, Poland. Contact: hello@caio.pro.

What we hold and where it comes from — your work email address, your name, your job title and the company you work for. We take them from Lemlist's B2B contact database, from company websites (for example a careers or contact page), from public job posts and from other public web pages, such as professional directories. Ask us at hello@caio.pro and we will tell you which of these sources your address came from.

Visits from the link in our email — our emails link to the role's listing page on caio.pro; earlier emails also linked to the page where a company can promote the role. Opening the listing page saves a short record of the visit: the time, the role, the page the visitor came from, if the browser sends it (the referrer), and the browser's user-agent text (browser and device details). Opening the promote page, or starting a purchase there, saves a fuller record: the time, the page address, the role and company the link is for, the campaign tags in the link (UTM tags), the referrer and the user-agent text. The promote links in those earlier emails carried a campaign tag, so that we could count the visits each email brought. None of these records has a field for an IP address. For cookies, see Cookies above.

Why we write — to send one business email about a role your company has advertised and we have listed on caio.pro, a job board for executive AI roles, asking whether the company would like it promoted. If nobody answers we may send up to two short follow-ups in the same thread. We send no further follow-up once you reply, the message bounces or you ask us to stop.

Legal basis — legitimate interest, Art. 6(1)(f) GDPR. Our interest is to tell companies that advertise executive AI roles about a service that can help them fill those roles. We weigh it against yours: we use business contact details only, write about a business matter that concerns your role, write at most three times and stop when you ask. You can object at any time (see Your rights below).

How to stop it — reply "no" to any of our emails, or write to hello@caio.pro. We will not write to you again: your address goes on a suppression list that is checked before every send.

How long we keep it — the contact record and the emails, sent and received, are kept for up to 24 months after our last email to your company, and then deleted. An address that has opted out stays on the suppression list, with the date, for as long as we send outreach, so that we never write to you again. You can ask us to delete the rest at any time.

Who else sees it — we do not sell or rent these details. These providers supply or process them for us:

• Lemlist SAS (France): the B2B contact database your address may come from.
• Zenbox (Poland): email hosting and sending.
• Anthropic PBC (USA): its AI service finds and checks work contacts on public web pages, and has drafted the text of some of our emails from the role and the recipient's name and title.
• GitHub, Inc. (USA): private repositories that hold our outreach records:
  • the contacts we found: name, job title, work email, company, where we found it and our notes, including people we have not emailed;
  • the emails we drafted and sent;
  • the replies we received;
  • the suppression list of addresses we must not write to;
  • the number of visits each email brought.
• Mikrus (mikr.us): the server that runs the outreach pipeline and stores these records (for where our servers are hosted, see Third-party services above).

Transfers outside the EEA — Anthropic and GitHub are in the United States. These transfers rely on standard contractual clauses (Art. 46(2)(c) GDPR) in the providers' data-processing terms, and on an adequacy decision (EU-US Data Privacy Framework) where a provider is certified under it. Write to hello@caio.pro for a copy of these safeguards (Art. 14(1)(f)).

Your rights — under Articles 15 to 21 GDPR you can ask us for access to your data, rectification, erasure, restriction of processing and portability, and you can object to our use of it at any time. If you object to direct marketing we stop at once. Email hello@caio.pro; we will respond within 30 days. You also have the right to lodge a complaint with a supervisory authority: the Polish data protection authority (UODO), or the one in the EU country where you live or work. We take no decision about you by automated means that has legal or similarly significant effects.