Privacy Policy
This explains what Bobb collects, why, and the controls you have. We've kept it in plain language. Where this policy uses "we," "us," or "Bobb," it means 1956 US LLC, the company that operates Bobb.
Who this covers
Bobb serves three kinds of people, and we handle data differently for each:
- Customers: the businesses and individuals who sign up for a Bobb account to send newsletters or run outbound email.
- Subscribers: the people who receive newsletters sent through Bobb by our customers. For most subscriber data, our customer is the data controller and Bobb is the processor acting on their instructions.
- Business prospects: professionals whose business contact details our outbound agent finds and emails for a customer. The customer who contacts them is the data controller for that outreach.
What we collect
From customers: name, email, company, billing details (processed by our payment provider (we do not store full card numbers), the contacts and content you upload, and usage data about how you use the product.
From subscribers: email address, any name or company provided, how the subscription was created (the signup source), engagement events (clicks, replies, and opens), and consent metadata such as the timestamp, IP address, and browser used at signup. We keep one profile per email so we can honor opt-outs reliably and make recommendations relevant.
Business and professional data
To power the outbound agent, we and our data providers process business contact data: name, job title, company, business email address, and company details. It comes only from publicly accessible sources, such as business directories, company registries, company websites, professional publications and announcements, and professional networks. We do not collect sensitive personal data (like health, religion, or political views) or data from private or restricted sources.
We process this data under legitimate interest (GDPR Article 6(1)(f)) to support business-to-business communication. Records are updated and validated regularly, and outdated or invalid entries are removed.
If a Bobb customer emailed you, that customer is responsible for the outreach. Reply to them to opt out, and they must stop. To ask us to remove your business data from Bobb's prospect data, email nathan@trybobb.com. We respond within 30 days. Removal from Bobb doesn't remove you from other B2B databases.
How we use it
- To send the newsletters and recommendations a subscriber asked for.
- To find business prospects and send outbound email that a customer instructs.
- To operate, secure, and improve the product.
- To maintain deliverability and protect against abuse, fraud, and spam.
- To verify email addresses at import so dead and disposable addresses are dropped.
- To provide support and communicate with customers about their account.
- To meet legal, tax, and compliance obligations.
What we do not do
We do not sell personal data. We don't rent your contacts, and we don't use one customer's list to benefit another customer beyond the opt-in recommendation network described below. A subscriber only ever joins another newsletter by their own action: clicking subscribe or confirming.
We also don't disclose the specific strategies or results tied to your account. What you send, who's on your list, and how your campaigns perform is your business. Where we use data for analytics, benchmarks, or product improvement, it's aggregated or de-identified first, so nothing we share or publish can be traced back to any one account, except where the law requires disclosure.
The recommendation network
Bobb runs an opt-in recommendation network: subscribers can discover related newsletters with one click, and a customer's newsletter can be recommended back. Every add is engagement-gated and carries one-click opt-out. No one is added to a list without an explicit action of their own.
Service providers we use
We rely on a small set of trusted infrastructure providers to run Bobb, including business data and outbound email, email delivery, data storage and database hosting, payment processing, and product analytics. These providers process data only to provide their service to us and are bound by their own data-protection terms.
Cookies and analytics
We use a first-party cookie for essential site function, like remembering your cookie choice. Product analytics is different: it does not run, and no analytics cookie is set, until you accept it in the cookie banner shown on your first visit to Bobb. If you decline, no analytics events are sent and no analytics cookie is written. Your choice is stored in a first-party cookie for up to 12 months, and you can change it anytime using the "Cookie preferences" link in the footer (or, inside the app, in the sidebar).
Data retention
We keep customer and subscriber data for as long as the account is active, and afterward for as long as reasonably necessary for our legitimate business purposes, including analytics, product improvement, deliverability and network protection, fraud and abuse prevention, record-keeping, and compliance with legal obligations. We may retain and use aggregated or de-identified data indefinitely. Suppression records (unsubscribes and complaints) are retained to keep honoring opt-outs. Where you have a legal right to deletion, we honor verified requests as described below.
Your rights and controls
Every email Bobb sends includes one-click unsubscribe. A preference center lets a subscriber pause or leave individual newsletters, export their data, or delete it entirely. Depending on where you live, you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing. Customers can exercise these for their own account in-app or by contacting us. Subscribers should contact the newsletter that emailed them, or reach us and we'll route the request.
Security
We use encryption in transit, access controls, and reputable infrastructure providers to protect data. No system is perfectly secure, but we work to limit access to personal data to what's needed to run the service.
International transfers
Bobb is operated from the United States, and data may be processed there and in the regions our providers operate. Where required, we rely on appropriate safeguards for cross-border transfers.
Children
Bobb is a business tool and is not directed to children under 16. We don't knowingly collect their personal data.
Changes to this policy
We may update this policy as the product evolves. When we make material changes, we'll update the date above and, where appropriate, notify customers.
Contact
Questions about privacy or a data request? Email nathan@trybobb.com.
See also our Terms of Service and Compliance FAQ.