Legal

Privacy policy

Last updated 2026.

Who we are

Nordvind is a Swedish company operating from Stockholm. We are the controller for your account data and a processor for the prospect data your campaigns generate.

What we store about you

Your email address, name, company, campaign settings, credit balance and ledger, and the emails your agents draft and send. Card details are held by Stripe — we never see or store them.

What we store about prospects

Business contact data only: name, job title, employer, company domain, public professional profile and a business email address. No special-category data, no consumer profiling, no tracking beyond delivery, open and reply events on our own messages.

Legal basis

Legitimate interest for business-to-business outreach, balanced with a working opt-out in every message and honest sender identification. Contract performance for your own account data.

Opt-outs and suppression

An opt-out is immediate and permanent. Suppressed addresses and domains are stored indefinitely in a suppression list — that record exists precisely so we never contact that person again, and it is never deleted.

Sub-processors

Cloud hosting and database, email delivery infrastructure, data enrichment and verification providers, Stripe for payments, and an AI provider for research and drafting. Prospect data is never sold or used to train third-party models.

Retention

Campaign and prospect data is kept while your account is active and for 90 days after deletion, except suppression entries and financial records we must retain by law.

Your rights

Access, correction, deletion, portability and objection. Email us and we respond within 30 days. Prospects can exercise the same rights directly through the opt-out link in any message they received.