Privacy Policy
Last updated: May 29, 2026
Privacy at a Glance
Your data is encrypted
In transit and at rest
We never sell your data
Your info stays yours
Request deletion anytime
Email us to remove your data
1Introduction
fromThoughts ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our revenue operations platform for B2B founders. By using fromThoughts, you agree to the collection and use of information in accordance with this policy. fromThoughts is operated by Vrijek Consulting, registered in the Netherlands with the Dutch Chamber of Commerce (KvK-nummer: 92647871). Our primary data storage is located in Frankfurt, Germany (EU).
2Information We Collect
2.1 Information You Provide Directly
- •Contact Information: Email address and company name when you generate a forecast
- •Business Metrics: Revenue data, funnel metrics, conversion rates, deal sizes, and market information you input into our forecasting tool
- •CRM Authorization: If you choose to connect HubSpot or Pipedrive, we receive OAuth tokens to access your CRM on your behalf
2.2 Automatically Collected Information
- •Usage Data: Pages visited, features used, time spent, and interactions with our service
- •Device Information: Browser type, operating system, IP address, and device identifiers
- •Analytics: Aggregated and anonymized statistics via Google Analytics to improve our service
3How We Use Your Information
We use the information we collect to:
- ✓Generate revenue forecasts, execution plans, and strategic recommendations based on your business data — legal basis: performance of contract
- ✓Compare your metrics against industry benchmarks — legal basis: performance of contract
- ✓Send you forecast results and relevant service updates via email — legal basis: performance of contract
- ✓Sync data to your CRM platforms (only with your explicit OAuth authorization) — legal basis: consent
- ✓Improve our platform, develop new features, and analyze usage patterns — legal basis: legitimate interest
- ✓Respond to your inquiries and provide customer support — legal basis: legitimate interest
4Data Sharing and Disclosure
We do not sell your personal information. Ever.
We may share your information only in these limited circumstances:
- •Sub-processors: We use the following third-party service providers to operate our platform. Each is bound by a Data Processing Agreement and, where data is transferred outside the EU, by Standard Contractual Clauses (SCCs).
| Provider | Purpose | Location | Transfer basis |
|---|---|---|---|
| Neon | Database | Frankfurt, EU | EU — no transfer |
| Vercel | Application hosting & CDN | US (global edge) | SCCs |
| Vercel Analytics | Cookie-free usage analytics (no personal data stored) | US | SCCs |
| Groq / OpenAI | AI processing | US | SCCs |
| Resend | Transactional email | US | SCCs |
| Stripe | Payment processing | US | SCCs |
| Upstash | Rate limiting (temporary IP storage) | Frankfurt, EU | EU — no transfer |
| Sentry | Error monitoring | US / EU | SCCs |
| Google Analytics | Usage analytics (consent-gated) | US | SCCs |
- •CRM Platforms: HubSpot and Pipedrive, only when you explicitly authorize the OAuth connection
- •Legal Requirements: When required by law, subpoena, or to protect our rights and safety
- •Business Transfers: In connection with a merger, acquisition, or sale of assets (you will be notified)
5Data Security
We implement industry-standard security measures to protect your data:
Encryption
TLS 1.3 in transit, AES-256 at rest
Access Controls
Role-based access, MFA required
EU Data Storage
Primary database in Frankfurt, Germany (AWS eu-central-1)
Monitoring
24/7 security monitoring and alerts
6Data Retention
We retain your forecast data for as long as your account is active or as needed to provide services. Forecasts and execution plans are retained for 24 months to allow you to reference historical data. You may request deletion of your data at any time by emailing privacy@fromthoughts.com. We will process deletion requests within 30 days.
7Your Rights
Depending on your location, you may have the following rights:
To exercise these rights, contact us at privacy@fromthoughts.com.
8Cookies and Tracking
We use cookies and similar technologies to enhance your experience and analyze usage:
- •Essential Cookies: Required for the service to function (session management, security)
- •Analytics Cookies: Help us understand how you use our service (Google Analytics)
- •Preference Cookies: Remember your settings and preferences
Essential cookies are placed on the basis of our legitimate interest in providing a working service. Analytics and preference cookies are placed only with your consent. You can withdraw consent or manage cookie preferences through your browser settings at any time.
9International Data Transfers
Our primary database is located in Frankfurt, Germany (EU). Certain sub-processors listed in Section 4 operate in the United States. For these transfers, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission under GDPR Article 46(2)(c). Each US-based sub-processor has executed a Data Processing Agreement with us incorporating the applicable SCCs.
If you are located in the EU/EEA, you have the right to contact your local supervisory authority with questions about our data transfers. The lead supervisory authority for fromThoughts is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
10Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page, updating the "Last updated" date, and sending an email to registered users when required by law.
11Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us: