Privacy Policy

01Who we are

Demando is a demand generation platform built for founder-led B2B teams. Our platform helps users find qualified sales leads, run personalized outreach sequences, and track pipeline. Demando is operated by Demando Inc., a Delaware corporation.

Our registered address and contact information are listed in the Contact Us section at the bottom of this policy.

02Information we collect

Information you give us directly

• Account information: your name, email address, company name, and password when you register
• Billing information: payment card details and billing address, processed securely through Stripe — we do not store full card numbers
• Profile information: your ICP definition, brand voice settings, and any other content you add in Settings
• Communications: any messages you send us via email or support channels

Information collected automatically

• Usage data: which features you use, sequences you create, leads you generate, and actions taken within the platform
• Device and browser data: IP address, browser type, operating system, referring URLs, and pages visited
• Session data: login timestamps, session duration, and in-product behavior

Information from third-party integrations

When you connect third-party services to Demando, we receive data from those services. For example:

• Apollo: contact and company data from your Apollo account when you pull leads into the platform
• HubSpot: contact and deal data synced from your HubSpot CRM
• Gmail or Outlook: access to send emails on your behalf through connected accounts — we do not read or store your inbox beyond what is needed to send and track sequences
• Webflow and other CMS tools: site data and publishing access when you connect for SEO fix publishing

03How we use your information

We use the information we collect to:

• Create and manage your account and provide the Demando service
• Process payments and manage your subscription
• Generate and send outreach sequences on your behalf when you instruct us to do so
• Personalize AI-generated content using your brand profile, ICP settings, and lead data
• Provide customer support and respond to your inquiries
• Send product updates, feature announcements, and billing notifications (you can opt out of marketing emails at any time)
• Detect and prevent fraud, abuse, and security incidents
• Analyze platform usage to improve the product and fix issues
• Comply with legal obligations

We do not use your data to train AI models without your explicit consent. We do not sell your personal information to third parties.

04Lead and contact data

Demando processes two categories of contact data that require specific attention:

Your own contacts (contacts you import or upload)

When you import contacts from HubSpot, upload a CSV, or add contacts manually, you are the data controller for those contacts. You are responsible for ensuring you have a lawful basis for processing their information and for complying with applicable privacy laws (including CAN-SPAM, GDPR, and CASL) when emailing them through Demando sequences.

Third-party contact data (leads pulled from Apollo)

When you use Demando’s lead generation features powered by Apollo, you receive access to contact data sourced from Apollo’s database. This data is subject to Apollo’s own privacy policy and terms of service. You agree to use this data only for lawful B2B outreach purposes and in compliance with all applicable laws. Demando does not independently verify the accuracy of Apollo’s contact data.

Your obligations as a sender

By using Demando’s sequence features, you agree to:

• Only send emails to recipients where you have a legitimate business reason to contact them
• Include a clear unsubscribe mechanism in every outreach email (Demando handles this automatically)
• Honor all unsubscribe requests promptly
• Not use Demando to send spam, misleading content, or communications that violate any law
• Comply with CAN-SPAM, GDPR, CASL, and any other applicable email laws in your jurisdiction

05How we share your information

We do not sell your personal data. We share your information only in the following circumstances:

Service providers

We share data with trusted vendors who help us operate the platform, including:

• Stripe — payment processing
• Apollo.io — contact database access for lead generation
• Anthropic — AI content generation and email personalization (data processed via API; Anthropic does not use API inputs to train models by default)
• Amazon Web Services — cloud infrastructure and data hosting
• Analytics providers — product usage analytics (e.g. PostHog or equivalent)

All service providers are contractually required to handle your data securely and only for the purpose of providing services to Demando.

Business transfers

If Demando is acquired, merged with another company, or undergoes a change of ownership, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

Legal requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (such as a court order or government agency).

Protection of rights

We may disclose information where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, fraud, or situations involving potential threats to the safety of any person.

06Third-party services and integrations

Demando integrates with a number of third-party services. When you connect an integration, that service’s own privacy policy governs how they handle your data. We encourage you to review the privacy policies of any third-party services you connect to Demando.

Current integrations include: Apollo.io, HubSpot, Gmail, Outlook, Webflow, and Salesforce (coming soon). We are not responsible for the privacy practices of these third-party services.

07Data retention

We retain your account information and data for as long as your account is active or as needed to provide you the service. Specifically:

• Account data: retained while your account is active and for 90 days after cancellation, during which you can request an export
• Lead and contact data: retained while your account is active; deleted within 30 days of account closure
• Sequence and email data: retained while your account is active; deleted within 30 days of account closure
• Billing records: retained for 7 years as required by applicable tax and financial record-keeping laws
• Support communications: retained for 2 years after resolution

You may request deletion of your data at any time by contacting us at team@getdemando.com. We will process deletion requests within 30 days.

08Security

We take the security of your data seriously. We implement the following measures to protect your information:

• All data transmitted between your browser and Demando is encrypted using TLS (HTTPS)
• Passwords are hashed using industry-standard algorithms — we never store plain-text passwords
• Access to production systems is restricted to authorized personnel only
• Payment data is processed entirely by Stripe and never stored on Demando servers
• We conduct regular security reviews and address vulnerabilities promptly

No method of transmission over the internet or electronic storage is 100% secure. While we use commercially reasonable measures to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

09Your rights and choices

Depending on where you are located, you may have the following rights regarding your personal data:

For all users

• Access: request a copy of the personal data we hold about you
• Correction: request that we correct inaccurate or incomplete data
• Deletion: request that we delete your personal data
• Export: request a portable export of your data in a machine-readable format
• Opt-out of marketing: unsubscribe from marketing emails at any time using the link in any email or by contacting us directly

For users in the European Union and United Kingdom (GDPR / UK GDPR)

• Restriction: request that we restrict processing of your data in certain circumstances
• Objection: object to processing of your data where we rely on legitimate interests as our legal basis
• Portability: receive your data in a structured, commonly used format
• Withdraw consent: where processing is based on consent, withdraw that consent at any time
• Complaint: lodge a complaint with your local data protection authority

Our lawful bases for processing your personal data under GDPR are: performance of a contract (providing you the service), legitimate interests (product improvement, fraud prevention), legal obligation (tax and financial records), and consent (marketing communications).

For California residents (CCPA)

California residents have the right to know what personal information we collect, the right to delete their personal information, the right to opt out of sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising these rights.

To exercise any of your rights, contact us at team@getdemando.com. We will respond within 30 days. We may need to verify your identity before processing your request.

10Cookies and tracking

Demando uses cookies and similar tracking technologies to operate and improve the platform. We use the following categories of cookies:

• Essential cookies: required for the platform to function (authentication, session management). Cannot be disabled.
• Analytics cookies: help us understand how the platform is used so we can improve it. You can opt out of analytics cookies in your account settings.
• Preference cookies: remember your settings and preferences across sessions.

We do not use advertising or tracking cookies. We do not share cookie data with advertisers.

You can control cookies through your browser settings. Note that disabling essential cookies will prevent you from using the platform.

11Children's privacy

Demando is a business-to-business platform intended for use by adults. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has provided us with personal information, please contact us at team@getdemando.com and we will delete that information promptly.

12International data transfers

Demando is based in the United States. If you are accessing the platform from outside the United States, your information will be transferred to, stored, and processed in the US, where data protection laws may differ from those in your country.

For users in the European Union and United Kingdom, we rely on Standard Contractual Clauses approved by the European Commission as the legal mechanism for transferring personal data to the United States. A copy of our Standard Contractual Clauses is available upon request.

13Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email to the address associated with your account and/or by posting a prominent notice on the Demando website at least 14 days before the changes take effect.

Your continued use of Demando after changes take effect constitutes your acceptance of the updated policy. If you do not agree to the updated policy, you may close your account before the changes take effect.

The date at the top of this page reflects when the policy was last updated. Previous versions are available upon request.

14Contact us

Last updated June 25, 2026 · See also our Terms of Service