Last Updated: April 10, 2026
Your privacy is important to us. This Privacy Policy explains how FollowUp ("we," "us," or "our") collects, uses, shares, and protects your personal information when you use our mobile application and services.
For users in the European Economic Area (EEA), we process data under the following legal bases: Contract performance, legitimate interests, consent, and legal obligations.
| Purpose | Legal Basis (GDPR) |
|---|---|
| Provide the Service | Contract Performance |
| Process Payments | Contract Performance |
| Send Service Emails | Legitimate Interest |
| Marketing (with consent) | Consent |
| Security & Fraud Prevention | Legal Obligation |
| Analytics & Service Improvements | Legitimate Interest |
| Aggregated Benchmarks & Industry Insights | Legitimate Interest |
| AI & Machine Learning Model Development | Legitimate Interest |
| De-Identified Data Products & Research | Legitimate Interest |
| Partner Network Referrals (with consent) | Consent |
We implement industry-standard security measures:
We do not sell your personally identifiable information (such as your name, email, phone number, or payment details) to third parties.
We may share, license, or sell aggregated, anonymized, and de-identified data that does not identify you, your business, or any individual contact. This includes:
This data cannot be used to identify any individual user, business, or contact.
Our commitment: FollowUp publicly commits to maintaining all de-identified and aggregated data in de-identified form and will not attempt to re-identify such data, except solely for the purpose of verifying the effectiveness of our de-identification processes. We contractually require all recipients of de-identified data to maintain the data in de-identified form and to not attempt re-identification.
We may offer features that connect leads with relevant service providers in complementary industries. Identifiable lead information is only shared when the lead provides affirmative consent (e.g., responding to a prompt or opting in to receive offers from partners). You can disable Partner Network features at any time in your account settings.
We use the following third-party services that may process information on our behalf:
Analytics: We collect analytics data directly (first-party) to understand app usage and improve features. We do not use third-party analytics services.
Each third-party service has its own privacy policy governing their use of your information. All service providers are bound by confidentiality agreements and process data solely on our behalf.
We may disclose information if required by law, court order, or government request.
We check phone numbers in your account against third-party data sources, including federal and state Do Not Call registries and known TCPA litigator databases, to help you avoid contacting individuals who have opted out or who have a documented history of telecommunications litigation. These checks are performed automatically when you import or receive new leads, and may re-run periodically to reflect updated lists. Results are stored on your lead records as flags such as is_litigator, dnc_status, and is_dma_listed.
Data shared with the scrubbing provider. To perform this check we share only the phone number being looked up. We do not share the contact's name, address, email, your account identity, or any other contact field. Our current scrubbing provider is Tracerfy, which is contractually prohibited from using the numbers we query for any purpose other than returning litigation and DNC status to us. We do not retain copies of the third-party data outside of the per-phone results attached to your leads. We may change providers in the future and will update this notice accordingly.
Overrides. If a lead is flagged, FollowUp will block automated outbound messaging to that contact and record the block in the compliance audit log. The contact is not removed from your account. You may override the block on a per-contact basis from the lead detail screen. Overrides are recorded in the compliance audit log. Re-enabling messaging to a known litigator is done at your sole risk and does not transfer any compliance obligation to FollowUp.
To exercise these rights, email: [email protected]
We retain your personal information for as long as your account is active or as needed to provide services. When you delete your account:
| Data Type | Retention Period |
|---|---|
| Account Data | Active account duration + 30 days after deletion |
| Backup Copies | Removed within 90 days of account deletion |
| Message History | Duration of account + 30 days after deletion |
| Payment Records | 7 years (legal/tax requirement) |
| Analytics Data | 24 months (anonymized) |
| Aggregated & De-Identified Data | Indefinite (cannot be linked to individuals) |
| Security Logs | 12 months |
We use local storage, cookies, and similar technologies to:
You can control tracking through your browser settings or device settings. On iOS devices, you can manage tracking permissions through: Settings > Privacy & Security > Tracking
FollowUp is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it immediately. If you believe we have collected information from a child under 13, please contact us at [email protected].
Your data may be transferred to and processed in countries outside your residence. We ensure appropriate safeguards through:
California residents have additional rights:
We do not sell personally identifiable information. We may share aggregated, de-identified data that does not constitute "personal information" under the CCPA. To exercise your rights or submit a request, email [email protected].
We respect your privacy choices. We do not use Apple's IDFA for advertising tracking. If we ever implement cross-app tracking, we will request your permission through Apple's App Tracking Transparency framework as required by iOS.
You can manage tracking permissions on your iOS device at any time through: Settings > Privacy & Security > Tracking
In the event of a data breach that may affect your personal information, we will notify you within 72 hours via email and provide:
We may update this policy periodically. Material changes will be notified via email or prominent notice in the Service. Continued use after changes constitutes acceptance.
For questions, concerns, or requests regarding this Privacy Policy:
Email: [email protected]
Subject line: "Privacy Policy Inquiry"
We take privacy seriously and will respond to all requests within 30 days.
This Privacy Policy complies with:
Supervisory Authority: EU users may lodge complaints with their local data protection authority.