Privacy policy

What Champions does

Champions helps B2B revenue teams notice when the people in their CRM change jobs. A customer (the workspace owner) uploads or syncs contacts they already have a relationship with; Champions checks each contact's public professional profile on a schedule, records role changes, scores the new company and role against the customer's ideal-customer rules, and suggests a next step.

Data we process

• Account data: your name and email address, sign-in tokens, workspace membership and role.
• Contact data you provide: names, titles, companies, work emails, public profile URLs, CRM identifiers, owners, deal and relationship dates, and any extra columns you choose to keep.
• Public professional profile data: current and past positions, headline and location for the contacts you track, retrieved from a professional-data provider on your instruction. Snapshots are kept so changes can be detected.
• Company data: public firmographics (industry, size, headquarters, funding stage) for companies your contacts move to, plus any revenue, funding or size figures you import.
• Usage and billing: credit balance and ledger, invoices, API keys (stored hashed), OAuth grants for AI agents you connect, webhook endpoints and delivery logs.

How we use it

Only to provide the service to your workspace: detecting job changes, scoring fit, producing plays, sending the notifications you enabled (email, Slack, CRM write-back, webhooks), billing, support and abuse prevention. We do not sell contact data, build audience profiles across customers, or use your data to train models.

Who can see it

Members of your workspace; Champions staff for support and operations; and the processors we rely on to run the service: hosting (Render, EU region), email delivery (Resend), payments (Stripe), the professional-data provider used for profile checks, and, only if you connect them, HubSpot and Slack. AI agents you connect via our MCP server act with your workspace's permissions and see what you would see.

Retention and deletion

Data stays for as long as your workspace exists. You can delete any contact and everything held about that person from Settings or the API, and a workspace admin can delete the whole workspace. Deletions are permanent and logged. Backups age out within 30 days.

Your rights and legal basis

Champions acts as a processor for the contact data you upload; you remain the controller and are responsible for having a lawful basis to track your business contacts. For your own account data we act as controller on the basis of the contract with you. You can request access, correction or deletion at any time at [email protected].

Security

Data is encrypted in transit and at rest; CRM tokens are encrypted with a key held outside the database; API keys are stored as hashes; access is invite-only with passwordless sign-in.

Changes

We will post changes here and, for material changes, notify workspace admins by email.