Privacy Policy

We collect information in the following categories:

We process your information for the following purposes:

• Lead Generation: To process your information for lead generation purposes and to provide targeted opportunities based on your business vertical.
• Customer Support: To respond to your enquiries and provide assistance with our services.
• Marketing and Communication: To send you marketing emails, only with your consent (Art. 6(1)(a) GDPR). In our application funnel this is an optional box that you tick yourself; we then send up to 3 emails over 7 days. You can unsubscribe at any time.
• Improvement of Services: To understand how our website and services are used so we can improve them.
• Legal Compliance: To comply with applicable legal obligations, including GDPR and the German BDSG.

We do not sell your personal data to third parties. We may share your data only in the following circumstances:

• Service Providers: With third-party vendors who assist us in operating our website and delivering our services. These parties are obligated to protect your data in accordance with applicable privacy laws.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.
• Legal Requirements: Where required by law or to protect the rights, property, or safety of DemandVine, our users, or others.

Recipients we currently use

The recipients of personal data in connection with our website and application funnel are currently:

• Google (Calendar, Meet and Sheets): appointment booking and video calls, and a spreadsheet export of applicant data.
• Resend: sending emails.
• Neon: the database in which applicant data is stored.
• Upstash: timers for scheduled processes.
• PostHog (EU): analytics, hosted in the EU.
• Meta: recipient of the data described in section 6, Meta Conversions API.
• Vercel: hosting of our websites.

We retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. When data is no longer needed, we delete or anonymise it in a secure manner. In particular:

• Applicant data in our database is deleted after 24 months.
• Name and email address are wiped from our Google Sheets export after 24 months.
• We keep a hashed do-not-contact list so that people who have unsubscribed are not emailed again.

We use cookies and similar tracking technologies to enhance your experience on our website. You can control the use of cookies through your browser settings or our cookie consent banner. Please note that disabling cookies may affect your ability to use some features of our site.

We use the following third-party tools that may set cookies or collect usage data:

We also use third-party advertising platforms including Google Ads and Meta for marketing purposes. These platforms may collect data about your interactions with our ads. Please refer to each platform’s own privacy policy for details.

For a full list of cookies used on this website, please see our Cookie Policy.

We use Meta’s Conversions API to measure how well our advertising on Facebook and Instagram works and to improve it. This applies to applicants who use our application funnel at go.demandvine.com.

When an applicant meets our qualification criteria, we send Meta a “Lead” event containing:

• a hashed version of the applicant’s email address (hashing pseudonymises it but does not make it anonymous);
• the Meta advertising click identifier from the ad link;
• the applicant’s IP address and browser details (user agent);
• the event details: the trade selected (for example roofing), the country page the applicant used, and the date and time.

Meta may match these identifiers against information it holds about its users to attribute the conversion and to measure and optimise advertising. We do not send this event for applicants who do not meet our qualification criteria. We do not upload customer lists or create audiences from applicants.

Our lawful basis: legitimate interests (Art. 6(1)(f) GDPR) in measuring and improving our advertising.

How to object: you can object at any time. Write to privacy@demandvine.com and we will stop sharing your details with Meta. We also do not send the event when your browser sends the Global Privacy Control signal.

US residents: we apply Meta’s Limited Data Use setting for US state privacy laws. See also Do Not Sell or Share My Personal Information.

For information on how Meta handles data, see Meta’s Privacy Policy.

Depending on your location, you may have the following rights regarding your personal data. To exercise any of these rights, please contact us at: privacy@demandvine.com

• Access to Information: You have the right to request a copy of the personal data we hold about you.
• Correction and Deletion: You have the right to request that we correct inaccurate data or delete your personal data where there is no legitimate reason for us to continue processing it.
• Unsubscribe from Marketing Emails: We send marketing emails only with your consent. You can unsubscribe at any time by following the unsubscribe link in any email we send, or by contacting us directly.
• Right to Object: Where we process your data on the basis of legitimate interests, including the Meta Conversions API described in section 6, you may object at any time.
• Right to Data Portability: Where we process your data on the basis of your consent or a contract, you have the right to receive a copy of your data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where we rely on your consent to process your data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing carried out before you withdrew consent.
• Right to Lodge a Complaint: You have the right to lodge a complaint with your local supervisory authority. As we are based in Berlin, this is the Berlin Commissioner for Data Protection and Freedom of Information (BlnBDI). See www.bfdi.bund.de for a full list of German data protection authorities.

We take reasonable precautions to protect your personal information from loss, misuse, and unauthorised access or disclosure. We implement appropriate technical and organisational measures in line with industry standards. However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before providing any personal information.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make significant changes, we will update the Effective Date at the top of this page. We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us: