Your data in our database.

Grezy Software is the controller for building and enriching the AutoLeads database: we decide which sources are consulted, which information is kept, and how it is assessed.

The company that wrote to you is the controller for its own outreach: the decision to contact you, the content of the message and the follow-up are theirs. The two roles are distinct, and you can exercise your rights with us regarding the database, whoever the sender was.

Contact: contact@grezy.org

We collect nothing from you directly. Your professional contact details come from publicly accessible sources:

• your organisation's website (contact, legal notice and team pages)
• search engine results and online professional directories
• public company registers (legal data from the trade register)
• public advertising libraries and published job postings
• public business ratings and reviews, and public professional social media profiles

A named address (first.last@company.com) and a direct line are personal data: this page concerns you. A generic role address (contact@, info@) identifies nobody and falls outside the GDPR, but you can still ask for its removal below.

Categories of data: professional identity (name, role), professional contact details (email, phone), information about the organisation (name, address, website, sector), and assessment elements computed from public sources (website quality, advertising presence, public ratings).

Purpose: to allow companies to send you a business proposal likely to concern your professional activity.

Legal basis: our legitimate interest in carrying out B2B prospecting (GDPR art. 6.1.f). We have documented the balancing test between that interest and your rights in writing, and will share it on request. Your right to object prevails: as soon as you exercise it, the processing stops.

• the client company prospecting you, and no other of our clients
• the email sending tool used by that company, which receives only the details needed to send. Our sending processors in service are listed in our privacy policy
• our technical hosting and enrichment processors, listed in our privacy policy

Our data is hosted in the European Union. We do not sell the database and do not transfer it wholesale.

A record nobody ever tried to contact is deleted automatically one year after collection. After a first contact, the data is kept for as long as needed to follow up on the business relationship, then deleted.

If you object, we keep only a cryptographic fingerprint of your email or number, never the value itself. That is what lets us exclude you automatically from later collections: without it, your objection would be undone the next time your public website was consulted.

You have the right of access, rectification, erasure, objection, restriction of processing and portability. The form below covers objection and erasure, immediately and with no justification required. For the other rights, write to contact@grezy.org.

You may also lodge a complaint with the CNIL, the French supervisory authority, at cnil.fr.