GDPR at Riftjaw
What we store, what you control and how the source and date of every record are kept.


Two roles, clearly split
Under the GDPR, the question is always: who decides why and how personal data is used. At Riftjaw the answer depends on which data we are talking about.
For your lead data we are a processor. The companies and contacts you import, the notes you write, the campaigns you send: you decide what goes in and what you do with it. We store and process it on your behalf, on your account's own server, and only to run the service for you.
For your account data we are a controller. Your name, login email, billing details and usage logs are data we collect ourselves to provide and bill the service. How we handle that is described in our privacy statement.
What the product does to help you
You stay responsible for your prospecting. These features make it easier to do properly.

Unsubscribes honoured
Every campaign mail carries an unsubscribe link. Unsubscribed contacts stay marked in your database and are skipped in every future send and follow-up, so they work as your opt-out register.
Read more
Your name on every mail
Campaigns go out from your own domain over your own SMTP, with your footer in every mail, so people see who is writing and replies go straight to you.
Read more
A log of every send
Every mail, open, click and form entry is kept against the contact with its date and time, so you can show what happened and when.
Read moreHandling a request from a contact
A typical request, start to finish, without leaving the dashboard.
Find the record
Search the contact by name, email or company. The Database shows its lead file, its source and the date it was added.

Answer an access request
Select the contact and export it to CSV. The file holds its details, lead file, status, tags, source, the date it was added and whether it unsubscribed. For the mails it received, open the campaign and use Export log.

Stop contact, or erase it
On an objection, archive the contact from its panel: only active contacts are mailed, so it gets no campaign and no follow-up. When someone asks to be erased, delete the record from the same panel.

Data processing agreement
Because we process personal data on your behalf, you may need a data processing agreement with us. It is available on request. Send a message through the contact page, choose "Privacy or a data request" as the topic, and we send it to you.
Planning cold B2B email? Read our guide on cold email and the GDPR for legitimate interest, the balancing test and what to record. It explains the principles but is not legal advice; for your own situation, check with an adviser.
Record the source now, not when someone asks
The easiest time to know where a contact came from is the day you add it. Every import gets a name, goes into a segment you pick and keeps its date, from the first list on.

Questions people ask
A processor for the lead data you put in, and a controller for your own account and billing data.
Yes, on request. Ask through the contact page and we send it to you.
No. We only process it to run your account. We never sell it and never use it for our own purposes.
No tool can do that. Riftjaw helps you keep source and date, honour unsubscribes and answer requests. Whether your prospecting has a lawful basis is your call. This is not legal advice.
It stays in your database marked Unsubscribed and is skipped automatically in every future campaign and follow-up.
Prospect with a record of every source
Start free and keep source, date and opt-outs in order from the first list.
No credit card · cancel any time · your data stays yours





