Prospect Privacy Notice

1. Who we are

Tuppence (tuppence.ai) is a payments platform for businesses. It is operated by Tuppence AI Ltd, a private limited company registered in England and Wales, with its registered office and postal address at 38 Greenvale Road, London SE9 1PD, United Kingdom (“we”, “us”, “our”). We decide how the personal information in this notice is used.

For anything about this notice or your information, email contact@tuppence.ai with “Prospect privacy” in the subject line, or write to us at the address above.

2. Who this notice is for

This notice is for people who work at US businesses we think might save money by taking card payments with Tuppence, and whom we may contact by email or on LinkedIn about it. It is our notice at collection under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA), which covers business contact information. We give everyone the rights it describes, wherever in the United States they live. If you use Tuppence or have signed up, our main Privacy Notice applies instead, and we will not send you these emails.

3. What we collect

We do not collect sensitive personal information about you, and we do not use your personal email address, phone number or home address. If you ask us to stop, we keep a one-way code made from your email address (or your company’s domain) and from your LinkedIn profile link, so we can keep that promise without keeping the address itself.

4. Where we found it

If you ask us where we found your details, we will tell you the actual source from our records.

5. Why we use it

We use this information for one business purpose: marketing Tuppence to businesses that might save money with it. That means finding those businesses, checking that writing to them is allowed, emailing or messaging the right person a few times at most, answering replies, and making sure that anyone who has asked us to stop is never contacted again. We do not use it for anything else.

6. Our emails

Each sequence is at most four short emails over about three weeks, sent in business hours in your time zone. It stops right away if you reply, unsubscribe, sign up, or if anything else tells us to stop. Every email says it is a marketing email from Tuppence AI Ltd, gives our postal address, links to this notice and has a one-click unsubscribe that works for at least 30 days after we send it. We never send marketing texts or make marketing calls, and we never buy lists of people who are said to have opted in.

On LinkedIn. We may also send you one connection request on LinkedIn from the account of a person at Tuppence, with a short note. If you accept, we may send you a message there from that account; it names Tuppence, gives our postal address and tells you how to stop us. We withdraw a request you have not accepted after about three weeks.

7. Software and AI

We use software, including AI models, to read public company websites, to summarize what a business does and to score how well Tuppence might fit it. Every fact it relies on is recorded with where it was found. These scores only decide whether we might write to a company; the rules that decide whether contact is allowed at all are fixed rules that the AI cannot override. A person approves our first emails.

8. Who we disclose it to

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not done either in the last 12 months. We disclose it only to service providers who handle it for us under contract, for the purpose above:

• the data providers in section 4, when we ask them about a company or a contact;
• Smartlead, the service that sends our outreach emails and reports replies and unsubscribes to us;
• Unipile, a service based in France that connects our LinkedIn account to our software: it sends our connection requests and LinkedIn messages and passes your replies to us, and holds them in the European Union;
• Google, for our email accounts (Google Workspace) and the cloud servers that hold our records (Google Cloud, in London);
• Anthropic, whose AI models summarize public company information and help draft replies, which a person approves.

LinkedIn itself carries our connection requests and messages, and your replies, under its own privacy policy. We may also disclose information where the law requires it, or to establish, exercise or defend legal claims.

9. How long we keep it

• If you never engage with us, we delete your contact details and anything that names you 12 months after we last had reason to hold them.
• If you reply or become a customer, we keep what is needed for that conversation or relationship, under our main Privacy Notice.
• We keep our LinkedIn connection requests and messages, and your replies on LinkedIn, in the same way as our emails and your email replies.
• If you unsubscribe, opt out or ask us to delete your information, we keep only the one-way code of your address (or domain) and of your LinkedIn profile link, for good, so that we never write to you again. It cannot be turned back into your address.

10. How to stop our emails

We honor a request to stop right away, in every sequence, and never contact you again. Any of these works:

• click unsubscribe in any of our emails, or use your email app’s own unsubscribe button;
• choose Nobody at our company wants these on the unsubscribe page, and we will not email anyone at your company’s email domain again;
• reply “no” or “stop”, or anything that asks us to stop, to an email or on LinkedIn;
• use the request form in section 12;
• email contact@tuppence.ai.

Stopping covers both: if you ask us to stop on LinkedIn, we will not email you either, and if you unsubscribe from our emails, we will not contact you on LinkedIn.

11. Your privacy rights

Whether or not a state law requires it of us, you can ask us to:

• know what personal information we have collected about you, where it came from, why we use it and whom we disclosed it to, and get a copy of it;
• delete it: we delete your contact details and keep only the one-way code described in section 9, so we never contact you again;
• correct it, if it is inaccurate;
• opt out of our emails and LinkedIn messages, and of any sale or sharing (we do neither, but we will record your choice).

We will not treat you differently for using any of these rights. We honor Global Privacy Control signals.

12. How to make a request

To have your details deleted or to opt out, use the form below. It works right away, for anyone, and we never email that address again. For anything else, or if you prefer, email contact@tuppence.ai with “Prospect privacy” in the subject line, or reply to any of our emails.

For a request by email or reply, we will confirm receipt within 10 business days and respond within 45 days, or tell you if we need up to 45 more. To protect you, we may confirm that the email address is yours before we send you a copy of your information; a request to delete or to opt out needs nothing more than the address. You can ask an authorized agent to make a request for you; we will ask for your signed permission. If we decline a request, you can appeal by replying to our decision, and we will respond within 45 days.

13. Contact

If you have questions about this notice, email contact@tuppence.ai or write to Tuppence AI Ltd, 38 Greenvale Road, London SE9 1PD, United Kingdom. If you are unhappy with how we handled a request, you can also contact your state attorney general or, in California, the California Privacy Protection Agency.

14. About this notice

This notice explains how we handle personal information, as privacy law requires. It is not a contract. We will update it when our practices change; the version and date at the top show which one you are reading. If you are in the United Kingdom, our UK Prospect Privacy Notice applies to you instead.