Privacy Policy
Last updated: 3 October 2026
This Privacy Policy explains how Deligatr, owned and operated by J&H Sales Solutions LLC ("Deligatr", "we", "us"), collects, uses, shares and protects personal information. It covers deligatr.ai, our free tools (including the AI visibility checker and audit requests), our chat and booking features, and our software and managed services.
It is written to meet the main privacy laws that apply to us: the UK GDPR and EU GDPR, the US state privacy laws (including the California Consumer Privacy Act as amended), Canada's PIPEDA and CASL, and the Australian Privacy Act. Where your local law gives you more rights than this policy describes, those rights apply.
Our Cookie Policy explains the cookies and similar technologies we use and how to change your choices.
1. Who is responsible for your data
J&H Sales Solutions LLC, 30 N Gould Street, Sheridan, WY 82801, USA, trading as Deligatr, is the controller of personal information collected through our website and our own sales and marketing.
When our customers use Deligatr software or managed services to contact their own prospects, the customer decides why and how that prospect data is used, and we process it on the customer's behalf as a processor under our customer agreement. Section 4 explains how this works for people who receive outreach.
Privacy contact: support@deligatr.ai
2. Information we collect
A. Information you give us
- Contact and enquiries: name, work email, phone number, company, website, job title and the contents of your message, when you use a form, book a call, request an audit or contact us.
- Audit requests: the website address you enter, the business email and details you provide, and anything you tell us about your market and competitors. For manual audits we may ask you to confirm the site is yours.
- Chat: messages you send in our chat, and the details you give us there.
- Accounts and customers: account details, billing details (card data is handled by our payment processors and not stored by us), settings, and the content and contact lists you load into our software.
- Communications: emails, call recordings or notes from calls with us, where permitted and disclosed.
B. Information collected automatically
- Device and usage data: IP address, approximate location, browser, device type, pages viewed, referring page, time spent, clicks and scrolling.
- Cookies and similar technologies: described in the Cookie Policy. With your consent these include analytics, heatmaps and session replay, advertising and measurement tags, and our chat provider's visitor identification, browser fingerprinting, session recording and form capture.
- Visitor identification: if you consent to the chat and visitor identification category, our chat provider may use your network address and other signals to infer which company a visit may come from, and can record what happens during your visit, including text typed into forms before you submit them.
- Bot and abuse checks: when you use a form or one of our tools, our security provider checks your IP address and browser signals to tell visitors from automated scripts. We use this only to keep the site and our tools secure.
C. Information from other sources
- Business contact data about prospects: where we run outreach for ourselves or for customers, we obtain business contact details (name, job title, business email, company, business phone, professional profile link) from public sources, professional networks and licensed data providers.
- Integrations: if you connect a CRM, email or outreach tool to Deligatr, we receive the data that integration shares.
- Our service providers, for example analytics and advertising platforms, who may tell us how a visit or campaign performed.
We do not intentionally collect sensitive personal information (such as health, biometric, precise location or government identifiers) and ask you not to send it to us.
3. How we use information and our legal bases
| Purpose | Legal basis (UK and EU) |
|---|---|
| Respond to enquiries, book calls, run audits you request, provide chat | Our legitimate interests in running our business and answering you, or steps you ask us to take before a contract |
| Provide, secure and support our software and services, and take payment | Performance of a contract |
| Send you marketing about our products | Consent, or legitimate interests for business contacts where the law allows, always with an opt-out |
| Analytics, heatmaps and session replay, chat with visitor identification, advertising and measurement | Consent, which you can withdraw at any time |
| Outreach to business contacts for us and for customers | Legitimate interests, with a right to object, see section 4 |
| Improve our website, content, tools and AI features | Legitimate interests |
| Keep records, prevent fraud and abuse, enforce our terms, meet legal duties | Legitimate interests and legal obligation |
Where we rely on legitimate interests we balance them against your rights and expectations. You can ask us for details of that balancing.
4. Outbound outreach and business contacts
Part of our business is outbound outreach by email, LinkedIn, phone and other channels to business decision-makers. This is how we handle it:
- We contact people in a business capacity, using business contact details, about services relevant to their role.
- Every email carries a working unsubscribe or a clear way to opt out. If you opt out or ask us to stop, we suppress your details from all current and future outreach, across every campaign, and keep a minimal suppression record so we do not contact you again.
- We follow the rules that apply to the channel and the country, including CAN-SPAM, PECR and the rules on telephone and text contact. We do not text or call people for marketing without the consent the law requires.
- You can ask what data we hold about you, where we got it, and ask us to delete it, using the contact details in section 14. Where a customer is the controller of the campaign, we will pass your request to them and help them respond.
5. Artificial intelligence
We use AI to classify websites, assess how businesses appear in AI answers, draft and personalise outreach, and summarise research. When you run our AI visibility checker, the website address you enter, and content retrieved from that website and from public sources, is sent to AI providers to produce your report.
People review our outputs before they are used in customer campaigns. We do not make decisions about individuals that have a legal or similarly significant effect by solely automated means. We choose AI providers under commercial terms that limit how they use the data we send them, and we do not knowingly send sensitive personal information to them.
6. Who we share information with
We share personal information only as needed, with:
- Infrastructure and security providers: hosting, content delivery, security, tag management and analytics.
- Analytics, heatmap and advertising providers: only where you have consented.
- Chat and visitor identification provider: only where you have consented.
- CRM, scheduling and communications providers: for our CRM, forms and booking calendar, and for email and messaging delivery.
- Automation providers: which process form submissions and route them to our team.
- AI providers: to power our tools.
- Payment processors.
- Professional advisers, auditors and insurers, and authorities where the law requires or to protect rights and safety.
- A buyer or successor, if the business or assets are sold or restructured, subject to this policy.
We require our providers to protect personal information and use it only on our instructions. We can give you the names of our providers, or the categories of provider that received your information, on request.
We do not sell personal information for money. Some advertising and measurement tags, if you accept them, can count as "selling" or "sharing" personal information for cross-context behavioural advertising under US state laws. They are off unless you opt in, and you can switch them off at any time on our Do Not Sell or Share page (see section 9).
7. International transfers
We are based in the United States and our providers operate globally, so personal information may be processed in the US and other countries that may not offer the same level of protection as yours. Where the law requires, we rely on approved safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, or another lawful transfer mechanism.
8. How long we keep information
We keep personal information only for as long as we need it for the purpose it was collected, then delete or anonymise it. Typical periods:
| Information | Typical retention |
|---|---|
| Enquiries, audit requests and sales conversations | Up to 24 months after our last contact |
| Marketing preferences and suppression records | As long as needed to honour your opt-out |
| Customer account and billing records | The life of the account plus the period required by tax and accounting law (generally up to 7 years) |
| Cookie consent records | Up to 6 months in your browser, then we ask again |
| Analytics, heatmap and session-replay data | As set in the relevant tool, and no longer than 14 months |
| Chat transcripts | Up to 24 months |
| Outreach prospect data | While the campaign runs and for a limited period after, then deleted or returned to the customer on request |
We may keep information for longer where the law requires it or we need it to establish, exercise or defend legal claims.
9. Your choices and rights
Everyone
- Cookies and tracking: change your choices at any time using Cookie Settings in the footer. We honour the Global Privacy Control signal sent by your browser as an opt-out of sale, sharing and optional tracking.
- Marketing: use the unsubscribe link in any email, reply STOP to any text, or write to us. Opting out of marketing does not stop service messages about an account.
UK and EU residents
You have the right to access your data, correct it, delete it, restrict or object to processing (including for direct marketing, which we will always honour), receive a portable copy, and withdraw consent at any time without affecting earlier processing. You can complain to your data protection authority, for example the UK Information Commissioner's Office, but we would like the chance to put things right first.
US state residents (including California)
Depending on your state, you can ask us to tell you what personal information we collect, use, disclose and share, to access, correct and delete it, to opt out of its sale, sharing and targeted advertising, and to limit the use of any sensitive personal information. We will not discriminate against you for using these rights.
In the last twelve months we may have collected the following categories, for the purposes described in section 3: identifiers (name, email, IP address), commercial information (enquiries, services considered), internet and device activity (usage data, cookies), professional information (job title, company), and inferences (such as the company a visit may come from). We do not knowingly sell personal information for money. If you accept advertising tags, that may be considered "sharing". To opt out, use the Do Not Sell or Share My Personal Information page or send a Global Privacy Control signal.
You can use an authorised agent. We will verify your identity before acting on a request, and respond within the time the law allows (generally 30 to 45 days). If we decline a request you may appeal by replying to our decision.
Canada and Australia
You can ask to access and correct your personal information, withdraw consent, and complain to the Office of the Privacy Commissioner of Canada or the Office of the Australian Information Commissioner.
To use any right, email support@deligatr.ai.
10. Free CRM plan communications
By registering for the free Deligatr CRM account, you agree to receive communications from Deligatr about our other products and services, including DeliChat, DeliMail, DeliReach and DeliVoice, via email, SMS or phone.
The free CRM plan stays free for accounts that stay opted in to hear from us. If you opt out of these communications, we may move your account to our paid plan ($197/month), and we will tell you before we do. You can opt back in at any time to stay on, or return to, the free plan.
This is separate from, and in addition to, the general marketing communications described above.
11. Security
We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls limited to authorised staff, and regular reviews. No system is completely secure. If a breach affects your personal information, we will notify you and the authorities where the law requires.
12. Children
Our website and services are for businesses and are not directed at anyone under 16. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.
13. Third-party links and embedded content
Our site links to and embeds third-party services, such as our booking calendar and social platforms. They have their own privacy practices and we are not responsible for them. We load the booking calendar only after you choose to, and optional tools only after you consent.
14. Changes and contact
We may update this policy. We will post the new version here with a new "Last updated" date and, for material changes, tell you through the site or by email.
Privacy questions, requests and complaints:
support@deligatr.ai
J&H Sales Solutions LLC, 30 N Gould Street, Sheridan, WY 82801, USA