PRIVACY POLICY

Last Updated: January 4, 2026

COMPANY INFORMATION:
Before Hello Events
Business License: CN-5375375
TRN: 104596487900003
Address: Abu Dhabi, Abu Dhabi, UAE
Email: sales@beforehello.com
Website: beforehello.com

=============================================================================

INTRODUCTION

Before Hello Events (“Before Hello”, “we”, “us”, or “our”) respects your privacy
and is committed to protecting your personal data. This Privacy Policy explains
how we collect, use, share, and protect information when you use our B2B cold
email campaign services and the app.beforehello.com platform (collectively, the
“Services”).

This Privacy Policy applies to:

• Visitors to our website (beforehello.com)
• Clients who subscribe to our Services
• Email recipients who receive campaigns sent through our infrastructure

Please read this Privacy Policy carefully. By using our Services, you agree to
the collection and use of information in accordance with this Privacy Policy.

=============================================================================

PART 1: INFORMATION WE COLLECT AND HOW WE USE IT

=============================================================================

1. INFORMATION COLLECTED FROM CLIENTS

1.1 Account and Business Information

When you subscribe to Before Hello’s Services, we collect:

• Contact Information: Name, email address, phone number
• Business Information: Company name, business address, website URL
• Billing Information: Payment method details (processed securely via Stripe)
• Account Credentials: Username and password for app.beforehello.com access

HOW WE USE THIS INFORMATION:

• To create and manage your account
• To provide customer support and respond to inquiries
• To process payments and maintain billing records
• To send service-related notifications and updates
• To improve our Services and user experience

LEGAL BASIS (GDPR): Contract performance and legitimate interests

1.2 Campaign Setup Information

To execute email campaigns on your behalf, we collect:

• Target Audience Criteria: Industry, company size, job titles, geographic
  locations, and other firmographic data
• Brand Assets: Company logo, colors, representative name for email signatures
• Email Content: Value propositions, product descriptions, messaging
• Physical Postal Address: Required for CAN-SPAM compliance in email footers
• Reply Forwarding Email: Where campaign replies should be sent

HOW WE USE THIS INFORMATION:

• To research and identify target prospects
• To configure email infrastructure (domains, mailboxes)
• To create and execute email campaigns according to your instructions
• To ensure compliance with email marketing laws

LEGAL BASIS (GDPR): Contract performance

1.3 Usage and Analytics Data

When you use app.beforehello.com, we automatically collect:

• Log Data: IP address, browser type, device information, pages visited
• Usage Data: Features used, actions taken, time spent on platform
• Performance Data: Campaign metrics (emails sent, opens, clicks, replies,
  bounces)

HOW WE USE THIS INFORMATION:

• To monitor and improve platform performance
• To identify and fix technical issues
• To analyze user behavior and optimize user experience
• To generate campaign performance reports for you

LEGAL BASIS (GDPR): Legitimate interests

1.4 Communications

When you contact us via email, chat, or phone:

• Communication Content: Your messages, questions, feedback, and support requests
• Communication Metadata: Date, time, and method of communication

HOW WE USE THIS INFORMATION:

• To respond to your inquiries and provide support
• To resolve technical or billing issues
• To improve our Services based on your feedback

LEGAL BASIS (GDPR): Legitimate interests and contract performance

=============================================================================

2. INFORMATION PROCESSED ON BEHALF OF CLIENTS (AS DATA PROCESSOR)

2.1 Prospect Contact Data

When we execute campaigns for you, we process:

• Names and email addresses of target prospects
• Job titles and company affiliations
• Phone numbers (if applicable)
• LinkedIn profiles or other public business information

IMPORTANT: You (the Client) are the Data Controller for this information. Before
Hello is the Data Processor acting solely on your instructions. We process this
data only to execute your email campaigns.

HOW WE PROCESS THIS DATA:

• Store contact lists in secure infrastructure
• Send emails via configured mailboxes
• Track delivery, opens, clicks, and replies
• Process opt-out and unsubscribe requests
• Provide performance analytics

LEGAL BASIS: We process this data based on your instructions as Data Controller.
You are responsible for ensuring you have lawful basis (legitimate interest,
consent, etc.) to contact these individuals.

2.2 Email Engagement Data

We track and process:

• Email delivery status (sent, delivered, bounced)
• Email opens and click-throughs
• Reply content forwarded to your designated mailbox
• Opt-out and unsubscribe requests

HOW WE USE THIS DATA:

• To provide campaign performance reporting to you
• To honor opt-out requests and maintain suppression lists
• To optimize email deliverability

LEGAL BASIS: Processing on behalf of Client (Data Controller)

2.3 Opt-Out and Suppression Lists

When recipients opt out of your campaigns:

• We record their email address in a suppression list
• We associate it with your Client account
• We retain this data permanently to ensure compliance

IMPORTANT: Suppression is per-Client. If a contact opts out from your campaigns,
they are suppressed only for your account, not globally across all Before Hello
clients.

LEGAL BASIS: Legal obligation and legitimate interests (compliance with email
marketing laws)

=============================================================================

3. INFORMATION WE DO NOT COLLECT

Before Hello does NOT collect or process:

• Sensitive personal data (health information, racial or ethnic origin,
  political opinions, religious beliefs, biometric data, genetic data)
• Financial account numbers, credit card details, or banking information
  (payment processing is handled securely by Stripe)
• Personal email addresses of consumers (we focus on B2B business contacts)
• Passwords for external services (we do not request access to your CRM, email,
  or other accounts)

=============================================================================

PART 2: HOW WE SHARE YOUR INFORMATION

=============================================================================

4. DATA SHARING AND DISCLOSURE

4.1 Third-Party Service Providers (Sub-processors)

We share data with trusted third-party service providers who assist in
delivering our Services:

• Email Infrastructure Platforms: For sending and tracking emails
• Cloud Hosting Providers: For secure data storage and platform hosting
• Payment Processors: Stripe for billing and subscription management
• Domain Registrars: For purchasing and managing email domains
• Email Verification Services: For validating contact data
• Analytics Tools: For monitoring platform performance

These providers are contractually obligated to:

• Process data only as instructed by Before Hello
• Implement appropriate security measures
• Comply with applicable data protection laws

A current list of sub-processors can be requested by contacting
sales@beforehello.com.

4.2 Business Transfers

If Before Hello is involved in a merger, acquisition, asset sale, or bankruptcy:

• Your information may be transferred to the acquiring entity
• We will notify you via email before your data is transferred
• The new entity will be bound by this Privacy Policy unless you consent to a
  new policy

4.3 Legal Requirements

We may disclose your information if required by law or in good faith belief that
such action is necessary to:

• Comply with legal obligations, court orders, or regulatory requests
• Protect and defend the rights or property of Before Hello
• Prevent fraud or investigate potential violations of our Terms of Service
• Protect the personal safety of users or the public

4.4 With Your Consent

We may share your information with third parties when you explicitly consent or
direct us to do so.

4.5 What We Do NOT Do

Before Hello does NOT:

• Sell or rent your personal information to third parties
• Share your data with advertisers or marketers
• Use your data for purposes unrelated to providing the Services
• Share Client campaign data with other Clients

=============================================================================

PART 3: DATA RETENTION AND DELETION

=============================================================================

5. HOW LONG WE KEEP YOUR DATA

5.1 Client Account Data

• Active Subscriptions: Retained for the duration of your subscription
• After Cancellation: Account data is retained for 30 days to allow for
  reactivation or data export
• After 30 Days: Permanently deleted unless retention is required by law

5.2 Campaign Data (Contact Lists, Performance Metrics)

• Active Campaigns: Retained for the duration of your subscription
• After Cancellation: Campaign data is retained for 30 days to allow for data
  export
• After 30 Days: Permanently deleted unless retention is required by law

5.3 Suppression Lists (Opt-Outs)

• Retention Period: PERMANENT
• Reason: We must honor opt-out requests indefinitely to comply with email
  marketing laws (CAN-SPAM, GDPR, CASL)
• Scope: Suppression lists are maintained per-Client, not globally

5.4 Financial Records

• Billing and payment records are retained for 7 years to comply with tax and
  accounting regulations

5.5 Legal and Compliance Data

We may retain certain data beyond the standard retention periods if required to:

• Comply with legal or regulatory obligations
• Resolve disputes or enforce our Terms of Service
• Maintain audit trails for security or fraud prevention

=============================================================================

PART 4: DATA SECURITY

=============================================================================

6. HOW WE PROTECT YOUR DATA

Before Hello implements industry-standard security measures to protect your
information:

6.1 Technical Security Measures

• Encryption in Transit: All data transmitted between your browser and our
  servers is encrypted using TLS/SSL (256-bit encryption)
• Encryption at Rest: Data stored in our databases and servers is encrypted
• Secure Authentication: Password-protected accounts with strong password
  requirements
• Access Controls: Role-based access ensures only authorized personnel can
  access data
• Secure API Integrations: All third-party integrations use encrypted
  connections
• Regular Security Updates: We apply security patches and updates promptly

6.2 Organizational Security Measures

• Employee Training: Staff receive security awareness training
• Confidentiality Agreements: All employees and contractors sign confidentiality
  agreements
• Principle of Least Privilege: Access to data is limited to what is necessary
  for job functions
• Incident Response Plan: We have procedures for detecting, responding to, and
  reporting security incidents
• Vendor Security Assessments: We evaluate the security practices of third-party
  service providers

6.3 Limitations

While we implement strong security measures, no system is 100% secure. We cannot
guarantee absolute security of data transmitted over the internet or stored
electronically. You are responsible for:

• Keeping your account credentials confidential
• Using a strong, unique password for your account
• Notifying us immediately of any unauthorized access to your account

=============================================================================

PART 5: YOUR RIGHTS AND CHOICES

=============================================================================

7. YOUR DATA PROTECTION RIGHTS

Depending on your location and applicable laws (such as GDPR), you may have the
following rights regarding your personal data:

7.1 Right to Access

You have the right to request a copy of the personal data we hold about you. To
request access, contact sales@beforehello.com.

7.2 Right to Rectification

If your personal data is inaccurate or incomplete, you have the right to request
corrections. You can update most information directly in your app.beforehello.com
account, or contact us for assistance.

7.3 Right to Erasure (“Right to be Forgotten”)

You may request deletion of your personal data in certain circumstances, such as:

• When the data is no longer necessary for the purposes it was collected
• When you withdraw consent (if consent was the legal basis for processing)
• When you object to processing and there are no overriding legitimate grounds

Note: We may be required to retain certain data for legal or regulatory
compliance (e.g., financial records for tax purposes).

7.4 Right to Restrict Processing

You may request that we limit how we use your data in certain situations, such
as when you contest the accuracy of the data or object to processing.

7.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used,
and machine-readable format (CSV or JSON) and to transmit that data to another
controller.

To request data export, contact your account manager or email
sales@beforehello.com.

7.6 Right to Object

You have the right to object to processing of your personal data when:

• Processing is based on legitimate interests
• Data is used for direct marketing purposes

To exercise your right to object, contact sales@beforehello.com.

7.7 Right to Withdraw Consent

If we process your data based on your consent, you have the right to withdraw
that consent at any time. Withdrawal does not affect the lawfulness of
processing before withdrawal.

7.8 Right to Lodge a Complaint

If you believe we have violated data protection laws, you have the right to
lodge a complaint with your local data protection authority.

For EU residents:

• Contact your national Data Protection Authority
• List of EU Data Protection Authorities:
  https://edpb.europa.eu/about-edpb/board/members_en

For UAE residents:

• UAE Data Office: https://www.uaedataoffice.ae/

7.9 How to Exercise Your Rights

To exercise any of these rights, please contact us at:
Email: sales@beforehello.com
Subject Line: “Data Protection Rights Request”

Include in your request:

• Your full name and email address associated with your account
• Specific right you wish to exercise
• Any relevant details or documentation

We will respond to your request within 30 days.

=============================================================================

8. COOKIES AND TRACKING TECHNOLOGIES

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website.
They help us recognize your browser and remember certain information.

8.2 How We Use Cookies

Before Hello uses cookies for:

• Essential Cookies: Required for the platform to function (e.g., maintaining
  your login session)
• Analytics Cookies: To understand how users interact with our platform and
  identify areas for improvement
• Performance Cookies: To monitor platform performance and identify technical
  issues

8.3 Third-Party Cookies

Some third-party service providers (e.g., analytics tools) may set cookies on
your device when you use our Services.

8.4 Your Cookie Choices

Most web browsers allow you to control cookies through settings. You can:

• Block all cookies
• Delete existing cookies
• Set preferences for specific websites

Note: Blocking essential cookies may prevent you from using certain features of
the Services.

8.5 Do Not Track

Some browsers have a “Do Not Track” feature. Currently, there is no industry
standard for how to respond to Do Not Track signals. Before Hello does not
respond to Do Not Track signals at this time.

=============================================================================

PART 6: SPECIAL NOTICES

=============================================================================

9. NOTICE TO EMAIL RECIPIENTS

If you received a marketing email sent through Before Hello’s infrastructure,
this section applies to you.

9.1 Who Is Responsible?

• DATA CONTROLLER: The company that sent you the email (not Before Hello)
• DATA PROCESSOR: Before Hello provides the technical infrastructure only

The sending company (our Client) is responsible for:

• Determining who to contact and why
• Ensuring they have a lawful basis to contact you
• The content of the message
• Their privacy practices

9.2 How to Opt Out

To stop receiving emails from the sender:

• Reply “UNSUBSCRIBE” to any email: Our system automatically detects replies and
  suppresses you from future campaigns from that sender
• Contact the sender directly: Reach out to the company that sent the email

Important: Opting out applies only to the specific sender. You may still receive
emails from other companies using Before Hello’s services.

9.3 Your Rights

As an email recipient, you have rights under data protection laws including:

• Right to access your data
• Right to request deletion
• Right to object to processing

To exercise these rights:

• Contact the company that sent you the email (they are the Data Controller)
• Contact Before Hello at sales@beforehello.com and we will forward your request
  to the relevant Client

9.4 Complaints

If you believe the emails you received violate data protection laws:

• Contact the sending company directly
• Lodge a complaint with your local data protection authority
• Contact Before Hello at sales@beforehello.com

=============================================================================

10. INTERNATIONAL DATA TRANSFERS

10.1 Where We Process Data

Before Hello is based in Abu Dhabi, United Arab Emirates. We process and store
data in jurisdictions where we and our third-party service providers operate,
including:

• United Arab Emirates
• Locations where cloud infrastructure providers maintain data centers

10.2 Transfers Outside the EEA/UK

If you are located in the European Economic Area (EEA) or United Kingdom, your
personal data may be transferred to countries outside the EEA/UK that may not
have equivalent data protection laws.

When we transfer data outside the EEA/UK, we ensure appropriate safeguards are
in place:

• Standard Contractual Clauses (SCCs): We use European Commission-approved SCCs
  with our service providers
• Adequacy Decisions: We rely on adequacy decisions where applicable
• Other Lawful Transfer Mechanisms: As permitted by GDPR

10.3 Request Transfer Safeguards

If you would like a copy of the safeguards in place for international data
transfers, contact sales@beforehello.com.

=============================================================================

11. CHILDREN’S PRIVACY

The Services are not intended for individuals under the age of 18. Before Hello
does not knowingly collect personal data from children.

If we become aware that we have collected data from a child under 18, we will
take steps to delete that information promptly.

If you believe we have collected data from a child, please contact us at
sales@beforehello.com.

=============================================================================

12. CALIFORNIA PRIVACY RIGHTS (CCPA)

If you are a California resident, you have additional rights under the
California Consumer Privacy Act (CCPA):

12.1 Right to Know

You have the right to request:

• Categories of personal information we collect
• Sources from which we collect personal information
• Business purposes for collecting personal information
• Categories of third parties with whom we share personal information

12.2 Right to Delete

You have the right to request deletion of your personal information, subject to
certain exceptions.

12.3 Right to Opt-Out of Sale

Before Hello does NOT sell personal information. We do not sell, rent, or share
your personal information with third parties for their marketing purposes.

12.4 Right to Non-Discrimination

You have the right to not be discriminated against for exercising your CCPA
rights.

12.5 How to Exercise Your Rights

To exercise your CCPA rights, contact us at:
Email: sales@beforehello.com
Subject Line: “California Privacy Rights Request”

We will respond within 45 days.

12.6 Authorized Agent

You may designate an authorized agent to make requests on your behalf. The
authorized agent must provide proof of authorization.

=============================================================================

13. CHANGES TO THIS PRIVACY POLICY

Before Hello may update this Privacy Policy from time to time to reflect:

• Changes in our data practices
• Changes in applicable laws or regulations
• New features or services we offer
• Feedback from users or regulators

13.1 How We Notify You

When we make material changes to this Privacy Policy:

• We will update the “Last Updated” date at the top of this policy
• We will send an email notification to the address associated with your account
• For significant changes, we may display a prominent notice on our website or
  platform

13.2 Your Acceptance

Your continued use of the Services after we post changes to this Privacy Policy
constitutes your acceptance of the updated policy.

If you do not agree with the changes, you may cancel your subscription as
described in our Terms of Service.

=============================================================================

14. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or
our data practices, please contact us:

Before Hello Events
Email: sales@beforehello.com
Subject Line: “Privacy Policy Inquiry”

Mailing Address:
Before Hello Events
Business License: CN-5375375
TRN: 104596487900003
Abu Dhabi, Abu Dhabi, UAE

We will respond to your inquiry within 30 days.

=============================================================================

SUMMARY OF KEY POINTS

• We collect account information, campaign data, and usage analytics
• We act as Data Processor for prospect contact data (you are the Data
  Controller)
• We share data with service providers necessary to deliver our Services
• We do not sell your personal information
• Campaign data is deleted 30 days after cancellation
• Suppression lists are retained permanently for compliance
• We use industry-standard security measures to protect your data
• You have rights to access, correct, delete, and export your data
• Email recipients can opt out by replying “UNSUBSCRIBE”

=============================================================================

BY USING BEFORE HELLO’S SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ AND
UNDERSTOOD THIS PRIVACY POLICY.

=============================================================================

Last Updated: January 4, 2026

Before Hello Events
Business License: CN-5375375
TRN: 104596487900003
Abu Dhabi, Abu Dhabi, UAE
sales@beforehello.com
beforehello.com

=============================================================================