Privacy Policy
Last updated: 22 October 2026.
1. Who we are
Answrd (answrd.co) is a service run by Profitbl SARL-S, a société à responsabilité limitée simplifiée under Luxembourg law, registered office 6 Place des Villes Jumelées, L-5627 Mondorf-les-Bains, Luxembourg, R.C.S. Luxembourg B276593, VAT LU34835913. In this policy, "we", "us" and "Answrd" mean Profitbl SARL-S.
Contact for any privacy question: hello@answrd.co. You can also write to us at the address above.
We have not appointed a data protection officer. Our privacy contact handles all requests.
2. Who this policy is for
- Website visitors: people who visit answrd.co.
- Portal users: people who create an account and use the Answrd portal for their company.
- People whose phone numbers are checked: business contacts whose details a customer uploads so we can check the phone number.
If you received a call from us to check a number, go straight to sections 5 and 7.
3. Website visitors
What we collect
- Technical data your browser sends: IP address, browser type, device, pages viewed, time of visit.
- Cookies: the portal uses only what it needs to work (your sign-in session, and a referral code kept in your browser for 30 days if you came through a referral link). If we use analytics or advertising cookies on answrd.co, we ask for your consent first.
Why and on what legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Show the website and keep it secure | Legitimate interest: running a working, safe website |
| Measure visits and improve the site | Consent, only if you accept analytics cookies |
| Answer a message you send us | Legitimate interest, or steps before a contract |
4. Portal users
What we collect
- Name, work email address and company.
- Sign-in data. We store your password in hashed form only.
- Billing data: billing contact, company name, address, VAT number, invoices, credit purchases and credit balance. Card payments are handled by Stripe. We do not store card numbers.
- Usage data: lists uploaded, results downloaded, credits used, sign-in times, and technical logs.
- Your choices: Terms accepted (version, date, time, IP address and browser), marketing email choice, and logo display choice.
- Messages you send to our support.
Why and on what legal basis
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Create and run your account, deliver results, send service emails | Contract with your company (Art. 6(1)(b)), and our legitimate interest in serving our business customer where you are not the contracting party yourself |
| Check that a free trial goes to one company only and that a work email is used | Legitimate interest: preventing abuse of the free trial |
| Take payments, issue invoices, keep accounting and tax records | Legal obligation (Art. 6(1)(c)) under Luxembourg accounting and VAT law |
| Send marketing emails about Answrd | Consent (Art. 6(1)(a)). You can withdraw it at any time with the link in each email or in your profile |
| Show your company's name and logo as a customer | Contract with your company (Terms section 12). Your company can switch it off at any time |
| Keep the service secure, detect fraud, fix problems | Legitimate interest: protecting the service and our customers |
| Handle claims and disputes | Legitimate interest: defending our legal rights |
5. People whose phone numbers are checked
What Answrd does
Our customers are businesses with sales teams. They upload a list of business contacts. Each line has a first name, last name, job title, company and phone number. Our job is to tell the customer whether the number reaches the right person.
We first run a network check (an "HLR lookup") to see if the number exists. If it does, a trained person on our team (a "verifier") calls the number, up to 5 times. The verifier asks for the named person, or listens to the voicemail greeting. We do not sell anything on the call. If you ask why we called, the verifier tells you who we are and how to stop further calls.
Calls are made from the European Union. Calls may be recorded in our calling system to check quality and prove the result. Recordings are kept for no more than 90 days. Only our verification team can access them.
We then give the customer one result per number: P1 (right person picked up), P2 (voicemail greeting names the person), P3 (not proved), Bad (wrong person, left the company, switchboard, or a private line the person asked us not to use), or Invalid number (does not exist on the network).
Who is responsible for your data
For the list the customer uploads, the customer is the controller. The customer decides to collect your details and to have your number checked. We act as the customer's processor, under a data processing agreement. The customer must tell you how it uses your data and on what legal basis. If you ask us, we forward your request to the customer and, where the law allows, tell you which customer it was.
For some data, we are the controller. We keep two things for our own purposes:
- A do-not-call list. If you ask us not to call you, we keep your number, and your name, the date and the reason if you give them, so we never call it again, for any customer.
- Phone validity data. We keep a record that a number did or did not reach a named person, with the date and result. Some of this comes from Profitbl's own sales outreach work. We may reuse a result up to 12 months old for the same person and number instead of calling you again. This means fewer calls to you.
Legal basis for our own processing
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Keep a do-not-call list and respect it | Legitimate interest in respecting objections, and our duty to honour your objection (Art. 21) |
| Keep phone validity data and reuse a prior result for the same person | Legitimate interest: accurate results and fewer repeat calls to the same person. We have written a legitimate interest assessment. You can ask for a summary |
Where we got your data
From our customer, who uploaded it, and from the call itself (what we hear during the call). Validity data may also come from Profitbl's own past outreach calls.
Automated decisions
None. A person makes each call and records the result. The network check is automatic but only tells us if the number exists.
6. Who we share data with
- Our customers: they receive the results for the lists they uploaded.
- Our service providers (sub-processors): hosting, database, calling system, network check, payments, email. The current list is at /subprocessors.
- Authorities and advisers: when the law requires it, or to defend our rights.
We do not sell personal data.
7. How to stop us calling you
You can ask us to stop calling your number at any time. It is free.
- Tell the verifier during the call. They mark your number as do-not-call at once.
- Or email hello@answrd.co with the phone number. Put "Do not call" in the subject.
What happens next:
- We add your number to our do-not-call list within 2 business days.
- We will not call that number again, for any customer.
- If a customer later uploads your number, we do not dial it and the customer is not charged.
- We tell the customer the number should not be used, by marking it "Bad".
We keep only what we need to honour your request. If we deleted your number entirely, we could call you again by mistake.
8. How long we keep data
| Data | How long |
|---|---|
| Portal account data, uploaded lists and results | While the account is open. Deleted within 30 days after the account closes, or sooner if the customer deletes a list |
| Internal call data used to produce results (call logs, notes) | Deleted or anonymised within 30 days after the results are delivered |
| Call recordings | Up to 90 days |
| Do-not-call list | As long as needed to honour the request |
| Phone validity data kept by Profitbl | 12 months from the last check |
| Invoices and accounting records | 10 years, as Luxembourg accounting law requires |
| Terms acceptance and marketing consent records | As long as the account or subscription lasts, plus 3 years to prove consent |
| Website and technical logs | Up to 90 days |
| Backups | Overwritten on their normal cycle, within 30 days |
9. Transfers outside the EU
We keep data in the EU where we can. Some providers are based in the United States or may give access from outside the EU (for example Stripe, Webflow, Google and Supabase). Where that happens, we rely on the EU-US Data Privacy Framework or on the European Commission's Standard Contractual Clauses. See /subprocessors.
10. Security
We use encrypted connections, encryption at rest by our database provider, database rules that keep each customer's data separate, and limited staff access. Verifiers only see the data they need to make the call.
11. Your rights
Under the GDPR you can ask us to:
- give you a copy of your data (access);
- correct it (rectification);
- delete it (erasure);
- limit how we use it (restriction);
- give it to you in a usable format (portability), where this applies;
- stop using it based on our legitimate interest (objection);
- stop sending marketing, at any time;
- withdraw consent, at any time, without affecting what we did before.
Email hello@answrd.co. We answer within one month. We may ask you to prove who you are.
If your request is about a list a customer uploaded, we pass it to that customer and help them answer it. If you object to being called, we add you to our do-not-call list at once in any case.
You can also complain to the Luxembourg data protection authority, the Commission nationale pour la protection des données (CNPD), cnpd.public.lu, or to the authority in the country where you live or work.
12. Age
Answrd is a business service. It is not meant for anyone under 18.
13. Changes to this policy
We may update this policy. We will post the new version here and change the date above. If the change is important, we will tell portal users by email.