Legal
Privacy policy — Preliator.ai
Trade name of Voss & Aarnoudse Holding B.V.
Version: 29 September 2026 — KvK: 64318273 — Registered address: Edisonweg 12A, 2952 AD Alblasserdam, the Netherlands
1. Introduction
This Privacy Policy explains how Voss & Aarnoudse Holding B.V., trading as Preliator.ai ("Preliator", "we", "us" or "our"), collects, uses, stores and shares personal data.
Preliator provides a business-to-business software platform that helps customers identify relevant business prospects, analyse business information, generate AI-assisted content and create email drafts and other sales-related workflows.
Because personal data can enter Preliator in different ways, this Privacy Policy distinguishes between:
- Part A — Customers and Users: individuals who create an account, use Preliator, visit our website or otherwise interact directly with us.
- Part B — Business Contacts and Prospects: individuals whose professional information is retrieved or processed through Preliator for business-to-business prospecting purposes.
The General Provisions at the end of this Policy apply to both groups where relevant.
Part A — Customers and Users
A.1 Who is responsible for your data?
Voss & Aarnoudse Holding B.V., trading as Preliator.ai, is the data controller for the personal data described in this Part A where we determine the purposes and means of processing.
For certain information that a customer submits to or processes through Preliator, we may instead act as a processor on behalf of that customer. In those circumstances, the customer remains responsible as controller for its processing activities and our processing is governed by our agreement with that customer.
A.2 Personal data we collect
Depending on how you use Preliator, we may process the following categories of personal data.
Account and profile data
This may include your name, business email address, company name, billing details, account identifiers and authentication information.
Payment and subscription data
Payments are processed through Mollie. We may receive payment status, transaction identifiers, subscription information and limited billing information. We do not store full payment card details ourselves.
Integration and connection data
If you connect a third-party account or service to Preliator, we may process identifiers, authorisation information, OAuth tokens, permissions and other information necessary to operate that integration.
This includes integrations with services such as Google/Gmail and Microsoft/Outlook.
User-provided and generated content
We may process prompts, instructions, company information, campaign settings, prospect information, generated email drafts and other information that you enter into, upload to or generate using the Service.
Usage and technical data
This may include IP address, browser and device information, log data, timestamps, pages or features used, interactions with the Service, security events and information about usage of Preliator functionality.
Communications
We process information you provide when contacting us, including support requests, feedback and other correspondence.
Marketing data
Where applicable, we process your business contact information, marketing preferences and information about your interactions with our marketing communications.
A.3 Why we process your data
We process personal data for the following purposes and legal bases.
Performance of a contract
We process information where necessary to provide Preliator and perform our agreement with you or your organisation, including:
- creating and managing accounts;
- providing prospecting and research functionality;
- generating AI-assisted content;
- creating email drafts;
- operating connected integrations;
- providing customer support;
- administering subscriptions and billing; and
- maintaining the functionality of the Service.
Legitimate interests
Where appropriate, we process information based on our legitimate interests, including:
- securing Preliator and preventing fraud and abuse;
- monitoring performance and reliability;
- diagnosing technical problems;
- improving our Service;
- maintaining appropriate business records; and
- understanding how customers use Preliator.
Where we rely on legitimate interests, we consider whether our interests are outweighed by the rights and interests of the individuals concerned.
Consent
We rely on consent where required, including for certain analytics or other non-essential cookies and certain marketing activities.
You may withdraw consent at any time. Withdrawal does not affect processing that lawfully took place before consent was withdrawn.
Legal obligations
We process certain information where necessary to comply with legal, accounting, tax, regulatory or other statutory obligations.
A.4 Artificial intelligence
Preliator uses artificial-intelligence services as part of its functionality.
Our AI providers include OpenAI and Anthropic.
When an AI-powered feature is used, information necessary to perform the requested task may be transmitted to one or more of these providers.
Depending on the feature, this information may include:
- prompts and instructions;
- company information;
- business prospect information;
- professional contact information;
- generated content;
- email draft content; and
- other information necessary to perform the requested task.
We seek to limit the information transmitted to AI providers to information reasonably necessary to provide the relevant functionality.
Preliator does not use customer mailbox content or prospect data to train its own general-purpose artificial-intelligence models.
Where third-party AI providers process information on our behalf, their processing is subject to their applicable contractual and data-protection terms.
A.5 Google and Gmail integration
Users may choose to connect a Google or Gmail account to Preliator.
Preliator requests only the permissions necessary to provide the functionality shown to the User. Where the enabled functionality permits Preliator to create email drafts, the relevant authorisation is used for that purpose.
Preliator does not use Google Workspace data for advertising, sell Google Workspace data, or use Google Workspace data to train general-purpose artificial-intelligence models.
Information obtained through Google Workspace APIs is used only as necessary to provide or improve the user-facing functionality authorised by the User, for security purposes, where required by law, or as otherwise permitted by Google's applicable policies.
Preliator's use and transfer of information received from Google Workspace APIs adheres to the Google User Data Policy, including the Limited Use requirements.
Users can revoke Preliator's Google access through their Google account settings and, where available, through Preliator's integration settings.
A.6 Microsoft and Outlook integration
Users may choose to connect a Microsoft or Outlook account to Preliator.
Preliator processes the authentication information, permissions and other information necessary to provide the functionality explicitly authorised by the User.
Where the enabled functionality allows Preliator to create email drafts, access is used for that purpose.
Users can revoke Preliator's access through their Microsoft account and, where available, through Preliator's integration settings.
A.7 Other integrations
Preliator may offer integrations with additional third-party services.
Integrations are optional unless explicitly stated otherwise. When a User enables an integration, Preliator may exchange information with the relevant third-party provider to provide the requested functionality.
The information exchanged depends on the integration and the permissions authorised by the User.
We seek to request only the permissions and information reasonably necessary to provide the relevant integration.
Third-party services may separately process information under their own terms and privacy policies where they act as independent controllers.
A.8 Analytics
We use Google Analytics to understand how visitors and Users interact with our website and Service.
Depending on your settings and consent choices, Google Analytics may process information such as:
- device and browser information;
- IP-derived or approximate location information;
- pages viewed;
- interactions with our website;
- session information;
- referral information; and
- cookie or similar online identifiers.
Where legally required, non-essential analytics technologies are activated only after consent has been provided.
You can withdraw or modify your consent through the cookie or privacy settings made available on our website.
We do not intentionally send names, business email addresses, prospect records, generated email content or other directly identifying prospect information to Google Analytics.
A.9 Email communications
We use different providers for different types of email communication.
Transactional and service emails
We use Resend as an email infrastructure provider for transactional and service-related communications, such as account notifications, authentication messages and other communications necessary to operate Preliator.
Marketing communications
We use Brevo to manage marketing mailing lists and send marketing communications relating to Preliator.
Where required by law, we send marketing communications only with appropriate consent or another applicable legal basis.
You can unsubscribe from marketing emails at any time using the unsubscribe mechanism contained in the relevant communication.
Unsubscribing from marketing communications does not prevent us from sending necessary transactional, security, account or service-related communications.
A.10 Payments
Payments are processed through Mollie B.V.
Mollie may process payment information as an independent controller in accordance with its own privacy documentation and applicable law.
Preliator generally receives information such as payment status, transaction identifiers and limited billing information rather than complete payment-card information.
A.11 Service providers
We use third-party providers to operate Preliator.
Our material providers currently include:
- Vercel — hosting, application infrastructure and delivery;
- OpenAI — artificial-intelligence functionality;
- Anthropic — artificial-intelligence functionality;
- Google — Google Analytics and optional Google/Gmail integrations;
- Microsoft — optional Microsoft/Outlook integrations;
- Resend — transactional and service email infrastructure;
- Brevo — marketing communications and mailing-list management; and
- Mollie — payment processing.
Some providers act as processors or subprocessors on our behalf, while others may act as independent controllers for specific processing activities.
Where required by applicable data-protection law, we enter into appropriate contractual arrangements with processors and subprocessors.
Our service providers may change as Preliator develops.
A.12 Retention of customer and User data
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including applicable legal, accounting, security and dispute-resolution requirements.
Unless a different period is required or justified:
- account data is retained for the duration of the customer relationship and generally for up to two years afterwards where necessary for administration, dispute resolution or legal claims;
- billing and invoice records are generally retained for seven years where required under Dutch tax law;
- OAuth tokens are deleted or invalidated when the relevant integration is disconnected or the account is closed, subject to technical and security requirements;
- operational and security logs are generally retained for up to twelve months unless longer retention is reasonably necessary for security, fraud prevention, incident investigation or legal obligations;
- marketing information is retained until consent is withdrawn, an objection is made, or the information is no longer necessary, subject to retaining limited suppression information where necessary to respect an opt-out.
Where information is processed by a third-party provider, that provider may apply its own limited technical, security, backup or legal retention periods.
A.13 Your rights
Depending on the circumstances and applicable law, you may have the right to:
- access your personal data;
- obtain correction of inaccurate data;
- request deletion of personal data;
- restrict processing;
- object to processing based on legitimate interests;
- receive certain personal data in a portable format;
- withdraw consent where processing is based on consent; and
- lodge a complaint with a competent supervisory authority.
Requests can be submitted to info@preliator.ai.
We may need to verify your identity before completing a request.
Part B — Business Contacts and Prospects
B.1 Why Preliator may have information about you
Preliator provides business-to-business prospecting functionality.
When a Preliator User requests information about potential business prospects, Preliator may retrieve professional information about relevant individuals from publicly accessible sources and/or third-party data sources.
Information retrieved through this process may subsequently be stored within Preliator.
You therefore do not necessarily need to have created a Preliator account, visited our website or interacted directly with Preliator for us to process professional information relating to you.
B.2 Information we may process
Depending on what information is available and relevant to the User's request, we may process:
- name;
- professional email address;
- job title or professional role;
- employer or organisation;
- company information;
- publicly available professional information;
- information about the source from which the information was obtained;
- prospecting and campaign-related information associated with the relevant business contact; and
- AI-generated content associated with the prospecting workflow.
Preliator is designed for business-to-business use.
We do not intentionally seek to collect special categories of personal data, such as information about health, religion, political opinions, ethnicity, sexual orientation or similar sensitive characteristics, as part of our ordinary prospecting functionality.
B.3 Sources of prospect information
Professional information may be obtained from publicly accessible and/or third-party business information sources.
These may include:
- company and organisational websites;
- public business registers and directories;
- publicly accessible professional information;
- publicly available professional profiles; and
- other business information sources available to Preliator or its Users.
Where required by applicable law, information about the source or categories of sources can be provided upon request.
B.4 Why we process prospect information
Prospect information is processed to provide business-to-business prospecting, research and outreach functionality to Preliator customers.
Depending on the particular processing activity, the relevant legal basis may include legitimate interests under Article 6(1)(f) GDPR.
Those legitimate interests may include enabling businesses to identify relevant professional contacts, conduct proportionate business-to-business research and prepare relevant business communications.
When relying on legitimate interests, consideration is given to the professional nature of the information, its source, the context in which it was made available, the reasonable expectations of the individual, the nature of the proposed communication, safeguards applied by Preliator and the individual's ability to object.
The fact that professional information is publicly available does not by itself remove the protections provided by data-protection law.
B.5 What happens to prospect information
When a User performs a prospect search or other relevant action, Preliator may retrieve information matching the User's request.
Retrieved information may then be stored in Preliator's database.
It may subsequently be used to:
- display relevant business prospects to the User;
- support business research;
- prevent unnecessary repeated retrieval of the same information;
- generate AI-assisted analysis or content;
- generate personalised business email drafts;
- maintain relevant prospect and campaign records; and
- provide related functionality requested by the User.
Depending on the feature used, relevant information may be processed through our AI providers, including OpenAI and Anthropic.
Where a User has connected an authorised email integration, generated content may also be transferred to that integration as necessary to provide the requested functionality.
Preliator does not sell prospect personal data to advertisers or use prospect personal data for consumer advertising.
B.6 Human review and outreach
AI-generated content is intended to assist Preliator Users.
Preliator does not automatically determine whether an individual should enter into a contract, receive credit, obtain employment or be subject to another decision producing legal or similarly significant effects.
Where Preliator creates an email draft, the User remains responsible for reviewing the content and determining whether and how the communication is used.
Customers are responsible for ensuring that their subsequent use of prospect information and their communications comply with applicable laws, including applicable marketing and electronic-communications rules.
B.7 Information provided to prospects
Where GDPR Article 14 or another applicable transparency obligation requires information to be provided because personal data was not obtained directly from the individual, the required information will be provided within the applicable legal timeframe.
Where prospect information is used to communicate with an individual, the required privacy information should be provided no later than the first communication where applicable.
Where no earlier communication or disclosure occurs, applicable GDPR transparency information will generally be provided within one month of obtaining the personal data, unless a lawful exception applies.
This Privacy Policy is intended to provide detailed information about Preliator's processing and may be linked from relevant communications or notices.
B.8 Retention of prospect information
Prospect information is not intended to be retained indefinitely.
Unless continued retention is necessary for an ongoing customer relationship, legal obligation, security requirement, dispute or another legitimate and documented purpose, prospect information is generally retained for a maximum of 12 months after collection or the last relevant activity involving that prospect, after which it is deleted or anonymised.
Where an individual validly objects to processing for direct-marketing purposes, we may retain limited information in a suppression record rather than deleting every reference to the individual. This allows us to remember and respect the objection and helps prevent the person's information from being re-added for the same purpose.
Suppression information is used only for compliance with the objection and related legal obligations.
B.9 Right to object
Where processing is based on legitimate interests, you have the right to object to the processing based on grounds relating to your particular situation.
Where personal data is processed for direct-marketing purposes, you have the right to object at any time to processing for that purpose.
Once a valid direct-marketing objection applies, the relevant personal data will no longer be processed for that direct-marketing purpose.
You can submit an objection free of charge by contacting:
B.10 Other rights of prospects
Depending on the circumstances, you may also have the right to:
- request confirmation of whether we process information about you;
- access personal data we hold about you;
- request correction of inaccurate information;
- request deletion;
- request restriction of processing;
- receive information about the source of your data;
- receive information about recipients or categories of recipients;
- exercise applicable data-portability rights; and
- lodge a complaint with a competent supervisory authority.
We may request information reasonably necessary to verify your identity before fulfilling a request.
General Provisions
2. International transfers
Preliator uses service providers located both within and outside the European Economic Area ("EEA").
This means personal data may in some circumstances be processed in countries outside the EEA.
Where personal data is transferred to a country for which the European Commission has not adopted an applicable adequacy decision, we use an appropriate transfer mechanism where required by law.
Depending on the circumstances, these safeguards may include the European Commission's Standard Contractual Clauses or another legally recognised transfer mechanism.
Additional technical and organisational safeguards may be applied where appropriate.
3. Security
We implement technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Measures may include, where appropriate:
- encryption in transit and at rest;
- access controls;
- authentication and authorisation controls;
- secure software-development practices;
- logging and monitoring;
- vulnerability and security testing;
- incident-response procedures;
- backups and resilience measures; and
- periodic review of security controls.
No online service can guarantee absolute security.
4. Personal data breaches
We maintain procedures for identifying, investigating and responding to personal-data breaches.
Where a personal-data breach is likely to result in a risk to the rights and freedoms of individuals, we will notify the competent supervisory authority where required by law.
Where a breach is likely to result in a high risk to affected individuals, we will also notify those individuals where required.
5. Cookies and similar technologies
Preliator may use cookies and similar technologies.
These can include:
- Strictly necessary technologies required for authentication, security, session management and operation of the Service.
- Preference technologies used to remember settings and preferences.
- Analytics technologies used to understand how our website and Service are used.
Where consent is legally required, non-essential technologies are not activated until the required consent has been obtained.
Users can manage or withdraw relevant consent at any time via cookie settings.
Additional information may be provided in our Cookie Policy or cookie settings.
6. Automated decision-making
Preliator uses artificial intelligence to assist with activities such as analysis, prospect research and content generation.
These features are not intended to make decisions producing legal or similarly significant effects about individuals within the meaning of Article 22 GDPR.
AI-generated outputs should be reviewed by the relevant User before being relied upon or used for external communication.
7. Children's privacy
Preliator is a business-to-business Service and is not intended for children.
We do not knowingly use Preliator's prospecting functionality to collect personal data relating to children.
If we become aware that children's personal data has been processed contrary to this Policy, we will take appropriate steps to remove it.
8. Sale of personal data
Preliator does not sell personal data to advertisers or data brokers.
We may disclose personal data to service providers and integration providers as necessary to operate the Service and for the other purposes described in this Policy.
We may also disclose information where required by law, to protect legal rights or security, or in connection with a corporate transaction such as a merger, acquisition, restructuring or sale of assets, subject to applicable legal requirements.
9. Changes to this Privacy Policy
We may update this Privacy Policy when our Service, processing activities, providers or legal obligations change.
The current version will be published on our website with its effective date.
Where changes materially affect how we process personal data, we will provide additional notice where required by applicable law.
10. Supervisory authority
Individuals have the right to lodge a complaint with the competent data-protection supervisory authority.
Our principal supervisory authority in the Netherlands is:
Autoriteit Persoonsgegevens
You may also have the right to complain to the competent supervisory authority in the country where you live, work or where you believe an infringement has occurred.
11. Contact
Questions about this Privacy Policy, our processing of personal data, or the exercise of privacy rights can be directed to:
Voss & Aarnoudse Holding B.V.
Trading as Preliator.ai
Chamber of Commerce (KvK): 64318273
Edisonweg 12A
2952 AD Alblasserdam
The Netherlands
Email: info@preliator.ai