Policy Center
GDPR & Data Requests
Last updated July 22, 2026
Our commitment under the GDPR
Pullyflow supports your compliance with the EU General Data Protection Regulation and comparable laws such as the UK GDPR and the CCPA/CPRA. This page explains how we handle data-processing and data-subject requests and how you can exercise your rights.
Your rights
Subject to applicable law, you have the right to access, rectify, erase, restrict, and object to processing of your personal data, and the right to data portability. For account data, Pullyflow is the controller; for lead and contact records, the customer who compiled them is the controller and Pullyflow acts on their instructions.
How to make a request
You can exercise most rights directly in the product. To erase your account and personal data, use the Delete account action in your account settings — this anonymizes your personal data (GDPR erasure), ends your session, and keeps only a hashed, non-identifying audit record. You can also email privacy@pullyflow.com.
Erasure and anonymization
When we honor an erasure request we anonymize the personal data we hold rather than leaving fields intact, and we retain only what is necessary to prove the erasure occurred and to meet legal obligations. Where you are the controller of lead records, you can delete those records and add individuals to a suppression list so they stay out of future results.
Response times
We respond to verified data-subject requests within 30 days, and to removal requests for compiled lead records within 45 days, extending only where the law permits and with notice to you.
Data Protection contact
For any GDPR or data-processing matter, contact our privacy team at privacy@pullyflow.com. If you are located in the EEA or UK and are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority.
Questions about this document? Email privacy@pullyflow.com.