Privacy Policy

1. Information we collect

Information you give us. Name, business email address, business phone number, employer, job title, country, and any free-text content you submit through a contact, demo-request, partner-inquiry, careers, support, security, press, or general-purpose form. If you apply for a job, we additionally collect your resume / CV, cover letter, work history, references, and any information you choose to share.

Information collected automatically. IP address, approximate location derived from IP, browser type and version, operating system, device type, referring URL, pages viewed, time on page, click events, and similar telemetry. Some of this is collected directly by us; some is collected by service providers using cookies, pixels, and similar technologies (see Section 6).

Information from third parties. When you interact with us via LinkedIn or another business-network platform, we may receive limited profile information that you have made available. When a reseller or partner registers an opportunity with us on your behalf, we receive the contact information they share.

Sensitive personal information. We do not knowingly collect government identifiers, financial account numbers, biometric data, precise geolocation, health data, or information about race, ethnicity, religion, union membership, sexual orientation, or political views through this Site. Please do not submit sensitive personal information through our forms.

2. How we use information

• respond to your inquiry, demo request, or support request;
• schedule meetings and follow-up communications related to your inquiry;
• send marketing communications about L2H products, events, and content where permitted by applicable law (with consent where required);
• operate, secure, debug, and improve the Site;
• measure marketing campaign performance in aggregate;
• recruit, evaluate, and onboard candidates for open roles;
• conduct research analysis and produce internal reporting;
• establish, exercise, or defend legal claims;
• comply with legal obligations and respond to lawful requests; and
• prevent, investigate, or address fraud, abuse, security, or other harmful activity.

We do not use personal information collected through the Site to train, fine-tune, or evaluate machine-learning models without your separate, opt-in consent.

3. Legal bases (GDPR / UK GDPR)

Where the GDPR or UK GDPR applies, we rely on the following legal bases: (a) consent for non-essential cookies, marketing emails where consent is required, and event registrations; (b) contract performance for follow-up to your inquiry, demo, or support request; (c) legitimate interests in operating, securing, and improving the Site, in B2B marketing where permitted, and in defending our legal interests; and (d) legal obligation for compliance with applicable law.

4. How we share information

We do not sell personal information for monetary consideration. We share personal information with:

• Service providers / processors who host or operate the Site or marketing infrastructure on our behalf. The current list is in our Subprocessors page and includes (without limitation) HubSpot (CRM, forms, meetings), Vercel (hosting), Google (Workspace, Analytics), Microsoft Clarity (session analytics, where enabled with consent), and LinkedIn (Insight Tag, where enabled with consent).
• Authorized resellers and channel partners you ask us to involve in your evaluation, with whom we may share opportunity-relevant contact information.
• Professional advisors (lawyers, accountants, auditors, insurers).
• Acquirers in connection with a merger, acquisition, financing, or sale of assets, subject to customary confidentiality protections.
• Authorities when required by law, legal process, or to protect rights, property, or safety.

For California residents and other U.S. state-law purposes, we do not “sell” personal information for monetary consideration. To the extent that targeted-advertising or analytics cookies constitute “sharing” or “cross-context behavioral advertising” under applicable U.S. state privacy laws, we use those technologies only when consent (where required) has been provided through our cookie banner, and we honor the Global Privacy Control (GPC) signal as a valid opt-out.

5. International data transfers

We are headquartered in the United States and primarily process personal information in the United States and the European Union. When personal information is transferred from the EEA, UK, or Switzerland to the United States or another jurisdiction that has not received an adequacy decision, we rely on the European Commission’s Standard Contractual Clauses (SCCs) and the UK International Data Transfer Addendum, supplemented by appropriate organizational and technical measures. Copies are available on request to support@l2h.ai.

6. Cookies and similar technologies

We use cookies, pixels, and similar technologies to operate the Site, measure analytics, and (with consent where required) support marketing. The categories used are:

• Strictly necessary — required for the Site to function (session, form submission via HubSpot, security, load balancing).
• Analytics — Google Analytics 4 and (where enabled) Microsoft Clarity, used to measure aggregate usage, navigation, and performance.
• Marketing — HubSpot tracking, LinkedIn Insight Tag, used to measure campaign performance and (where applicable) deliver relevant advertising.

Non-essential cookies load only after you provide consent through our cookie banner where consent is required by your jurisdiction (EEA, UK, Switzerland, certain U.S. states). You can change cookie preferences via the banner, your browser, or, where supported, the Global Privacy Control. See our Cookie Policy for the full inventory.

7. Data retention

We retain personal information for as long as needed to fulfill the purpose for which it was collected and for legally required periods. Indicative retention windows:

• contact-form / demo-request submissions: up to 36 months from last contact, then deleted or anonymized;
• marketing-list contacts: until you unsubscribe or three years of inactivity, whichever is sooner;
• candidate / job-application data: up to 24 months after the recruiting cycle, except where applicable employment law requires a different period;
• support / inquiry records: up to 5 years for legal-defense purposes;
• contract and billing records: up to 7 years to meet U.S. tax and audit requirements;
• website analytics: up to 14 months for Google Analytics standard configuration; aggregate / anonymized analytics indefinitely.

Records subject to a legal hold are retained until the hold is released. We delete or anonymize personal information when the retention period ends.

8. Your privacy rights

Depending on your jurisdiction, you may have the right to: (a) access the personal information we hold about you; (b) correct inaccurate personal information; (c) request deletion; (d) port your information; (e) restrict or object to certain processing; (f) opt out of targeted advertising, sale, or sharing of personal information; (g) opt out of profiling that produces legal or similarly significant effects; and (h) withdraw consent at any time without affecting the lawfulness of processing already conducted.

To exercise these rights, email support@l2h.ai with the subject line “Privacy Rights Request.” To protect your information, we will verify your identity (which may require additional information). We will respond within the timeframes required by applicable law (generally 30–45 days, subject to extensions). You may use an authorized agent to submit a request; we will require evidence of authorization. You may appeal a denied request to support@l2h.ai (subject: “Privacy Rights Appeal”); if we cannot resolve your concern, you may contact your state attorney general or applicable supervisory authority. For EEA / UK residents, you may also lodge a complaint with your local supervisory authority.

9. U.S. state-law disclosures (CCPA/CPRA and similar)

The table below summarizes the categories of personal information L2H collects, the purposes of use, the categories of recipients, and retention.

If you are a resident of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, New Jersey, New Hampshire, Iowa, Tennessee, Indiana, Florida, Minnesota, Maryland, Rhode Island, or another state with a comprehensive privacy law, you have the rights described in Section 8 to the extent provided by your state’s law. We honor the Global Privacy Control signal as a valid opt-out of sale / sharing / targeted advertising where applicable.

We do not knowingly process personal information of consumers under 16 for sale or sharing. We do not direct the Site to children under 13 and do not knowingly collect personal information from children under 13.

10. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. No system is perfectly secure; we do not warrant that personal information will never be subject to incident. See the Trust Center for our security posture and the Acceptable Use Policy for vulnerability disclosure.

11. Third-party links

The Site may link to third-party websites, applications, or services that operate under their own privacy policies. L2H is not responsible for the privacy practices of third parties.

12. Changes to this policy

We may update this Privacy Policy from time to time. The updated date will appear at the top. Material changes will be flagged on the Site or, where required, communicated to you. Your continued use of the Site after the updated date is your acknowledgement of the updated policy.

13. Contact

Questions, requests, or complaints? Email support@l2h.ai or write to L2h.ai, Inc., Attn: Privacy, 1775 Tysons Blvd, Tysons, VA 22102, USA.