Who we are
Canopy Revenue Operations ("Canopy", "we", "us") builds and runs Canopy, an agentic revenue system, with teams in North America and EMEA. This policy explains how we handle personal information collected through canopyops.com, our booking tools, our communications and our business relationships.
For questions about this policy or your information, contact us.
What we collect
Information you give us
- Launch partner applications and email sign-ups: your name, work email and company, collected through our HubSpot forms.
- Newsletter: your email address, collected through our HubSpot form when you subscribe, used only to send you the Canopy newsletter. Every issue has an unsubscribe link.
- Demo and meeting bookings: your name, work email, company and anything you add to the booking form, collected through our HubSpot scheduling tool.
- Correspondence: the content of emails and messages you send us, and your contact details.
- Job applications: the information you choose to send when you contact us about working at Canopy.
- Business relationships: contact and billing details for clients, partners and suppliers.
Information collected automatically
- Analytics: if you accept analytics cookies, Google Analytics collects information about how you use the site, such as pages viewed, approximate location and device type. See our cookie policy.
- Technical data: our hosting provider processes standard server logs, such as IP address, browser type and request times, to deliver and secure the site.
Information from other sources
For business-to-business outreach, we may collect professional contact information, such as name, job title, company and work email, from publicly available sources and business data providers. We use it only to contact people in their professional capacity about services relevant to their role, and every message offers a way to opt out.
How we use it
- To respond to enquiries, schedule and run demos, and communicate with you.
- To provide, operate and improve our services for clients.
- To send relevant business communications, which you can opt out of at any time.
- To understand how our website is used and improve it, where you have consented to analytics.
- To keep our website, systems and clients secure, and to prevent misuse.
- To meet legal, accounting and regulatory obligations.
We do not sell personal information, and we do not use it for automated decisions that produce legal or similarly significant effects on you.
Legal bases
Where the UK GDPR or EU GDPR applies, we rely on the following legal bases:
- Contract: to provide services to clients and take steps at your request before entering into a contract.
- Legitimate interests: to run and grow our business, including business-to-business outreach, where those interests are not overridden by your rights.
- Consent: for analytics cookies and any other processing where we ask for consent. You can withdraw consent at any time.
- Legal obligation: where we must process information to comply with the law.
Client data on the platform
When clients use Canopy, we process data from their CRM and connected tools on their behalf. For that data, the client is the controller and Canopy acts as a processor or service provider. We process it only on the client's instructions and under our agreement with them. Each client runs on its own private instance, and client credentials are isolated so they are never in scope while we work for anyone else. If your information is held in one of our clients' systems, please contact that client directly with requests about it.
Who we share it with
We share personal information only with service providers who help us run our business, under contracts that require them to protect it and use it only for the services they provide to us. These include:
| Category | Purpose |
|---|---|
| Website hosting | Delivering and securing canopyops.com |
| CRM and scheduling | Managing contacts, communications and demo bookings |
| Email and productivity | Business email, documents and collaboration |
| Analytics | Understanding website usage, where you have consented |
| AI model providers | Research, drafting and classification within our services, through business APIs that do not use the data to train their models |
| Data and enrichment providers | Professional contact and company information for business outreach |
We may also disclose information if required by law, to protect our rights or the safety of others, or as part of a merger, acquisition or sale of assets, in which case we will require the recipient to honor this policy.
International transfers
We work across North America and EMEA, and our service providers may process information in other countries, including the United States. Where we transfer personal information out of the UK or the European Economic Area, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.
Retention
We keep personal information only as long as we need it for the purposes above. Prospect and contact records are reviewed regularly and deleted or anonymized when they are no longer needed. Client records are kept for the length of the relationship and as required for legal and accounting purposes. Client platform data is deleted on the client's instruction at the end of an engagement.
Your rights
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. You can opt out of marketing emails at any time using the link in any message.
If you live in a US state with a consumer privacy law, such as California, you may have the right to know what we collect, to request deletion and correction, and to opt out of the sale or sharing of personal information. We do not sell personal information, and we will not discriminate against you for exercising your rights.
To make a request, contact us and choose Something else. We may need to verify your identity before responding. If you are in the UK or EU, you also have the right to complain to your data protection authority, such as the Information Commissioner's Office in the UK.
Security
We use technical and organizational measures to protect personal information, including private instances for each client, isolated credentials, least-privilege access and logging of agent actions. You can read more on our security page. No system is perfectly secure, so we cannot guarantee absolute security.
Our website and services are intended for businesses and are not directed at children. We do not knowingly collect personal information from children.
Changes and contact
We may update this policy from time to time. When we do, we will change the date at the top of this page, and for significant changes we will take reasonable steps to let you know.
Questions or requests: contact us, or write to hello@canopyops.com.