Privacy Policy

Last updated October 17, 2026.

Who we are

Ase Studios, LLC (doing business as ClientUnlocked), 18 India Street Brooklyn NY 11222, privacy@clientunlocked.com. For customer account data we are the controller. For prospect data our customers upload or find, the customer is the controller and we are the processor.

If you received an email sent through ClientUnlocked

The sender is the business named in the email footer. They obtained your business contact details from public sources such as your company's website, from licensed business-data providers, or directly from you. Use the one-click unsubscribe link to stop all emails from that sender, or email privacy@clientunlocked.com and we will help you exercise your rights of access, objection, and erasure with the sender. After erasure we keep only a one-way hash of your address so you are never contacted again by that sender.

Data we process

• Customer accounts: name, work email, company, billing info (handled by Stripe; we never see full card numbers), usage logs, IP address for security.
• Prospects: company name, website, business address and phone, professional email, name and job title, public news about the company, emails exchanged.

Legal bases

Contract (to run customer accounts), legitimate interests (security, fraud prevention, and prospecting by our customers with an easy opt-out), and consent where required.

Sub-processors

Vercel (hosting), Neon (database), Clerk (sign-in and account security), Stripe (billing), Google (Gemini API, paid tier, for AI summaries, hunt planning and email drafts; under Google's paid-service terms, inputs are not used to improve Google's products), Google Maps Platform (business search), optional Hunter.io (business contact data), GDELT Project (public news index; no personal data sent).

Retention

Customer data is kept while the account is active and deleted within 30 days of closure. Places API content is refreshed or removed after 30 days. Suppression hashes are kept indefinitely to honor opt-outs.

International transfers

Where data leaves the EEA/UK we rely on Standard Contractual Clauses or the EU-US Data Privacy Framework.

Your rights

Access, rectification, erasure, restriction, portability, objection, and to complain to your data protection authority. California residents: we do not sell or share personal information for cross-context behavioral advertising.

Cookies

We only use strictly necessary cookies for sign-in and bot protection, with no advertising or analytics. Details in our Cookie Policy.

Selling and sharing

We do not sell personal information and do not share it for cross-context behavioral advertising. We honor Global Privacy Control signals. We don't knowingly collect data from children under 16.

Security

TLS everywhere, encrypted mailbox credentials (AES-256-GCM), hashed passwords (bcrypt), strict tenant isolation, audit logs, and least-privilege access.