Privacy Policy

Hound is operated by 360 LABS LTD, registered in England and Wales under company number 17335918, registered office 66 Paul Street, London EC2A 4NA. For data about you as our customer, we are the controller. This policy explains what we collect, why, who we share it with, and your rights under UK GDPR.

• Account: your name and email, from Google sign-in or an email sign-in link.
• Your business: the website you give us, or if you have none, what you tell us about what you sell, and what we learn from it about what you sell and who you sell to.
• About you: only if you ask us to, your own LinkedIn profile (your name, headline, About section, current role, location and skills), read through your connected LinkedIn account. We use it to understand what you sell and, if you leave it switched on, to write messages as you.
• Connected accounts: when you connect LinkedIn or your mailbox, the access needed to send messages from them and read the replies, and the messages and replies themselves. In your mailbox Hound also reads booking confirmations and calendar invites, to notice when someone it reached for you books a call, signed-contract and payment notices and the proposals and invoices you send them, to notice when that turns into paid work (it keeps only the outcome, the amount and a one-line note of what it saw), and call summaries from notetaker apps (such as Fathom, Otter or Fireflies) about those people, to write your call recap. If you allow your calendar, Hound reads your events only to work out when you are busy, to offer two free times when someone says yes, and keeps nothing about them.
• Forwarded replies: if you forward emails to your Hound address, the ones from people Hound reached for you (or that you place with someone), kept with that person’s conversation so Hound can show them and write your answer. Other mail sent there is not kept.
• Call notes: if you add them, your notes from a call, or the notetaker summary Hound read, and the recap, next steps and proposal draft Hound writes from them. We send them to our AI providers to write those drafts and keep them in your account while it is open. They are never shown to anyone else or used for other customers.
• Activity: the people you approve or skip, your settings, and what Hound sends for you. This includes a record of each time LinkedIn or your mailbox warned, restricted or signed out your account, with what Hound sent in the two weeks before. You can see it in Settings.
• Your voice: if you use it, the messages you paste are sent to our AI providers to describe how you write, then dropped. We keep only that description, which you can edit or remove. Unless you switch it off in Playbook, Hound also reads the changes you make to its messages, once a day, to update that description, and tells you what changed. Switching it off stops the learning; the edited messages stay with your outreach history like every other message.
• Voice notes: if you switch them on and record one, we keep your recording only until it goes to that person on LinkedIn, you remove it, or it can no longer go (for someone you never approve, after 14 days), then delete it. We keep the script Hound wrote and how long the note was. Hound never makes or copies a voice; every voice note is one you recorded.
• Billing: your plan and payment status. Stripe handles card details; we never see or store card numbers.
• Technical: standard logs and security data such as IP address and request times, and error reports from our servers. Server error reports hold what went wrong and where in our code, with email addresses, links, numbers and quoted text removed. They name your internal account ID only if you accepted analytics.
• Optional analytics: only if you choose “Accept all” on the cookie notice inside the app. Then we collect your internal account ID, page paths with query strings removed, browser and device details, where on a page you click and scroll, key actions as labels and counts (for example connecting an account, approving someone, changing Autopilot, starting or cancelling your plan, replies and calls booked), error reports, and a screen recording of your visit. We don’t send your name, email, lead details or message text as analytics. Recordings hide everything you type and every detail about the people Hound finds, show only the app’s own menus, titles and buttons, and leave out images.

Cookies: we use only the cookies needed to keep you signed in, unless you accept optional ones. Inside the app, PostHog stores an analytics identifier in your browser only after you accept analytics cookies. If you reject them or don’t choose, nothing optional is sent. You can change this any time in Settings > Privacy and analytics.

Our public website counts visits with PostHog, without cookies and without storing anything in your browser. We see which pages are read, how far down people scroll, the site that sent them and any campaign tag in the link, browser and device type, whether the website scan on the homepage was started (not the website typed), whether a sign-up button was pressed and which sign-in was chosen, and whether an early-access request was sent. Not what you type, not ad click IDs, and not your location. To tell one visit from another, PostHog makes a code from your IP address and browser with a key it changes and deletes every day, then drops the IP address. We use this only to improve our website and it is never used for advertising.

Our public pages, except the sign-up and early-access pages, also run Dealfront’s Leadfeeder, which looks up which company an IP address belongs to, so we can see which businesses visit. It is set not to store cookies unless you accept them, and it does not read what you type. We use the company name only to understand who is interested in Hound and, for businesses, to get in touch.

Cloudflare, which delivers our website, also measures how fast our pages load for visitors outside the EU: load times, the page address and browser type. It sets no cookies, stores nothing in your browser and does not track you across sites.

Optional website cookies: our public pages show a small cookie notice. Only if you press “Accept”, Dealfront sets its cookie (_lfa, kept up to two years) so your company’s return visits are linked together, and PostHog records a screen recording of your visit, with everything you type hidden, and keeps an identifier for it in your browser. If you press “Reject” or don’t choose, neither happens and the website works exactly the same. Your browser keeps a small note of your choice so we don’t ask again.

You can turn all of this off with your browser’s Do Not Track or Global Privacy Control setting, or here, and change your cookie choice here at any time (your browser keeps a small note of what you chose):

Early access requests: if you ask for early access on our website, we keep the email and website you give us, and any answers you choose to add about your business and where you heard about us. We use them only to decide who to invite first and to get in touch with you about Hound, and we delete them when you ask (see section 08).

Hound looks for people who have publicly asked for what our customers sell, on LinkedIn, Reddit, X, public Facebook groups (found through Google search, never by signing in to Facebook) and the open web, for people who say publicly on Reddit or LinkedIn that they are unhappy with one of our customers’ competitors, and for people who publicly react to or comment on those competitors’ LinkedIn posts or on the customer’s own LinkedIn posts. For each person it keeps what they posted publicly, their name, role and company, their LinkedIn profile, and a work email address. It looks up work emails only: first the work email on their LinkedIn profile, then Prospeo, then Anymailfinder. It never uses personal addresses such as Gmail or Hotmail.

When a customer switches on Public tenders, Hound reads the UK government’s public contract notices (Contracts Finder and Find a Tender, published under the Open Government Licence). It keeps each notice’s title, description, buying organisation, value, deadline and link, and never the buyer’s contact details. Nobody is contacted about a tender.

When a customer switches on New UK companies, Hound reads the Companies House public register for companies registered in the last three weeks in the industries the customer sells to. For each it uses the company’s name, number, registration date, registered office address and industry codes, and the name of one director, to look for that director on LinkedIn. It never keeps a director’s date of birth, nationality or home address. A director it finds and who fits is treated like anyone else above; for a company where it finds nobody, it keeps only the company number, so it does not look again.

When a customer switches on Companies running ads, Hound searches Meta’s public Ad Library for businesses that just started a Facebook or Instagram ad. It keeps the business’s page name, the date its newest ad started, the website the ad links to and a link to its ads in the library, then looks for the owner or marketing lead on LinkedIn as described above.

To show our customer what it checked each morning, Hound also keeps a short quote of each public post it read, where it was posted, and whether it fitted, for three days. It does not keep the author’s name with these quotes.

Hound also keeps its own record of the public posts its searches read, to learn which kinds of request lead to replies and work and to make its searches better. For each post it keeps a short quote, the link, where and when it was posted, what kind of help it asks for, and whether it fitted each customer and what came of it. The post as found, with the author’s public role, is kept for 14 days, and the author’s name and the links for 90 days. After that only the anonymous quote, the place (such as a subreddit or a website), the date and those results are kept. For this record we are the controller. If you stop all contact at houndreach.com/contacted with your LinkedIn profile, your posts are removed from it too.

Our customers sell different things. When one customer’s search reads a public post asking for something that customer doesn’t sell, Hound may show it to one other customer whose business it fits, who decides whether to get in touch. That customer sees only the public post and the author’s public role, never which customer’s search found it. Each post goes to one customer at most, and never anyone the first customer contacted. Stopping all contact at houndreach.com/contacted, as above, stops this too.

Before writing to someone, Hound may also look at what they have published about their work in the past year (talks, podcasts, articles and their recent LinkedIn posts) and at recent news about their company, and may open their company’s homepage to check a few public things, such as whether it offers online booking. It keeps at most three of these facts, each with its link and date. It never looks for or keeps anything about a person’s family, home address, health, beliefs or private life, and never reads private accounts or photos.

Our customer can also send someone a private page made for them: their own public post, a few ideas written for them, and how the customer could help. Only people with the link can open it, and it is never listed or shown to search engines. Hound counts how many times the page is opened and when, and nothing else about the visit: no IP address, device, or how far it was read. The person can take the page down, or say they are not interested, from the page itself, which stops the customer’s messages to them.

If our customer connects their own website visitor tool (Snitcher or Dealfront), Hound reads which companies visited the customer’s website in the last 30 days: each company’s name and website, and when it last visited. It keeps nothing about the individual visitor, no IP address and no pages viewed. It uses this only to put people from those companies higher on the customer’s list and to look on LinkedIn for someone at a company that fits who could buy, and never mentions a visit in a message.

Our customer can instead put one line from Hound on their own website, behind their own cookie banner. It sets no cookies and stores nothing in the visitor’s browser, and it does nothing when the browser asks not to be tracked. For each visit it sends Hound the page’s path, and Hound looks the visitor’s IP address up once with ipapi.is to find the company that owns the network. It keeps only that company’s name and website, when it last visited, and whether it opened a pricing page. The IP address is never stored, and a visit from a home or mobile connection names nobody. Hound never knows who the visitor was, and never contacts them because of the visit.

Our customer can also list their own past clients: a name, the company, and a LinkedIn link or email. Hound never pitches anyone on that list. Once a week it reads each listed person’s public LinkedIn profile for their current company and role, and if they have started somewhere new, it shows the customer so they can get back in touch. If the customer asks, Hound also uses the roles and company names on the list, never people’s names or contact details, to search for similar people at other companies.

The same check covers people who answered our customer and then booked a call, became a client or said “not now”: about once a month Hound reads their public LinkedIn profile for their current company and role. If they have started somewhere new, it writes a short note in the existing conversation, and the customer decides whether to send it.

Our customer decides who to contact and why, so the customer is the controller of this data and must have a lawful basis to contact you under UK GDPR and PECR. We process it for them, and we never sell it.

If Hound has found you and you don’t want to be contacted through it, use the form at houndreach.com/contacted or email support@houndreach.com. We put you on our do-not-contact list, which every customer’s sending checks first, and keep only what that needs. To have your other details deleted too, email support@houndreach.com. How we process this data for our customers is set out in our Data Processing Agreement.

• To run the Service for you: our contract with you.
• To take payment and keep records: our contract and our legal obligations.
• To keep the Service secure and improve it: our legitimate interests.
• To protect your accounts and the people Hound writes to: our legitimate interests. We use your account record to decide claims under our LinkedIn safety promise. When many replies ask not to be contacted, Hound sends less for a week. Across customers we count only the share of accounts LinkedIn restricted, never how much anyone sent.
• To learn what gets replies: our legitimate interests. Hound counts how outreach does (for example, how many first messages in each writing style, or to people found on each site, got a reply) and combines those counts across customers. It uses a pattern only when it comes from at least five customers, keeps only the counts, and never shows one customer’s messages, contacts or results to another: a pattern only counts when no single customer makes up much of it, what you see leaves out your own outreach, and it shows rates, never counts. To have your outreach left out, email support@houndreach.com.
• To send service emails, and marketing email if you agree: contract, or your consent.
• Counting visits to our public website, and seeing which companies visit: our legitimate interests in improving it and finding businesses that may want Hound, with no cookies and a way to turn it off (see section 02).
• Optional cookies and screen recordings on our website: your consent, which you can withdraw at any time in section 02.
• Answering an early access request: our legitimate interests in choosing who to invite and replying to you.
• Optional analytics, error reports and session replays: your consent, which you can withdraw in Settings without losing access to Hound.
• Finding and checking people for our customers: our customers’ legitimate interests in reaching businesses that have asked for what they sell.
• Keeping a record of the public posts our searches read, and passing a post to the one customer it fits: our legitimate interests in improving Hound and in helping people who asked publicly for help to get it. You can object at houndreach.com/contacted or by emailing support@houndreach.com.

We use these providers to run Hound. They process data for us under contract and only as needed:

• Google Cloud: hosts the app, its database and its secrets, in Belgium (EU).
• Cloudflare: DNS and network delivery for our website, and measuring how fast our pages load for visitors outside the EU, without cookies.
• Stripe: takes payments and runs the billing portal.
• Google: sign-in with Google, if you choose it, and your website's small icon for Your business (it sees your website address).
• Unipile: connects your LinkedIn account and mailbox, sends and reads messages for you, and reads public LinkedIn posts and who engaged with them, and your own LinkedIn profile when you ask.
• Resend: sends our system emails, such as sign-in links and your morning email, from updates.houndreach.com, receives the replies you forward to Hound, and tells us about each early access request and each new account.
• Serper and Apify: search the public web, Reddit and X, and read a website's public pages when the site blocks our own reader.
• X: searches public posts on X through X's official API.
• Jina AI: reads a website's public pages when the site blocks our own reader.
• Brandfetch: suggests company names and logos while you type in a website box; it sees what you type there.
• Prospeo and Anymailfinder: look up work email addresses.
• Hunter: looks up work email addresses, only if you add your own Hunter key in Settings.
• Snitcher or Dealfront (Leadfeeder): tell Hound which companies visited your own website, only if you add your own key in Settings.
• ipapi.is: names the company that owns the network a visit to your website came from, using the visitor's IP address, only if you add Hound's line to your site; Hound keeps the company, never the address.
• Google (Gemini), Anthropic, OpenRouter and Amazon Web Services (Bedrock): AI models that read posts, score fit and write messages.
• Dealfront (Leadfeeder), on our own website: looks up which company a visit to our public website came from, using the IP address, and links return visits with a cookie only if you accept it.
• PostHog (EU): error reports from our servers, counts visits to our public website without cookies, and runs optional product analytics and screen recordings inside the app and on our website, only if you accept cookies.

Some of them process data outside the UK. When they do, it is under safeguards UK law accepts, such as the UK’s adequacy rules or standard contract clauses. We never sell personal data.

We keep your account data while your account is open and for a reasonable time afterwards to meet legal, accounting and security needs, then delete or anonymise it. You can ask us to delete your account at any time.

Our record of public posts keeps the author’s name and the links for 90 days, then only the anonymous request and its results (section 03).

We keep optional analytics, error reports and replays only as long as we need them to find faults and improve the product, then delete or aggregate them. Withdrawing consent stops new collection, and you can ask us to delete what we already hold.

Under UK GDPR you can ask to see, correct or delete your personal data, to restrict or object to how we use it, and to take a copy with you. Where we rely on consent, you can withdraw it at any time. While you have a Hound plan, you can download a copy of your data or delete your account yourself in Settings, under Privacy. Without one, or for anything else, email support@houndreach.com and we will reply within one month.

You can also complain to the Information Commissioner’s Office (ico.org.uk). We’d appreciate the chance to help first.

We may update this policy. If a change matters, we will tell you in the app or by email. Questions or requests: 360 LABS LTD, 66 Paul Street, London EC2A 4NA, or support@houndreach.com.