Last updated on October 27, 2025

Privacy Policy

Scope

This Privacy Policy applies solely to our marketing website at https://www.fulfil.io (the "Website"). It describes how Fulfil.IO Inc. ("we," "us," or "our") collects, uses, and protects personal information when you visit our Website or submit inquiries through our contact forms. This Policy applies to all visitors to our Website, including those from the US, EU, UK, and other regions.

This policy does not apply to: Our Fulfil ERP software platform. If you are a customer of our SaaS product, your use is governed by separate Terms of Service and a Data Processing Agreement.

Information We Collect

Information You Provide

When you fill out forms on our Website (such as "Contact Us" or "Request a Demo"), we collect:

  • Personal identifiers, including first and last names
  • Contact information, including email address and phone number
  • Professional information, including your role
  • Company details, including name, website, and company revenue range
  • Marketing attribution (how you heard about us)
  • Marketing preferences
  • Any message or inquiry you submit

Information Collected Automatically

When you visit our Website, we automatically collect:

  • IP address and approximate location
  • Browser type and version
  • Device information
  • Pages visited and time spent on pages
  • Referring website
  • Cookie identifiers and similar tracking data

How We Use Your Information

We use the personal information we collect for the following purposes:

Contact Form Submissions

  • To respond to your inquiries and provide information about our services
  • To follow up on demo requests or sales inquiries
  • To send relevant product updates or marketing communications (you can opt out at any time)
  • To manage and send these communications using our service providers (e.g., HubSpot for email marketing)

Website Analytics

  • To understand how visitors use our Website
  • To improve our Website functionality and user experience
  • To analyze traffic patterns and optimize our content

Legal and Security

  • To comply with legal obligations
  • To protect against fraud, security threats, or illegal activity
  • To enforce our terms and policies

Lawful Basis for Processing

For visitors from the European Economic Area (EEA) and United Kingdom:

Our lawful basis for processing personal data submitted via website forms is our legitimate interest in responding to inquiries and promoting our services. Where required, we also rely on:

  • Your consent (e.g., for marketing communications)
  • Compliance with legal obligations
  • Performance of a contract (if you become a customer)

You have the right to object to processing based on legitimate interest at any time.

How Long We Keep Your Information

  • Contact form submissions: Up to 3 years from last interaction, or until you request deletion
  • Marketing lists: Until you unsubscribe, or after 2 years of inactivity
  • Analytics data: 26 months (Google Analytics default retention period)
  • Cookie data: As specified in our Cookie Policy (ranging from session duration to 2 years)

We may retain certain information longer if required to comply with legal obligations, resolve disputes, or enforce our agreements.

International Data Transfers

For Visitors from the UK and European Economic Area

Fulfil.IO Inc. is based in the United States. When you submit personal information through our Website, your data is transferred to and processed in the United States.

Important: The United States has not been recognized by the UK or European Union as providing an adequate level of data protection. This means your personal data may be subject to access by U.S. government authorities, and you may not have the same legal protections as under UK or EU law.

We do not participate in the EU-U.S. Data Privacy Framework. We are a U.S. company without an EU or UK establishment, and we have not appointed a representative under Article 27 of the GDPR or UK GDPR.

By using our Website and submitting information to us, you acknowledge and accept this international transfer of your data.

While we do not rely on the DPF ourselves, some of our US-based service providers (e.g., HubSpot, Salesforce) participate in the DPF or use Standard Contractual Clauses for their own transfers, providing additional protections where applicable.

Please note that without adequacy mechanisms in place directly from us, your data may be accessible to US authorities under laws like the CLOUD Act.

Your Privacy Rights

For EU and UK Visitors

If you are located in the European Economic Area or United Kingdom, you have the following rights:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal data (subject to legal retention requirements)
  • Objection: Object to our processing of your data based on legitimate interest
  • Restriction: Request that we limit how we use your data
  • Portability: Receive your data in a machine-readable format
  • Withdraw consent: If we process your data based on consent, you can withdraw it at any time

To exercise these rights, contact us at: compliance@fulfil.io

We will respond within one month. You also have the right to lodge a complaint with your local data protection authority:

  • EU residents: Contact your national Data Protection Authority
  • UK residents: Information Commissioner's Office (ICO) at https://ico.org.uk/

For California Residents

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to:

  • Know what personal information we collect, use, disclose, and sell
  • Access your personal information (twice in a 12-month period)
  • Delete your personal information (subject to exceptions)
  • Correct inaccurate personal information
  • Opt out of the "sale" or "sharing" of your personal information
  • Limit use of sensitive personal information
  • Not be discriminated against for exercising your rights

Categories of personal information we collect:

  • Identifiers (name, email, IP address)
  • Commercial information (inquiry history)
  • Internet activity (browsing behavior, analytics)

We do not sell personal information in the traditional sense. However, our use of analytics and marketing tools may constitute a "sale" or "share" under CCPA. You can opt out through our cookie consent tool or by contacting us.

To exercise your rights: Email compliance@fulfil.io or use the "Do Not Sell My Personal Information" link on our Website (if available through cookie preferences).

For Residents of Other U.S. States

If you are a resident of Virginia, Colorado, Connecticut, Utah, or Montana, or other states with similar laws, such as Texas, Oregon, Delaware, Indiana, Iowa, Tennessee, and any others effective as of the last updated date, you have similar rights to California residents, including rights to access, correct, delete, and opt out of certain data processing.

If your state has a comprehensive privacy law not specifically listed, you may have equivalent rights—contact us for details.

To exercise your rights or appeal a decision: Contact compliance@fulfil.io

If you remain unsatisfied, you may contact your state Attorney General's office.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience on our Website. Cookies are small files stored on your device that help us:

  • Remember your preferences
  • Understand how you use our Website
  • Analyze traffic and improve our content
  • Provide targeted advertising (through third-party partners)

For more details, see our full Cookie Policy.

Service Providers and Third Parties

We share your personal information with trusted service providers who help us operate our Website and business:

  • HubSpot: CRM and email marketing platform
  • Salesforce: Customer relationship management
  • Google: Website analytics; advertising and remarketing

These providers are contractually obligated to protect your data and use it only for the purposes we specify. They may be located in the United States or other countries.

For links to their privacy policies, see our detailed Service Providers section below.

Security

We implement reasonable technical and organizational measures to protect your personal information, including:

  • Encryption in transit (HTTPS/TLS)
  • Access controls and authentication
  • Regular security assessments
  • Employee training on data protection

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

If you suspect a security incident, contact us at: security@fulfil.io

Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we will:

  • Notify affected individuals and relevant authorities as required by law
  • For EU/UK residents: Provide notification within 72 hours where feasible
  • For US residents: Notify as required by applicable state laws (e.g., within 45-60 days where specified)
  • Describe the nature of the breach, likely consequences, and our response measures

Artificial Intelligence

We do not use personal data collected through this Website to train, develop, or improve artificial intelligence or machine learning models.

Children's Privacy

Our Website is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately so we can delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

  • Update the "Last updated" date at the top
  • Notify you via email or a prominent notice on our Website
  • Obtain your consent if required by law

We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights:

Email: compliance@fulfil.io

Mail: Fulfil.IO Inc., 440 N Barranca Ave. #3853, Covina, CA 91723

Detailed Information

Service Providers

HubSpot - Email marketing and CRM

  • Privacy Policy: https://legal.hubspot.com/privacy-policy

Salesforce - Customer relationship management

  • Privacy Policy: https://www.salesforce.com/company/privacy/

Google Analytics - Website analytics

  • Privacy Policy: https://policies.google.com/privacy
  • Opt-out: https://tools.google.com/dlpage/gaoptout

Google Ads - Advertising and remarketing

  • Privacy Policy: https://policies.google.com/privacy
  • Ad Settings: https://myadcenter.google.com/personalizationoff

Meta (Facebook) - Advertising and remarketing

  • Privacy Policy: https://www.facebook.com/privacy/policy
  • Ad Preferences: https://www.facebook.com/help/568137493302217

Mixpanel - Product analytics

  • Privacy Policy: https://mixpanel.com/legal/privacy-policy
  • Opt-out: https://mixpanel.com/optout/

Definitions

  • Personal Data/Personal Information: Information that identifies or can identify you as an individual
  • Processing: Any operation performed on personal data, including collection, storage, use, or disclosure
  • Data Controller: The entity that determines the purposes and means of processing personal data (Fulfil.IO Inc.)
  • Service Provider/Data Processor: A third party that processes data on our behalf
  • Cookie: A small text file stored on your device by a website
  • GDPR: General Data Protection Regulation (EU law)
  • UK GDPR: GDPR as incorporated into UK law
  • CCPA/CPRA: California Consumer Privacy Act and California Privacy Rights Act

Categories of Personal Information Under CCPA

We collect the following categories as defined by CCPA:

  • Category A - Identifiers: Name, email, IP address, cookie IDs
  • Category B - California Customer Records: Contact information, inquiry details
  • Category D - Commercial Information: Inquiry history, interests expressed
  • Category F - Internet Activity: Browsing behavior, pages visited, analytics data

We do not collect:

  • Protected classifications (race, religion, etc.)
  • Biometric information
  • Geolocation data (beyond approximate location from IP)
  • Sensitive personal information (beyond account credentials if you create an account)
  • Professional or employment information (beyond what you voluntarily provide)

Your California Privacy Rights in Detail

Right to Know and Access:

You can request details about:

  • Categories of personal information we collect
  • Sources of that information
  • Purposes for collection
  • Categories of third parties we share it with
  • Specific pieces of information we hold about you

Right to Delete:

We will delete your personal information upon request, subject to exceptions (e.g., legal compliance, security, fraud prevention).

Right to Correct:

We will correct inaccurate information upon request.

Right to Opt-Out of Sale/Sharing:

Though we don't sell data traditionally, analytics and advertising cookies may qualify as "sharing" under CCPA. Opt out via our cookie consent tool.

Right to Limit Sensitive Information Use:

We use any sensitive information only as necessary to provide our services.

Right to Non-Discrimination:

We will not discriminate against you for exercising your CCPA rights.

How to Submit Requests:

  • Email: compliance@fulfil.io
  • Specify which right you're exercising
  • Provide information to verify your identity
  • We respond within 45 days (may extend by 45 days if needed)
  • You can designate an authorized agent to make requests on your behalf

Your Rights Under Other State Privacy Laws

Virginia (CDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Montana (OCPA):

Residents of these states have rights similar to California, including:

  • Confirm/access your data
  • Correct inaccuracies
  • Delete your data
  • Obtain a portable copy
  • Opt out of targeted advertising, sales, or profiling

Appeals Process:

If we decline your request, you may appeal by emailing compliance@fulfil.io with "Privacy Rights Appeal" in the subject line. We'll respond within the timeframe required by your state's law.

If still unsatisfied, contact your state Attorney General's office.