Privacy Policy

Effective Date: October 13, 2025

Introduction

Welcome to Twenty.com PBC (“Twenty”, “Company”, “we”, “us”, or “our”).
Twenty operates the website https://twenty.com and related cloud services (collectively, the “Service”).
This Privacy Policy governs your access to and use of the Service and explains how we collect, use, safeguard, and disclose information that results from your use of our Service.

We are committed to complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy and our Terms of Service.

Definitions

For purposes of this Privacy Policy:

  • Service – means the Twenty website ( https://twenty.com) and any related services or applications operated by Twenty.com PBC.
  • Personal Data – means any information about a living individual who can be identified from that data (either alone or in combination with other information in our possession).
  • Usage Data – means information collected automatically through use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).
  • Cookies – are small files placed on your device (computer or mobile) that store certain information.
  • Data Controller – means a person or organization who (alone or jointly with others) determines the purposes and means of processing Personal Data. For the purposes of this Privacy Policy, Twenty is the Data Controller for Personal Data we collect directly from you.
  • Data Processor (or Service Provider) – means a person or organization which processes Personal Data on behalf of the Data Controller. We may use the services of various third-party service providers to process your data more effectively. When you use Twenty’s cloud-based CRM, Twenty acts as a Data Processor for the Customer Data you input into our platform on behalf of your organization (see Information We Collect below).
  • Data Subject – is any living individual who is the subject of Personal Data (you, or any individual whose data you provide to us).
  • User – means the individual using our Service. The User may be the Data Subject or an authorized user acting on behalf of a company (our customer).

Information We Collect

We collect different types of information to provide and improve the Service for our users. This includes:

1. Personal Data You Provide: While using our Service (for example, when creating an account, subscribing to our newsletter, or contacting support), we may ask you to provide certain personally identifiable information. This information may include, but is not limited to: your name, email address, phone number, company/organization name, job title, billing information, or any other details you choose to provide. We use this Personal Data to identify or contact you as needed.

2. Customer Data (CRM Data): If you are using Twenty’s cloud-based CRM application, you may input or upload personal information about third parties (such as your customers, leads, or contacts) into our Service. This Customer Data may include names, contact details, communications, transaction histories, and other information relevant to customer relationship management.

3. Usage Data: When you interact with our website or app, we automatically collect certain technical information about your visit. This Usage Data may include information such as your device’s Internet Protocol address (IP address), browser type and version, the pages you visit on our Service, the date and time of your visit, time spent on those pages, and other diagnostic data.

4. Cookies and Similar Technologies: We use cookies and similar tracking technologies to operate and analyze our Service. Cookies are small data files sent to your browser from a website and stored on your device; they may contain an anonymous unique identifier.

5. Information from Third Parties: We may receive information about you from third-party services that you choose to integrate or connect with Twenty.

We do not knowingly collect any sensitive personal data unless you voluntarily provide it to us. We also pledge never to sell any personal data we collect to third parties.

How We Use Your Information

Twenty uses the collected information for various purposes in order to operate our business, provide the Service to you, and improve our offerings. These purposes include:

  • Providing and Maintaining the Service: To deliver the core functionalities of our CRM platform and website.

  • Service Communications: To notify you about updates or important information regarding the Service.

  • Enabling User Features: To allow you to participate in interactive features of our Service when you choose to do so.

  • Customer Support: To provide customer service and support.

  • Analytics and Improvements: To gather analysis, metrics, and information to understand usage trends and improve Service performance.

  • Monitoring and Security: To monitor the usage of our Service and to detect, prevent, and address technical issues.

  • Billing and Transactions: To process transactions, manage subscriptions, and fulfill our contractual obligations.

  • Account Management: To send you administrative emails and reminders about your account.

  • Marketing and Related Communications: To provide you with news about Twenty, special offers, or general information about our products and services.

  • To Fulfill a Purpose You Provided It: If you give us information for a specific reason, we will use it for that reason.

  • With Your Consent: For any other purpose that we describe at the time of collection, but only if you have given us consent to use your information in that additional way.

  • Legal Compliance and Enforcement: To comply with applicable legal requirements.

We will not use Personal Data for any purpose that is incompatible with the purposes outlined above without your consent.

How We Share Your Information

We value your privacy and handle your Personal Data with care. We do not sell or rent your personal information to third parties for their marketing purposes. However, we may share information about you in the following circumstances:

  • Service Providers: We may share your information with third-party service providers and partners who perform services on our behalf.
  • Affiliates and Corporate Transactions: We may disclose your information to our subsidiaries or other affiliates as needed.
  • Legal Compliance: We may disclose your Personal Data if required to do so by law.
  • Protecting Rights and Safety: We may disclose information if we believe it is necessary or appropriate to protect the rights, property, or safety of Twenty.
  • With Your Consent or At Your Direction: We will share your personal information with third parties if you give us consent.

Aside from the purposes listed above, we will not transfer your Personal Data to any third party without your knowledge, and we do not share personal information with third parties for their own direct marketing use.

Cookies and Tracking Technologies

Twenty uses cookies and similar tracking technologies to provide, secure, and improve our Service.

What Cookies Are: Cookies are small text files placed on your device by websites you visit.

How We Use Cookies: We only use cookies in a limited manner, primarily for the functioning of our Service. For example, we use cookies to keep you logged into your account as you navigate the site.

Types of Cookies We May Use:

  • Session Cookies: Temporary cookies erased when your browser closes.
  • Preference Cookies: These cookies remember information about your choices and preferences.
  • Security Cookies: Used for security purposes.

Your Choices: You can usually modify your browser settings to decline cookies or alert you when a cookie is being placed.

Data Security

We take the security of your information very seriously. Twenty implements robust technical and organizational measures to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction.

Data Retention

We will retain your Personal Data only for as long as necessary to fulfill the purposes for which it was collected. Upon termination of your account or upon your request, we will securely delete or anonymize your Personal Data.

Your Rights and Choices

Depending on your jurisdiction and applicable data protection laws, you have certain rights regarding your Personal Data.

Rights Under the GDPR (for users in the European Economic Area):

  1. Right to Access: You have the right to request a copy of your Personal Data.
  2. Right to Rectification: You have the right to request that we correct any Personal Data that is inaccurate or incomplete.
  3. Right to Erasure: You have the right to request deletion of your Personal Data under certain circumstances.
  4. Right to Restrict Processing: You have the right to request that we restrict the processing of your Personal Data.
  5. Right to Data Portability: You have the right to obtain a copy of your Personal Data in a structured, commonly used format.
  6. Right to Object: You have the right to object to our processing of your Personal Data.
  7. Right to Withdraw Consent: You have the right to withdraw your consent at any time.

International Data Transfers

Twenty is based in the United States but data is currently hosted in Frankfurt (EU). We comply with applicable legal requirements for transferring personal data internationally.

Links to Other Sites

Our Service or website may contain links to other sites that are not operated by Twenty.

Children’s Privacy

Our Service is not intended for use by children under the age of 18. We do not knowingly collect personally identifiable information from anyone under 18 years of age.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices. When we make changes, we will post the updated Privacy Policy on this page and update the “Effective Date”.

Contact Us

If you have any questions about this Privacy Policy, or if you would like to exercise any of your privacy rights, please contact us: