Part of Jungler is an index of business professionals built from public professional sources. The lawful basis we rely on for that is legitimate interests. This page is the short, public version of the assessment behind that choice. The full assessment is available on request under NDA or a signed DPA — email legal@jungler.ai.
1. What we do
Jungler is a B2B sales-intelligence platform. We help business customers find and reach people at companies that might benefit from their products. We build that index from public professional sources — places people choose to publish their professional details precisely so other professionals can find them.
GDPR Recital 47 explicitly recognises direct marketing as a legitimate interest, which is the legal hook we use here.
2. Why we can't do it any other way
A useful B2B index needs professional identifiers — name, employer, role, public profile URL. There's no practical alternative that still works: per-person consent at the scale of a public index isn't realistic, and aggregated-only or customer-uploaded-only data doesn't deliver the product.
What we deliberately avoid and mitigate:
- we don't intentionally build searchable special-category fields (Art. 9), and we remove or suppress special-category data in public professional content when identified;
- no criminal-conviction data (Art. 10);
- no private messages, contact lists, or off-platform tracking.
3. Why we think this is fair
The data is professional, not private. People published it on platforms whose whole point is professional discoverability. A professional reasonably expects their public profile to be looked up for professional reasons.
The honest tension: data may end up in a tool the person didn't directly sign up for. Here's how we narrow that:
- You can object, and that's that. One verified request and you're out — usually within 7 days, always within 30. Use jungler.ai/data-erasure. After removal we keep a suppression entry so you're not re-indexed later.
- We tell people what we do. This page and our privacy notice are public and unauthenticated, so anyone can check before any contact happens.
- We keep it minimal. Only professional fields are indexed; public posts are kept only as long as we need them for analytics and signals.
- EU-first hosting with SCCs and the UK Addendum applied to any transfers.
Weighing those together: we think the rights and interests of the people in the index don't override our and our customers' interests in running it — provided the mitigations above are actually operated. They are.
4. Telling people we hold their data
We collect the data from somewhere other than the person it's about, so Article 14 GDPR applies. We meet that obligation by:
- publishing this page and our privacy notice publicly;
- running a no-account-needed objection form at jungler.ai/data-erasure.
Individually notifying every person in a public index would be disproportionate effort (Art. 14(5)(b)), so we rely on that exemption but keep the alternatives easy to find.
5. Your rights
- Access, rectification, restriction, portability — we action verified requests within 30 days.
- Erasure — same, plus we add you to a suppression list so we don't re-index you later.
- Objection (Art. 21) — we honour it: target 7 days, hard cap 30 days from verification.
How we verify a request is explained on the data-removal form.
This document was last updated on May 19th, 2026.