Privacy policy
[LEGAL – PLACEHOLDER PAGE. Not legal text. Fill in every field and have it checked by a lawyer or against the WKO templates before going live.]
- Controller
- [LEGAL – name and contact details of the controller (see imprint)]
- Data protection contact
- [LEGAL – email address for privacy requests]
- What we process and why
- [LEGAL – purposes and legal bases for account data, uploaded contact lists, results, payment data, landing-page events]
- Contact data in uploaded lists
- [LEGAL – your role vs. the customer’s role (controller / processor), data processing agreement]
- Retention
- [LEGAL – how long accounts, lists, results and logs are kept; deletion on request]
- Recipients and transfers
- [LEGAL – processors (see the list below), transfers outside the EU and safeguards]
- Cookies
- [LEGAL – the app sets one essential session cookie; the landing page sets no cookies]
- Your rights
- [LEGAL – access, rectification, erasure, restriction, portability, objection, complaint to the Austrian Data Protection Authority]
If we found your details in public sources
This part is for people who are not our customers: business owners and staff whose work details we find on public pages. We did not get your details from you, so the law (GDPR Art. 14) asks us to tell you the following.
- Who is responsible
- The controller named in the imprint. Privacy questions: the data protection contact above, or the request form.
- What we collect
- Work details only: your name, your role at the business (for example “owner”), your work email address and whether it accepts email, the business you work for with its public address, phone number and website, and the address of the page where we found you. We never collect private home addresses, dates of birth, ID numbers or private social media.
- Why
- So our business customers can contact businesses about products and services that may be useful to them (business to business), and so the emails they send reach a real inbox instead of bouncing.
- Legal basis
- Legitimate interest (GDPR Art. 6(1)(f)): our interest and our customers’ interest in contacting businesses. We weighed it against your interests: we only use work details that you or your business published for others to contact you, we keep them for a short time, and you can object at any time with one request.
- Where the details come from
- Public sources: the business’s own website (for example its “About us”, team, contact and legal notice pages), public business listings (maps and directories), and official public company registers.
- Who receives them
- Our customers who search for businesses like yours or who check a list that has your email on it, and the service providers that work for us (see the list of services below). [LEGAL – transfers outside the EU and their safeguards, per service]
- How long we keep them
- Our stored copies (web pages we read, email check results, answers about a business) are deleted 30 days after we last used them, unless a customer’s list still holds that email. A customer keeps a list until they delete it. If you ask us to delete your details, we keep only a one-way fingerprint of them on our suppression list (so we never collect them again), and a record of your request for 3 years as proof that we acted on it.
- Your rights
- You can ask what we hold about you (access), have it corrected or deleted, restrict its use, and object to its use at any time (GDPR Art. 15–18 and 21). An objection to use for business contact needs no reason: we stop at once. You can also complain to a data protection authority, for example the Austrian Data Protection Authority (dsb.gv.at) or the one where you live or work. We make no automated decisions about you that have legal or similar effects.
- How to object or have your details deleted
- Use the deletion and objection form. One request removes you from every customer’s list, from all exports and from our stored copies, and stops future searches from finding you. You get a confirmation email. Requests from anywhere, also from US states such as California, are handled the same way.
Public company registers (director names)
When a business in a search or Deep Search matches an active entry in an official public company register (such as UK Companies House or the Australian Business Register) with high confidence, we display the company's official registration number, status, incorporation date, industry classification (SIC), and the names of currently active directors as published in that official register (shown next to the business as Director: <name> (Companies House)).
Purpose and strict boundaries: Director names from public registers are shown strictly as company-level information so business customers know the registered legal entity and its current public leadership. We never read, store, or display private residential or correspondence addresses, dates of birth, identification numbers, or resigned officers from company registers, and we never automatically generate or test email addresses from register names.
How to object and remove your name: Any current or former company officer can object to the display of their name at any time (GDPR Art. 21). Submit your name below (or email our data protection contact above) to remove it immediately and add it to our permanent suppression list so it never appears again.
Services the code can send data to
Facts from the current code, as input for the drafter. Not a statement of compliance.
| Service | Data | When |
|---|---|---|
| Hosting provider | all app data (accounts, uploaded lists, results) | always |
| Recipient mail servers | the email address being checked (SMTP handshake, no email is sent) | live verification |
| External email verification service | email addresses | double-checking emails that are hard to confirm; backup when our own check is busy |
| Business data and web search services | search terms (business category and place), company names and domains | business search and double-checking hard emails |
| Web page reader | company page URLs (public pages are read) | Deep Search and double-checking hard emails |
| AI service | company name, domain and public page text | Deep Search |
| Official public company registers (e.g. UK Companies House, Australian Business Register) | company name and city/postcode | business search and Deep Search (high-confidence active company match only) |
| External email finders | name, company, domain | only if switched on |
| Stripe | email address, purchase details | when buying credits |
| Google account email and name | only when signing in with Google |