What we collect
- Account data: company name, email addresses, a hashed password, your targeting settings, and your activity in the portal (feedback, disputes).
- Billing data: handled by Stripe. We never see or store card numbers.
- Lead data: built from public records (state and county UCC filings) and publicly available business information. This is data about businesses, not about our clients.
How we use it
To run the service: match leads to your criteria, deliver your digest, bill you, and answer support. We do not sell or share your account data with anyone, and we never share your lead history, targeting criteria, or exclusion lists with other clients.
Who processes it
Stripe (payments), Resend (email delivery), DigitalOcean (hosting, US data centers), Cloudflare (web infrastructure). Each receives only what it needs to do its job.
Retention and deletion
Account data is kept while your account exists. Email [email protected] to delete your account and personal data; we complete deletion within 30 days. Public-record filing data is not personal data and is retained.
Security
Passwords are hashed with bcrypt, traffic is TLS, the database is firewalled to our own servers, and every administrative action is logged.