- Roles
- For Client Data, you are the "controller" or "business," and we are your "processor" or "service provider" under state privacy laws. For data we source ourselves from public records, licensed feeds and official APIs, we act as an independent controller. (Terms 15.2 and 15.3)
- Instructions
- We process Client Data only on your instructions to provide the Service. We don't sell or share it, don't combine it with other clients' data, and don't use it to serve anyone else, except to create de-identified aggregate statistics. (Terms 15.2)
- Security
- Reasonable administrative, technical and physical safeguards, including encryption in transit and at rest, workspace isolation, two-step sign-in for staff and owners, access logging and backups. (Terms 14.4)
- Incident notice
- If we confirm a security incident that affects your Client Data, we notify you without undue delay and within 72 hours of confirming it. (Terms 14.4)
- Consumer requests
- If one of your customers contacts us about data you gave us, we forward the request to you within 5 business days and help you respond. (Privacy Policy 8)
- Sub-processors
- Cloud hosting and databases (US data centers), file storage, email delivery, error monitoring, uptime monitoring, payment processing and billing, printing and mailing (only for client-ordered mail), email address verification, web search through official search APIs, AI language models, and licensed data vendors. Each is bound by a contract that limits how it may use the data. (Privacy Policy 10)
- Location
- We store and process information in the United States only. (Privacy Policy 16)
- Return and deletion
- You can export your Client Data as CSV at any time. After your plan ends, you have 30 days to export it. We then delete it within 60 days, except suppression records and records the law requires us to keep. (Terms 15.5)
See also the Privacy Policy.