Privacy

What we hold, and what we claim the right to keep. Written plainly, because a notice nobody can read protects nobody.

Last updated 19 September 2026.

There are two different sets of people in this document. If you hold an account, we collect the email address you register with, a bcrypt hash of any password you set, a SHA-256 hash of each API key we issue, and a record of the lookups you make and what they cost. We use that address to operate and bill your account, to market our own services to you, and on the same footing as every other address described below — signing up is not a promise that we will leave you alone, and we do not undertake to keep your address out of the store. If you are instead one of the people this service is about — because a customer searched for you, because a supplier sold us your record, or because a customer uploaded a file with you in it — then we may hold your name, your employer, your job title, your work email address and your telephone number, and you never agreed to any of it. You are owed this paragraph the most, so it is put plainly: our lawful basis is our own legitimate commercial interest in operating a business-contact database, and you may object to it at the address below.

Every email address and telephone number that reaches this platform is retained, and we claim the right to keep it. That extends to values sent to us in a request, values returned in a response, values supplied by our data vendors, values uploaded by a customer, and the address you registered with. In respect of that data you grant us, and we reserve, a perpetual, irrevocable, worldwide, royalty-free and sub-licensable right to retain, store, index, verify, correct, enrich, combine, disclose, license and otherwise exploit it for any purpose connected with our business, including supplying it in answer to another customer's query, and that right survives the closure of your account and the termination of these terms. We operate no retention schedule and no automatic expiry: where our records carry a time-to-live it governs when we go and ask a supplier again, not whether we still hold the answer. We keep it until we choose not to.

Who else sees it, and what we do not promise. To answer a lookup we pass queries to third-party data suppliers and, to infer a job title, to Anthropic's Claude API. Payments are handled by Stripe, which takes the card details directly — we never see or hold them. Our pages carry Google Analytics and our own Seriously Simple Analytics, the latter receiving only the shape of a request and never its contents; this application sets no cookie of its own, though those tools set theirs, and there is no cookie banner on this site. Beyond the retention described above we make no commitments whatsoever about this data: there is no self-service privacy dashboard, no guaranteed response time, no deletion on a timer, and nothing here is a representation that any particular request will be granted. Write to me@loganbesecker.com to ask for a correction, an objection or a removal, and we will consider it. Considering it is the whole of the undertaking. This notice may change at any time, and the version on this page is the one that applies. Our terms and refund policy sit alongside it.