Plans & billing
Your data and privacy
What we store about you, what we hold about companies, where it runs, and how to exercise your rights.
What we store about you
- Your account — name, e-mail address, your organization and its members.
- Credentials — API keys (we keep only a one-way hash; the key itself is shown once) and the apps you approved.
- Your lists — including exclusion lists; they are private to your organization.
- Jobs and files — exports and e-mail job results; result files are deleted after 30 days.
- A log of API and MCP calls — which tool, when, how long, and the query it ran — for support, billing and abuse prevention. The query content is kept for 90 days.
- Usage — the records each activity used.
- Billing — held by Stripe, not by us.
Your organization’s data is separated from every other customer’s in the database itself, not only in the application.
We do not sell your searches, share them, or use what you look for to build something for someone else.
E-mail addresses you ask us to find or verify
To check an address we ask the recipient’s mail system whether the mailbox exists — without sending mail. Results are kept for a limited time so the same mailbox is not asked again and again.
What we hold about companies
Public information from companies’ own websites, plus published size figures — see where the data comes from.
If your company is in Breaknorm
You can ask what we hold about your company and ask us to correct it or to stop returning it. We keep a suppression list: a company on it is never returned to any customer. Email [email protected].
Where it runs, and who helps
| Who | What for | Where |
|---|---|---|
| Hetzner | Servers and databases | Germany |
| Cloudflare | Network edge, TLS, DDoS protection | global edge |
| Stripe | Payments | EU / US |
| OpenRouter | Turning the text of a search into a vector when our own service is busy — the search text only, nothing about your account | US |
| Hosting providers of our verification servers | Asking a recipient’s mail system whether an address exists | Netherlands, Japan |
Deleting your account
Email [email protected] and we delete your account, organization, lists, keys and files. Billing records are kept as long as tax law requires.
DPA
We sign a data processing agreement — ask at [email protected].