Last updated 2026-10-21
Where the records come from
GDPR Article 14 asks a data broker to say where its data originates. This page is that statement, and it is the one a lawyer should read before launch.
Sources we use, sources we don't
- ✓Public professional profiles and company websites, collected under their published terms. [Founder: confirm the exact collection method and date range before publishing.]
- ✓Company email patterns inferred from published addresses and checked against mail servers.
- ✓Licensed partner datasets under contract, where the partner warrants lawful collection. The partner list is available to customers under NDA.
- ✓Corrections and opt-outs sent to us directly.
- ×Your uploads. Files you enrich are never added to the database.
- ×Inboxes, address books or calendars of our users. We don't ask for those permissions.
- ×Breach data, or brokers who can't state their own sources.
- ×Consumer records: nothing about home addresses, family, finances or health.
Legal basis and your rights
For people in the EU and UK, we rely on legitimate interest for B2B contact data, with the right to object at any time. For California residents, we are a registered data broker and honour deletion and do-not-sell requests, including those made through the state's DROP platform. Removal is at /opt-out and takes about two minutes. The notice written for people in the data is at /privacy/notice-for-contacts.
In the data and don't want to be?
Look yourself up, confirm with a code, and the record is deleted and suppressed. Customers who received it are told to remove it too.