What we collect about companies

Publicly available information from a company's own website and public pages: homepage and landing page content, pricing page content, documentation and changelog entries, public job postings, publicly detectable scripts and tags, public funding announcements, public leadership announcements, and public posts by company representatives.

We record the URL, the date we fetched it, and the date the thing appears to have happened.

We do not buy or scrape personal data beyond a work role, a work email address, and a public professional profile link.

We do not collect anything behind a login, anything marked non-indexable, or anything from a source whose terms prohibit it.

We do not reproduce a company's text publicly. Our public pages only ever contain writing we produced ourselves.

It reads the page you are already looking at, so it can show you what we already know about that person and company, and it lets you log a message you sent yourself.

It takes no action on your behalf. It does not connect, message, follow, view profiles, or click anything, and it does not read your inbox or your connections list. There is no scheduled or background activity on your account.

It never asks for your password on any platform, and it holds no session it could act with. Tools that automate a logged-in session move the account risk onto you, and we decided not to build that.

In Postgres hosted in the European Union, with row-level security so one venture cannot read another.

Your venture context, your voice samples, your contacts, your message bodies and your connected mailbox tokens are encrypted at rest. So are any provider keys you supply yourself.

Analytics and session replay are off until you allow them, and both mask venture context, reads, contact details and message bodies even once allowed.

raw observations: 24 Months.

contact records: purged 90 Days after an account is disqualified or a workspace is deleted.

Suppression entries: permanent, on purpose.

Use the form below. Give us the domain and an email at that domain. We remove the company record, every observation and event under it, and add the domain to the global suppression list so no customer of ours can contact anyone there again.

We do this by hand within five working days and confirm by email.