Privacy Policy

What this document covers

This policy describes how the ScrapIn platform processes information. It is written to reflect what the software actually does, so that a legal review has an accurate technical basis to work from.

Information we process

• Account information. Your name, work email address, hashed password and the organization you belong to.
• Usage information. Searches you run, lists you create, notes you write and exports you generate, together with timestamps and the acting user.
• Business information. Company records and professional contact details obtained from the data sources described below.
• Security information. IP address, user agent and authentication events, retained for abuse prevention and account security.

How business information is obtained

Information is acquired only through channels the platform is authorised to use: official APIs, licensed data providers, publicly accessible business information where the applicable terms permit that access, and datasets a customer uploads.

The platform does not circumvent any service's access controls, authentication or rate limits, and implements no stealth browsing, fingerprint spoofing or CAPTCHA circumvention.

Professional rather than personal data

The platform is designed around business and professional information — a person's role at a company and the business channels through which that role can be contacted. Personal information unrelated to a professional context is not sought.

Provenance and accuracy

Every stored field records the source that produced it and the date it was last checked. Conflicting values from different sources are retained rather than overwritten, and resolved by source trust and recency. Values the system inferred rather than observed — such as a likely email address pattern — are labelled as unverified wherever they appear, including in exported files.

Automated processing

The platform classifies job titles, scores lead relevance and deduplicates records automatically. Where an AI model is used, it may classify or summarise existing information only. It is never permitted to originate a company, a person, an email address, a phone number or any other factual field.

Retention

• Generated export files are deleted automatically after a configurable retention window.
• Sessions expire on a fixed schedule; revoked sessions are purged after 30 days.
• Searches, lists and notes are retained until you delete them or close your account.

Your rights

Depending on your jurisdiction you may have rights of access, rectification, erasure, restriction, portability and objection. The application provides data export and deletion controls under Settings → Data & privacy. Requests that require identity verification are handled by support.

Data subjects whose information appears in the platform

If you are a professional whose business contact information appears in this platform and you would like it removed, contact the operator of the workspace that holds it, or contact support with the details, and the record will be removed.

Security

Passwords are hashed with bcrypt. Sessions are server-side records that can be revoked instantly. State-changing requests require a CSRF token and a matching origin. Access to every record is checked against the requesting user's organization.

Contact

Replace this section with the controller's legal entity name, postal address and a contact address for privacy enquiries before going live.