Privacy policy
Short version: we collect what we need to run your account and bill you correctly, and the business leads we find for you are already-public information, not personal data about private individuals.
What we collect about you
To run your account: your email address and password (handled by our authentication provider — we never see or store your password in plain text). To process payments: your purchase amounts and credit balance — card details themselves are handled entirely by Stripe and never touch our servers. To provide the service: the searches you run (industry, country, cities) and the results they produce.
The business data we collect on your behalf is different
The leads a search produces — company names, addresses, phone numbers, and information published on a business's own website — are publicly available information about businesses (OSINT), not personal data about private individuals. We only collect what a business has already made public online, consistent with GDPR/AVG standards for publicly available business data.
Why we process your data
Account and payment data is processed because it's necessary to provide the service you've signed up for (contractual necessity) — running searches, tracking your credit balance, and billing you correctly. We don't use your account data for advertising or sell it to third parties.
Who else sees it
We use a small number of service providers to run DataFacilitator: Supabase (database, authentication, and file storage), Stripe (payment processing), and Resend (transactional emails about your searches, where enabled). Each only receives the data it needs to do its specific job — Stripe never sees your search history, and Supabase never sees your card details.
How long we keep things
Result files (CSV/XLSX) are automatically deleted 7 days after a search finishes — after that, only re-running the search produces a new file. Your account, job history, and credit ledger are kept for as long as your account is active, so you can always see what you've searched and purchased.
Your rights
You can ask us to access, correct, or delete your account data at any time — message us on WhatsApp or reach out through your account email and we'll handle it. Deleting your account removes your personal data; it doesn't retroactively un-charge past purchases (see our refund policy).
Security
All traffic to DataFacilitator is encrypted (HTTPS). Access to customer data is restricted to what's needed to operate the service, and payment processing is handled by Stripe, a PCI-compliant payment processor — we never store full card numbers ourselves.
Cookies
We use only the essential session cookies needed to keep you logged in. We don't use third-party advertising or tracking cookies.
Changes to this policy
If this policy changes in a meaningful way, we'll update this page. Continuing to use DataFacilitator after a change means you accept the updated policy.
DataFacilitator is a trading name of Master Facilitator BV, registered in the Netherlands.
Master Facilitator BV · KvK 78023106 · VAT NL861236038B01