Privacy Policy

1. Our Role: Controller vs. Processor

• Data Controller: For your account information (name, email, billing details), CompanySearch acts as the "Data Controller."
• Data Processor: For the data you upload or search for within our platform ("Customer Data"), we act as a "Data Processor" on your behalf. We process this data strictly in accordance with your instructions and our Terms of Service.

2. Information We Collect

A. Information You Provide

• Registration Data: When you create an account, we collect your name, email address, and company information.
• Billing Information: We use third-party payment processors (e.g., Stripe) to handle payments. We do not store full credit card numbers.
• Communications: Records of your interactions with our support team.

B. Automated Collection

• Usage Logs: Information about how you use the Service, including search queries, documents viewed, and features accessed.
• Device Data: IP address, browser type, operating system, and device identifiers.
• Cookies: We use cookies to maintain your session and analyze platform performance.

3. How We Use Your Data

We use your information to:

• Provide, maintain, and improve the Services.
• Process transactions and send related information, including invoices.
• Send technical notices, security alerts, and support messages.
• Detect, investigate, and prevent fraudulent transactions and other illegal activities.
• Comply with legal obligations.

4. Data Sharing

We do not sell your personal data. We share information only with:

• Service Providers: Vendors who need access to perform services for us (e.g., cloud hosting via Azure/AWS/Google Cloud, payment processing, email delivery).
• Legal Compliance: If we are required to disclose information by law or to protect the rights and safety of CompanySearch or others.
• Business Transfers: In connection with a merger, sale of assets, or financing of our business.

5. International Data Transfers

CompanySearch operates globally. Your information may be transferred to and processed in countries other than your own, including the United States.

We utilize appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission/UK ICO, to validate transfers of data from the EEA/UK to other countries.

6. Your Rights

General Rights

You may access, correct, or delete your account information at any time by logging into your account settings.

EEA/UK Rights (GDPR)

If you are located in the EEA or UK, you have the right to:

• Request access to your personal data.
• Request rectification or erasure of your personal data.
• Object to processing or request restriction of processing.
• Request data portability.

US State Rights (California & Nevada)

• California: Under the CCPA/CPRA, residents have the right to know what personal info we collect, request deletion, and opt-out of the "sale" or "sharing" of personal info (though we do not sell your data).
• Nevada: Residents have the right to opt-out of the sale of certain personal information.

To exercise any of these rights, please contact us at enquiries@companysearch.app.

7. Data Retention

We retain personal data only as long as necessary to provide the Services and comply with our legal obligations (e.g., tax records). When we no longer need your data, we securely delete or anonymize it.

8. Security

We use industry-standard technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest. However, no method of transmission over the internet is 100% secure.

9. Contact Us

If you have questions about this Privacy Policy, please contact us: Email: enquiries@companysearch.app