Privacy
What we hold, why, and how to make us stop.
This is a complete draft, published so it can be read and corrected. It has not been adopted and nothing on this page is in force yet. When it is adopted this notice is replaced by a real effective date.
If you did not sign up for this and want to be left alone
You are probably here because you found your name, your work email address or your employer in something someone sent you. Start here.
We build business contact data: names, job titles, work email addresses, work phone numbers and employers, assembled from public records, publicly published web pages (company sites, team pages, directories) and data licensed from partners. It is business contact information about people in their professional capacity. We do not sell personal contact details: home addresses, personal phone numbers or personal email accounts. A customer may ask what a named person is behind only for a stated business purpose, never for credit, employment, insurance, housing or tenant screening, and every such lookup is recorded. A person who has asked not to be looked up is refused, on that ask and on any ask to reach them at work.
To be removed, use the do-not-contact form. It takes an address, a whole domain or your name, and it needs nothing else from you: no account, no proof of identity, no explanation. We record the request and honour it. Read that page for what happens next and how long it takes; it says so plainly rather than implying it is instant.
You can also ask us to delete what we hold about you rather than merely stop using it. Say so in the reason field, or write to us at support@supersoniq.co.
What we hold about people in the corpus
- Name, job title and employer.
- Work email address, and where we have checked one, a dated verdict from the receiving mail server about whether it accepts mail.
- Work phone number, usually the company's.
- Business location (city, region) at the level the source stated it.
- For each row: which source found it and, where we checked it, the date we did. We keep this so that a claim can be traced back. If we cannot say where something came from, we do not ship it.
Where it comes from
Public records, publicly published web pages, and licensed partner data. Coverage is focused on the United States. Some sources are partners we buy from rather than our own collection, and we do not claim otherwise.
Why we hold it
To answer business questions our customers ask: finding companies that match a description, and the people at those companies whose role matches it. Our interest in processing it is that business use; a person's interest in not being contacted overrides it as soon as they say so, which is what the suppression form is for.
What we hold about customers
- Your account: your email address, your workspace name, and when you last signed in. Sign-in identity is handled by an authentication provider; we keep our own session records so that signing out is a row we own rather than a request to somebody else.
- Your asks: the questions you type, the specifications they compile to, the quotes we issued and the runs you started. Your asks are yours: they are scoped to your workspace and no other customer can read them.
- Your deliveries: the rows we built for you, the certificate for each delivery, and the record of what each run cost you.
- API keys: a label, a short display prefix, and an irreversible hash. We never store the key itself and cannot recover one.
Delivered files are held in private, encrypted object storage with no public read path. Downloads are served either through our authenticated API or as short-lived links that expire; there is no permanently public URL for a delivery.
Who else sees it
We use service providers to run this: hosting and databases, object storage, an authentication provider, and the data partners named above. They process data on our instructions to provide the service and for nothing else.
We do not sell customer data, and we do not share one customer's asks, deliveries or balances with another. Isolation between workspaces is enforced per row in our database, not by convention.
We will disclose data if the law requires it. If we can lawfully tell you that this has happened, we will.
How long we keep things
- Suppression requests: kept, deliberately and indefinitely. A record that somebody asked not to be contacted is the one thing that must not be deleted: deleting it is how a person gets contacted again.
- Deliveries and certificates: kept while your account is open, so that you can re-download what you paid for and show where it came from.
- Billing records: kept for as long as accounting rules require, even after an account closes.
- Sessions: expire on their own and are cleared out afterwards.
Your choices
- Ask what we hold about you. Write to us at support@supersoniq.co and we will tell you.
- Ask us to stop contacting you or to stop including you. Use the do-not-contact form.
- Ask us to delete what we hold about you. Say so; we will, keeping only the suppression record itself, for the reason above.
- Ask us to correct something. Wrong data is worse for us than missing data, and a correction is welcome.
We do not require an account for any of these, and we do not charge for them.
We handle suppression, deletion and correction requests for anyone who asks, wherever they are. This page deliberately does not claim a compliance posture under any particular regulation; what it describes is what we actually do.
Contact
Questions about privacy, data removal or permissible purpose are for a human, not for an automated surface. Contact us at support@supersoniq.co, or file a do-not-contact request and say what you need in the reason field.