EnrichDeskPrivacy Policy
1. Summary
- We collect what we need to run your account: your email address, a hashed password and how you use the Service.
- Data in your workspace belongs to you. We process it only to provide the Service.
- We do not sell personal data and do not use your workspace data to advertise to anyone.
- This website sets no tracking or advertising cookies.
2. Our role
For account and billing information, EnrichDesk decides how the data is used (we are the "controller"). For data you upload to or collect in your workspace, including information about your prospects, you decide how it is used and we process it on your behalf (we are the "processor").
3. What we collect
| Category | Examples | Source |
|---|---|---|
| Account | Email address, hashed password, workspace name, role | You |
| Billing | Plan, billing status, payment processor customer ID. Card details are held by the payment processor, not by us. | You and our payment processor |
| Usage | Searches run, features used, AI usage counts, security and error logs, IP address | Your use of the Service |
| Workspace data | Lists, companies, contacts, notes, chat messages, settings and connected-tool credentials (stored encrypted) | You, your team and the sources you choose |
| Correspondence | Emails and requests you send us | You |
4. How we use it
- To provide, maintain and secure the Service, including verifying your email and resetting your password (performance of our contract with you).
- To bill for paid plans and enforce plan limits (contract and legal obligations).
- To prevent abuse, investigate security incidents and keep the Service reliable (legitimate interests).
- To send service messages such as verification, password reset, invitations and important changes. We do not send marketing email without your consent.
5. AI processing
When you use AI features, the relevant text, such as your search and the details of the leads being scored, is sent to an AI model provider to generate a response. We use providers through OpenRouter, which routes requests to model providers. Do not put sensitive personal data, such as health or financial information, into AI features.
6. Who we share it with
We share personal data only with the service providers that help us run EnrichDesk, under contracts that limit their use of it:
| Provider | Purpose |
|---|---|
| Hostinger | Server hosting and database |
| Cloudflare | Domain name services |
| Resend | Sending account email |
| OpenRouter and the model providers it routes to | AI features |
| Stripe | Payments, when you buy a paid plan |
| Search engines and data providers you enable | Running your searches and enrichment, which sends the search terms and company details needed to look things up |
We may also disclose data if the law requires it, to protect rights and safety, or as part of a merger or acquisition, in which case this policy continues to apply.
7. People in customer lists
EnrichDesk finds business information that is publicly available, such as company websites, business directories and professional profiles, and information from data providers our customers connect. If you appear in a customer's list, that customer is responsible for how they use your information. You can ask us to help remove your information from the Service by writing to hello@enrichdesk.com, and we will pass your request to the relevant customer and act on it where we can.
8. Retention
- Account data is kept while your account is active and deleted when you close it, unless we must keep it longer by law, for example billing records.
- Workspace data is kept until you delete it or the workspace. It is then removed from the live service immediately and from backups within 14 days.
- Operational logs are kept only as long as needed to run and secure the Service.
9. Security
Each workspace's data is isolated at the database level. Passwords are hashed, stored credentials for connected tools are encrypted, connections use TLS, and the database is backed up nightly. No system is perfectly secure. If a breach affects your personal data, we will notify you and the authorities as the law requires.
10. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. California residents have the right to know what we collect and to request deletion, and we do not sell or share personal information as those terms are defined in California law. To exercise any of these rights, email hello@enrichdesk.com. We will respond within the time the law requires. You can also complain to your local data protection authority.
11. International transfers
Our providers may process data in countries other than yours, including the United States. Where the law requires it, we rely on safeguards such as standard contractual clauses for these transfers.
12. Cookies
This website does not use analytics, advertising or tracking cookies. The application stores your sign-in session and preferences in your browser so it can keep you signed in. These are strictly necessary and are not used for tracking.
13. Children
The Service is for businesses and is not directed at anyone under 18. We do not knowingly collect children's data.
14. Changes
We will post updates here and change the date at the top. If a change is material, we will tell you in the app or by email before it takes effect.
15. Contact
Privacy questions and requests: hello@enrichdesk.com.