Privacy policy

Draft. This text describes what the service does today. It has not been reviewed by a lawyer or data protection officer and contains placeholders in [brackets]: complete and review it before launch.

Who is responsible

[Company name, address and contact of the operator of racon]. Data protection contact: [privacy contact email].

What we process

• Your account: name and email address from the sign-in provider you use (Google or Facebook), and the time of your last sign-in. We do not receive your password.
• Your content: the company lists you upload, the offerings and signals you define, notes and verdicts you enter.
• Research results about companies: racon looks up public business information about the companies on your lists: its website (legal notice, management and careers pages), public DNS records, public news and open data such as Wikidata. This includes the names and business roles of managers and board members that companies publish. We store them with their source and show them only to the account that researched the company. We do not read LinkedIn.
• Usage: which research steps ran for your account, to operate the service and, later, to bill it.

Why, and on what basis

To provide the service you asked for (Art. 6(1)(b) GDPR). For the public business information about third-party companies and their managers: our and our customers legitimate interest in B2B prospecting (Art. 6(1)(f)); the people concerned can object or ask for deletion at any time, see below. [Review with your data protection officer.]

Cookies

One session cookie (racon_session) keeps you signed in; a short-lived cookie (racon_oauth) protects the sign-in against forgery. Both are needed for the service; there is no tracking or advertising.

Who receives data

Google or Facebook, when you sign in with them. Our hosting provider [name, location]. A payment provider, once payments are enabled [Stripe]. We do not sell data.

How long

Your account data and content are kept until you delete your account or ask us to. Research results are deleted with the company or the account.

Your rights

Access, correction, deletion, restriction, objection and data portability, and the right to complain to a supervisory authority. If you are a manager named in a company record and want it removed, write to [privacy contact email] with the company name. See also how to delete your data.