Account data: name, work email, company, and billing details (card data is processed and stored by Stripe — we never see full card numbers). Usage data: pages viewed, features used and diagnostic logs, collected via Google Analytics and PostHog. Business records: our product contains professional contact and firmographic data about businesses, assembled from public records (state filings, court records, federal registries), licensed data providers and public web sources.
To operate and improve the Service, process payments, send transactional email (billing, trial reminders, password resets), prevent abuse, and — with your consent — product updates. We do not sell your account information.
We use first-party cookies for authentication (httpOnly session cookies) and third-party analytics (GA4, PostHog) to understand product usage. You can block analytics cookies in your browser without affecting core functionality.
If you are a business owner or professional who appears in our business-contact records and would like your information corrected or removed, email hello@indicato.ai with the business name and state — we process verified removal requests within 30 days.
Data is encrypted in transit, access is role-restricted and audited, and self-serve accounts enforce single active sessions. Account data is retained while your subscription is active and deleted or anonymized within 90 days of a verified deletion request, except where law requires longer retention.