Privacy Policy

Last updated: May 27, 2026

This Privacy Policy describes how reconosint. (“reconosint,” “we,” “our”) collects, uses, and shares information in connection with our website at reconosint.ai and the related services (the “Service”). This policy is intended to satisfy the disclosure requirements of the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, “CCPA”).

Note on counsel review.This document is in “v1” form pending attorney review (scheduled). If you have a specific legal question, please contact us at the address below before relying on any part of this document.

1. Who we are

reconosint is a U.S. business that provides AI-powered sales-intelligence research: we produce tech-stack and decision-maker reports about target companies for our customers, who are typically sales, marketing, partnerships, and competitive-intelligence professionals at B2B technology vendors.

2. Information we collect

2.1 Account holders (our customers)

• Account information: email address, name (if provided), company, plan tier, profile-usage counters.
• Authentication: Supabase Auth session tokens; if you sign in with Google or Microsoft, the OAuth identifier and the email address associated with that account.
• Billing: Stripe customer identifier and a record of plans, charges, and refunds. We do not store full payment-card numbers; Stripe handles all card data.
• Usage data: the profiles you create, your communication preferences, and information about how you use the Service (pages viewed, features used, errors encountered).
• Technical data: IP address, user agent, device type, approximate location derived from IP, and information collected through cookies and similar technologies.
• Anti-abuse signals: IP address and timestamp of signup attempts, retained for up to 30 days to enforce rate limits and detect automated abuse.

2.2 Profiled individuals (third parties researched by our customers)

Our customers use the Service to research target companies. The Service may surface publicly available information about employees of those target companies, including:

• Name, current job title, employer, and professional tenure.
• Public profile photo and link to public professional profile (e.g., LinkedIn).
• Publicly stated skills, tools, technologies, and professional experience excerpts.

This data is collected from publicly accessible web sources via licensed data partners and is retained on a rolling 30-day cache. If you are an individual who has been profiled and you would like your information removed, please use the request form at /legal/privacy-request or email privacy@reconosint.ai.

3. How we use information

• To operate, maintain, and improve the Service.
• To process payments and provide customer support.
• To send transactional emails (e.g., account verification, profile-ready notices, billing receipts).
• To detect, prevent, and respond to security incidents, fraud, and abuse.
• To comply with legal obligations and enforce our Terms.
• To analyze usage patterns in aggregate and improve product quality and AI output reliability.

We do not use account-holder data or profiled-individual data to train third-party large-language models. Customer profile content is processed by Anthropic's Claude API under a zero-retention configuration. See our sub-processor list for details.

4. How we share information

We share information with the sub-processors listed at /legal/subprocessors, each of whom is bound by a written agreement requiring confidentiality and appropriate security. We may also disclose information when required by law, in response to a valid legal process, or to protect the rights, property, or safety of reconosint, our users, or others.

We do not sell personal information for money. We do not engage in “sharing” of personal information for cross-context behavioral advertising as defined under the CCPA.

5. How long we keep information

• Account data: while your account is active, plus a reasonable period thereafter for legal and audit purposes.
• Signup-attempt IPs: 30 days.
• Profiled-individual cache: rolling 30-day cache; entries refresh on re-query.
• Billing records: as required by applicable tax and accounting law (typically 7 years).
• Soft-deleted profiles: 30-day grace period, then hard-deleted by scheduled job.

6. Your rights (California residents)

If you are a California resident, you have the following rights under the CCPA:

• Right to know what personal information we collect, use, and share about you.
• Right to delete personal information we have collected from you.
• Right to correct inaccurate personal information.
• Right to opt out of sale or sharing of personal information.
• Right to limit the use and disclosure of sensitive personal information.
• Right to non-discrimination for exercising any of the above rights.

To exercise these rights, account holders can use the Settings page to delete their account or request a data export. Anyone else (including individuals who have been profiled) can submit a request via /legal/privacy-request. We will respond within 45 days as required by the CCPA, and we will not require you to create an account in order to exercise these rights.

7. Security

We use TLS in transit, encryption at rest where supported by our sub-processors, row-level security on application data, and regular review of access permissions. No method of transmission over the Internet is perfectly secure; we cannot guarantee absolute security.

8. Children

The Service is intended for users 18 years of age and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us and we will delete it.

9. Changes

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date above and, for material changes, notify account holders by email.

10. Contact