Privacy Policy

1. Data about our customers

What we collect

• Account data: your email address and when you confirmed it. There are no passwords: you sign in with a code we email you.
• Usage data: which tools were called and when, the credits charged, and the apps you connected (for example Claude or ChatGPT).
• Billing data: your plan, subscription status and Dodo Payments customer id. Card details go directly to Dodo Payments; we never see or store them.
• Technical data: IP addresses and request logs, used for security, rate limiting and debugging.

Why we use it

• To run the Service: sign-in, metering credits, billing and support (performance of our contract with you).
• To send service emails: sign-in codes, security notices, credit alerts and plan changes. These are part of the Service, not marketing.
• To keep the Service secure and prevent abuse (legitimate interests).

2. People in the directory

The directory holds professional information about people and companies, such as names, job titles, employers, business contact details and public professional profiles. Our customers use it to find and contact business prospects and to keep their records accurate. The legal basis for this processing is legitimate interests in business-to-business communication.

Your choices: you can ask whether we hold data about you, ask for a copy, ask us to correct it, or ask us to remove it and stop including you in the directory. Use the data request form, or email support@enricho.co with the email address or profile URL concerned. We answer within 30 days.

3. Who we share data with

• Dodo Payments: payment processing and invoicing, as our Merchant of Record.
• Zoho ZeptoMail: delivery of service emails.
• Our hosting provider: the servers that run the Service.
• Authorities: when the law requires it.

We do not sell customer data, and we do not use your data to train AI models.

4. Retention

We keep account data while your account is open and delete it within 90 days of closure, except billing records we must keep for tax and accounting. Request logs are kept for up to 90 days.

5. Security

Sign-in uses one-time emailed codes (no passwords to leak), connected apps use OAuth 2.1 with short-lived tokens, all traffic is encrypted with TLS, and access to production systems is restricted.

6. Your rights

Depending on where you live (for example under the GDPR or CCPA), you may have the right to access, correct, delete or port your data, and to object to or restrict its use. Email support@enricho.co to make a request. You can also complain to your local data-protection authority.

7. Changes

We post updates on this page and email customers about material changes.