Privacy policy

Who is responsible

[Legal entity name], [registered address], is responsible for your personal data.

Contact: [contact email address].

What we collect

Your account: name, email address, company name, language and a hash of your password.

What you do in the service: the firms you open, your watchlist, bulk screening files, API calls, and an audit log of changes made by staff.

Billing: Paddle processes your payment. We receive your plan, the state of your subscription and a customer id; your card details never reach us.

Security: the IP address and browser of requests, kept in our logs to stop abuse.

Why we use it

To run the service, to send the alerts and account emails you ask for, to bill your plan, and to keep accounts secure.

Cookies

We use only the cookies that keep you signed in and protect forms against forgery. There are no analytics or advertising cookies.

Who processes it for us

Neon (database, Singapore), Render (API hosting), Cloudflare (web hosting), Resend (email) and Paddle (billing). The plain-English summaries of FDA Import Alerts are written with Anthropic from public alert text only; no personal data is sent.

How long we keep it

Your account data, for as long as the account exists. Bulk screening rows are deleted 30 days after the job finishes, and email delivery records after 90 days.

[How soon an account is deleted after a request.]

Public records

Personal details that an agency publishes, such as the officials named in RASFF notification details, are never stored.

Your rights

You can ask to see, correct, export or delete your personal data.

Contact: [contact email address].