Privacy notice.

This is what we keep about you and your work.

• Your account: your email, your name, your company name and your password. The password is stored only in a scrambled form that cannot be turned back into the password, so we cannot read it.
• Your session. When you sign in, a cookie called ba_session keeps you signed in for up to 14 days. Only a scrambled form of it is stored.
• What you give a search: the link to your website, or the text you type about what you sell, and the sender name you choose for your messages.
• A list of companies you bring to a search, if you bring one: the company names and website addresses you type or upload.
• Requirements you write for a search, in your own words.
• Notes you write on cards, the cards you mark for follow up, the reason you give when a company is not a fit, and the person you set as the owner of a card.
• Your seller profile and your buyer profile, as you checked and changed them, and a record of the steps each search took.
• Your shortlists and the cards in them, and when you opened each card.
• Your feedback on cards: good fit, not a fit, already a customer, contacted or won. Any wrong information you report on a card is kept with the card.
• Your saved searches, if your plan has them.
• A record of each export: who exported, which search, how many rows and when. We do not keep the file.
• Your customer list, described below.
• If you forget your password and write to us, we set a new one and send it only to the email on your account.
• To stop abuse we count new accounts from one internet address and wrong passwords for one email. The address and the email are kept for this only in a scrambled form, for three days.
• The email address and role of anyone the owner of a workspace adds to it.

If you write to us on the contact page, we keep your name, your email, your company and your message.

• Your account details let you sign in and keep your work apart from everyone else's.
• What you give a search is read to build your seller profile, then your buyer profile, then your shortlist.
• Your sender name and company name go into the first messages we write for you.
• Your feedback on cards moves kinds of company up or down in your own later lists. It is applied by code, in your workspace only.
• Your exports and the cards you open are logged. They count against your plan.
• Your contact message is read so we can answer it.

• You can add company names to your customer list, up to 5,000 in one go. We store a cleaned form of each name. When you mark a card as already a customer, that company is added too.
• Its one job is to leave those companies out of your lists. Code does this. The list is not sent to the AI.
• Only people in your workspace can use it. No other workspace can see it, and it is never added to the company base we search.
• Feedback marks are also kept for your workspace and are not shared with other workspaces.

BuyerAtlas AI is the language model that does the reading and writing. These are the things it is given.

• The public pages of your website, or the text you typed.
• Your seller profile and your buyer profile.
• The stored public facts about each company it is asked to judge.
• Your sender name and your company name, so it can write first messages that carry them.
• Requirements you wrote for the search, so it can answer them from each company's public record.
• The public pages of a company website you gave with your own list, when that company is not on our lists.

These are the things it is not given.

• Your customer list.
• Your password or your email address.
• Your feedback marks and the notes you write on cards.

The AI may notice customers your own website names. Code then leaves those companies out of your list, and you can untick any you want to keep. Requests to BuyerAtlas AI go through Amazon Web Services, reached from its Cape Town region. An answer can be produced in any region where capacity is free. We keep a log of each call with its job, time, size and result. The log does not hold the text.

We hold public business information only, from the sources named on the sources page.

• For a company: its name, its kinds, its state, its address and website, short facts with the link to their source and the date we read them, and the contact route the company published for business.
• We show the role to ask for. We do not name people.
• We keep no personal phone numbers, home addresses or private emails.
• Every card says register status: not checked.

Companies are not people, so most of this is not personal data. Any company can still ask us to take it out.

• Anyone can ask on the remove or correct page. No account is needed, and it is free.
• We keep what you send there: the kind of request, the company, your details, your email and a token to check the request.
• A removal takes the company off every list at once and it is not shown again. To make that last, we keep the company's cleaned name on a list of removed companies.
• We handle requests within 72 hours. A correction is checked against its source and fixed.
• You may also complain to the Nigeria Data Protection Commission.

• A session ends after 14 days.
• Your account and your lists are kept on a server at Amazon Web Services in London, United Kingdom. A copy of the database is made each night and kept for 35 days.
• Your customer list is deleted when you delete it or close your account.
• The owner of a workspace can remove a person from it, and can delete a saved search.
• To have your account, your lists or your customer list deleted, write to us on the contact page and say what you want gone.