Privacy Policy
This Privacy Policy explains how Recordwell ("we", "us") collects, uses, and shares information when you use our website and services (the "Service"), and the choices you have.
The short version
Saved reports are private
Your searches are not shown to the person you looked up, and saved reports are visible only in your account.
Exposure needs ownership
Sensitive breach details are shown only after the address owner verifies the email.
Removal is free
You can remove your own information from Recordwell results without payment or an account.
You have privacy choices
Access, correction, deletion and sale-or-sharing opt-out requests are handled through the privacy request form.
Who controls your data. The data controller for this Service is GRUNDLAGEN TECHNOLOGIE LTD, registered in the Republic of Cyprus under number HE 434416, Fragklinou Rousvelt 140, 1st floor, Flat/Office 101, 3011 Limassol, Cyprus. Privacy requests: support@recordwell.ai.
1. Information we collect
- Information you provide: the search terms you enter (name, email, username, phone), your email address when you request a report, and any account or billing details.
- Automatically collected: device and browser data, IP address, pages viewed, and referral/marketing identifiers (e.g. UTM tags, click IDs) via cookies and similar technologies. We use your IP address to determine the type of network you connect from (for example, a data center, VPN or Tor) to help prevent fraud; this check does not store the IP address itself.
- Report records: to produce a report we process lawfully available and licensed information about the searched subject.
2. How we use information
- To provide, generate, and deliver reports and the Service;
- To email your report and product updates (you can unsubscribe anytime);
- To operate, secure, and improve the Service and prevent abuse;
- To process payments and manage subscriptions;
- To measure marketing and comply with legal obligations.
3. How we share information
We do not sell the personal information you provide to us for money. We share information with service providers who process it on our behalf (hosting, email delivery, analytics, payments, data providers), when required by law or to protect rights and safety, and in connection with a business transfer. Marketing/advertising cookies may constitute a "sale" or "sharing" under some state laws — see your rights below.
If you came to Recordwell through the link of one of our affiliate partners, our partner program, which we run ourselves, receives a record of that visit so that the partner can be credited and the quality of their traffic checked: the type of device, the site or app the link was opened from, the kind of network you connected from, and the steps you took, such as searching, creating an account or starting a checkout. It receives no name, email address, IP address or search terms: your visit and your account are referred to by codes that cannot be turned back into them. If a purchase that came through a partner is refunded, disputed or cancelled, we may send that partner a summary of these steps.
4. Cookies and analytics
Payment security. We use Stripe to process payments. If you consent to analytics, we may load Stripe.js when you view subscription plans, before you enter Stripe’s hosted checkout. Stripe may collect device and browser information, your IP address and activity signals, and use cookies or similar identifiers to help detect fraud. Before this optional loading, Recordwell removes search terms and candidate identifiers from page URLs. Declining analytics or sending Global Privacy Control prevents this earlier loading. Withdrawing consent clears accessible first-party Stripe identifier cookies and reloads the page to stop the optional script. Stripe’s hosted checkout continues to perform its own security checks, independently of this choice. Learn more in Stripe’s Privacy Policy.
We use cookies and pixels (e.g. Google Analytics/Ads, Meta) for functionality, measurement, and advertising. You can control cookies through your browser and, where offered, our cookie banner or the "Your privacy choices" control.
Site measurement cookie. On visits from the United States we set a first-party cookie named rw_vsid. It holds a randomly generated identifier, expires 30 minutes after your last page view, and cannot be read by scripts running on the page. Its only purpose is to count how many visits reach each step of the site, so that our own traffic numbers are complete rather than limited to visitors who accept the banner. It is sent to our analytics provider as an anonymous identifier for that visit and is never used for advertising or shared with advertising networks. It carries no name, email address, postal address, search terms, or payment information. We do not set it on visits from outside the United States, and we do not set it at all when your browser sends Global Privacy Control.
Device recognition to prevent abuse. On visits from the United States we also set a first-party cookie named rw_did. It holds a randomly generated identifier, expires 30 days after your last page view, and cannot be read by scripts running on the page. It lets us recognize repeat visits from the same browser, so that we can see when one device opens many accounts or tries many payment cards, and which of our partners such traffic comes from. Like the measurement cookie, it is sent only to our analytics provider, is never used for advertising or shared with advertising networks, is not set on visits from outside the United States, and is not set at all when your browser sends Global Privacy Control. Separately, on visits from the United States our servers compute a short device code from your IP address and browser type, using a key that changes every day. Only that code reaches our analytics provider, never the IP address or browser details themselves; it changes every day, is not stored on your device, and is used only to detect abuse, such as many accounts or payment attempts from one device. Because it serves security rather than advertising, we compute it whether or not your browser sends Global Privacy Control.
Visit counts sent by our servers. Our servers also report each page visit to Google Analytics as an anonymous count, whatever you choose in the cookie banner and whether or not your browser sends Global Privacy Control. The report carries the page path without its query string (so a name you searched for is never included), the campaign and partner labels of the link that brought you, the domain of the site that linked to us, your country and your device type (desktop, mobile or tablet). It is sent by our server rather than your browser: nothing is stored on or read from your device for it, and it contains no cookie, no IP address, no browser identifier and nothing that would let Google recognize you or connect one visit to another.
Sales reported by our servers. When a payment, a renewal or a refund goes through, our servers also report it to Google Analytics as an anonymous sale, whatever you choose in the cookie banner. The report carries the amount without tax, the currency, the plan, and the campaign and partner labels of the link that brought you. It contains no name, email address, payment details or account identifier, and each report gets its own random identifiers, so nothing in it lets Google recognize you, connect the sale to your visits or connect one payment to another. We do not send it when your browser sent Global Privacy Control at checkout.
We recognize the browser-based Global Privacy Control (GPC) signal. When your browser sends GPC, Recordwell treats it as an opt-out of sale or sharing and keeps optional analytics and advertising storage disabled, even if that browser previously accepted optional cookies.
5. Data retention
Retention depends on the type of record and the purpose for which it is kept. The end of a subscription, the removal of a person from search results, and deletion of an account are different events.
| Record type | Retention |
|---|---|
| Saved reports | Saved reports remain part of your account and do not expire merely because a subscription ends. They are removed through the applicable report, account-deletion or verified privacy-request process; suppression of the person in a report may remove content sooner. |
| Account and preferences | Account and preference records follow the lifetime of your account. Closing an account removes the matching account records; limited request, payment, security or legal records may remain for the purposes described here. |
| Privacy and account-closure requests | We keep the request record and related correspondence for 24 months after the most recent action on the request, to demonstrate how it was received, answered and handled. These records are used only for that purpose. |
| Removal and suppression controls | Matching keys and limited control information are retained for as long as needed to keep a removed identity out of current and future Recordwell results. They do not have an automatic expiry that would allow the record to reappear. |
| Payment, support and security records | We retain the information needed to manage payments and the service, prevent abuse, resolve disputes and meet applicable record-keeping duties for as long as those purposes require. Account closure does not erase records that must remain for these purposes. |
Temporary processing data is separate from saved reports and follows the lifetime of the relevant request, session or security record. Removing information from Recordwell does not remove it from its original publisher. We retain only the records needed for the applicable purpose.
6. Your rights
California (CCPA/CPRA) and other US state residents may have rights to know, access, delete, correct, and opt out of "sale"/"sharing" of personal information, and not to be discriminated against for exercising them.
EEA/UK (GDPR) residents may have rights to access, rectify, erase, restrict, port, and object to processing, and to lodge a complaint with a supervisory authority.
To exercise your privacy rights, use our privacy request form or email support@recordwell.ai. Requests to opt out of sale or sharing do not require identity verification. We may ask only for information reasonably necessary to identify the information or preference to which your request applies.
For access, correction, deletion and other requests that require verification, we use a proportionate verification process. We may request additional information where reasonably necessary to confirm your identity or authority to act. Privacy requests are free and do not require a Recordwell account.
7. Data about other people
If you search for someone else, you are responsible for using the results lawfully and in line with our Terms. Recordwell is not a Consumer Reporting Agency and reports may not be used for FCRA-covered decisions.
8. Security
We use reasonable technical and organizational measures to protect information, but no method of transmission or storage is completely secure.
9. Children
The Service is not directed to children under 18, and we do not knowingly collect their personal information.
10. Changes and contact
We may update this Policy; material changes will be posted here with a new date. Contact: support@recordwell.ai.