Document

Privacy Policy

Last updated August 19, 2026

This describes how DataPit actually handles data today, in plain language, and we keep it current as the product changes. It hasn't been reviewed by outside counsel, so if you need a formal legal review for your own compliance purposes, contact us and we'll work with you directly.

1. What we collect

When you create a workspace, we collect your name, email address, and a hashed copy of your password — never the password itself. When you use search and reveal, we record which contacts your workspace has revealed and when, so we can enforce workspace-wide reveal sharing and bill credits accurately.

2. How we use it

Account data is used to authenticate you, run the credit ledger, and operate the product features you've enrolled in — search, reveal, lists, and sequences. We do not sell your workspace's data to third parties.

3. Contact and company data

The contact and company records searchable in DataPit are sourced and enriched independently of any one workspace — they are not private to you. A data subject can request removal of their information at any time; once processed, that record is permanently excluded from search and reveal for every workspace, not just the one that requested it.

4. Data retention

Account and billing records are retained for as long as your workspace is active, and for a reasonable period afterward to satisfy legal and accounting obligations. You can request deletion of your account data at any time.

5. Security

Passwords are hashed with argon2id. Access tokens are short-lived; refresh sessions are stored server-side and rotated on every use, so a stolen token has a narrow window of use. Credit balances move through an atomic, auditable ledger.

6. Your rights

Depending on where you're located, you may have rights to access, correct, export, or delete your personal data. For your DataPit account, contact us and we'll act on a verified request. If your details appear as a contact record in our database, use the form below — no account needed.

7. Remove my data (GDPR/CCPA opt-out)

Enter the email address that appears in our contact database. We immediately redact any matching records for every workspace and permanently block that address from future reveals — this cannot be undone.