Privacy policy

The short version

We collect as little as we can. Our public-record feeds are built to exclude personal data about individuals. Our scrapers return only what a logged-out visitor can see on a public page, never private contact details, and anyone can ask us to remove data about them.

What we collect, and why

• Customers: your email address and name, your company name and tax ID if you give one, and the companies or topics you ask us to track. We use them to deliver your feed, bill you and answer you. Card and bank details go straight to Stripe; we never see them.
• Email: messages you send us and our replies, so we can answer and keep a record of what was agreed.
• Business outreach: we may email businesses at generic role addresses they publish themselves (for example hello@ or team@). Reply "no" and we won't write again.
• Website: page views and clicks to our Apify pages, counted without cookies and without storing IP addresses. We keep a daily-rotating, one-way hash so we can count unique visitors, plus your country and the referring site.
• Free tools: the domain you check and its result, kept for 24 hours so a repeat check is instant. To limit each visitor to a few checks an hour we keep a daily-rotating, one-way hash of your IP address with the time of each check, never the address itself, and delete these records after 30 days.
• Watches (email me when this changes): if you ask for an email when a free-tool result or a visa-sponsor page changes, we store your email address, what you're watching (a domain or an employer page), when you asked and confirmed, and the last result we compared against. We use them only to send those emails. First we send one email asking you to confirm; nothing else is sent until you do, and unconfirmed requests are deleted after 7 days. After that we check on Mondays and write only when something changed. Every email has an unsubscribe link, and your mail app's unsubscribe button works too. Unsubscribing deletes the watch straight away. To stop misuse we limit sign-ups using the same daily-rotating, one-way hash of your IP address as the free tools, deleted after 30 days.
• Custom scraper requests: if you ask us to build a scraper, we store your email address, the websites, the fields and the notes you send, how often and how much data you need, and whether you're happy for it to be built as a public scraper. We use them only to answer your request and deliver the work. We send you one confirmation email and then reply by hand; we never add you to a mailing list. We keep a request while we work on it and for up to 2 years after, unless you become a customer, and we delete it sooner if you ask. To stop misuse we limit requests using the same daily-rotating, one-way hash of your IP address as the free tools, deleted after 30 days.
• AI answer visibility report orders: if you order a report, we store your email address, your website, the country, the questions and notes you send, the plan you chose and whether you asked us to suggest questions. We use them only to prepare and send your report, and for the monthly plan, the next ones. We send you one confirmation email with the payment link and then write by hand; we never add you to a mailing list. We keep an order while we work on it and for up to 2 years after, unless you stay a customer, and we delete it sooner if you ask. Requests are limited with the same daily-rotating, one-way hash of your IP address as the free tools, deleted after 30 days.
• Free AI answer checks: if you ask for a free check, we store your email address, your website, the country, up to 3 questions you type (or the 3 we pick from your homepage), whether you ticked the monthly email box, and when you asked, confirmed and were sent the result. We use them to run the check once and email you the result, and to keep the limit of one free check per business and per email address every 30 days. First we send one email asking you to confirm; nothing is checked until you do, and unconfirmed requests are deleted after 7 days. To run the check, your website and questions (never your email address) go to Claude through Anthropic's official API. We delete free-check requests and their results 90 days after you asked. To stop misuse we limit requests using the same daily-rotating, one-way hash of your IP address as the free tools, plus a one-way hash of your email address, deleted after 30 days.
• Free monthly email: if you sign up at the foot of the front page, or tick the box on the free check, we store your email address, where you signed up, when you confirmed, and for sign-ups from the free check, the website and country you gave, so the email can cover your industry. We use them only to send that email. Nothing is sent until you confirm from the email we send you; unconfirmed sign-ups are deleted after 7 days. Every email has an unsubscribe link, and your mail app’s unsubscribe button works too. Unsubscribing deletes your address from the list straight away. We keep a subscriber’s address only while they’re subscribed.

Who processes it for us

• Stripe: payments, subscriptions, invoices and tax.
• Cloudflare: website hosting, our database and receiving email.
• Resend: sending email.
• Apify: running the data jobs behind your feed.
• Anthropic: a service that processes the text of emails we receive, and supplies the Claude answers in AI answer checks and reports.
• Gumroad: selling and delivering dataset downloads.

Some of these providers are outside Singapore. We use them only to provide our services, under their data protection terms.

How long we keep it

We keep customer and billing records while you're a customer and for up to 5 years afterwards, for tax and accounting. We delete other email after 2 years, and website statistics are aggregate counts only.

Your rights

You can ask us to show, correct or delete the personal data we hold about you, or to stop contacting you, by emailing support@locaihost.org. We follow Singapore's Personal Data Protection Act and, for people in the EU and UK, the GDPR. You can also complain to your data protection authority.

Our datasets and you

• Public-record feeds: government and regulator data under open licences. They describe organisations, never individuals: we remove records that look like private individuals, such as people who filed as their own employer, along with people's names, phone numbers and email addresses.
• Scrapers: they read what a logged-out visitor can see on public pages, and may use proxies. They never log in and never collect private contact details. Where a public page is about a person, such as a public creator profile, they return only what that page shows publicly.

If you find information about yourself in our data, email support@locaihost.org and we'll remove it.

Changes

If this policy changes, the new version will be posted here with a new effective date. Material changes are emailed to customers.