1. Scope and operator
ContactYard ("ContactYard," "we," "us," or "our") operates the ContactYard website and service. This policy applies to information handled through the website, customer accounts, support, billing, contact search, unlocks, and exports.
People whose professional information may appear in the contact database should also read our Business Contact Data Notice.
2. Information we handle
Account and customer information
- Name, work email, login identifiers, profile details, and authentication events.
- Search criteria, result interactions, contact unlocks, exports, credit activity, and support messages.
- Plan, payment status, amount, currency, invoice, and payment-provider identifiers. Payment card numbers are handled by our payment processor and are not stored by ContactYard.
- IP address, browser and device information, timestamps, error logs, and security events needed to operate and protect the service. For trial eligibility, device and network signals are hashed before storage and are not used for login or authorization.
Website visit information
When you visit our website, our analytics provider, PostHog, receives the pages you view, the website or search engine you came from, campaign tags in the link, the time, your approximate location, basic browser and device details, page errors, and page speed. If you have not chosen Accept, this is collected without cookies or browser storage: a one-way code, made from your IP address, browser details, and a value that changes daily, tells visits apart and cannot be linked across days or to your account. If you choose Accept, PostHog may also set cookies, record clicks and session replays, and link activity to your account. See the Cookie Notice.
Business contact information
Contact records may include a person's name, employer, business title or function, professional profile URL, work location, company details, work email, and business phone information. We do not intend the service for sensitive personal data, children's data, consumer profiles, or non-business household contact information.
Files you upload for enrichment
When you upload a spreadsheet for enrichment, we store the whole file you upload, including every column, not only the columns we use to find contacts. Those other columns are kept with your file and appear in the enriched file you download until both are deleted on the schedule in section 7. Please upload only the business contact columns you need. Do not upload sensitive information, such as health, financial, or government ID numbers, passwords, payment card details, or information about children.
3. Where information comes from
- Directly from customers and account users.
- Automatically from use of the website and service.
- Payment, authentication, hosting, email, support, and security service providers.
- Licensed business-data providers. Those providers may compile information from public professional and company sources, contributed business information, and other lawfully available datasets. We do not disclose confidential supplier terms or vendor identities in this public policy.
4. Why we use information
- Provide, personalize, secure, support, and troubleshoot the service.
- Run searches, deliver selected business contact information, prevent duplicate charges, and create customer exports.
- Administer accounts, subscriptions, payments, credits, and transactional communications.
- Detect fraud, enforce our terms, maintain suppression records, and protect people and systems from abuse.
- Comply with legal obligations and establish, exercise, or defend legal claims.
- Measure and improve service reliability and functionality using limited operational information.
- Understand which pages and sources bring visitors to our website, using cookie-free visit counting that does not depend on your cookie choice.
5. Legal bases where required
Depending on the context and applicable law, we rely on performance of a contract, compliance with legal obligations, consent, and our or another party's legitimate interests. Legitimate interests may include operating a secure B2B information service, helping customers identify relevant professional contacts, preventing fraud, and protecting legal rights. We apply that basis only where those interests are not overridden by a person's rights. Where a law requires consent or another specific basis, the relevant customer and ContactYard must obtain or rely on that basis before processing.
6. How information is disclosed
- Business contact information is made available to authenticated customers that choose search criteria and unlock or export records.
- Vendors process limited information for hosting, authentication, database, payment, email, support, security, and infrastructure functions under contractual restrictions.
- Information may be disclosed to advisers, authorities, or other parties when reasonably necessary for legal compliance, safety, fraud prevention, or legal claims.
- Information may transfer as part of a financing, merger, acquisition, reorganization, or sale of all or part of the business, subject to appropriate confidentiality and legal safeguards.
We do not sell customer account credentials or payment-card data. We do license business contact information to customers; some privacy laws may define that activity as a "sale" even when no money is paid for an individual record. We do not currently share personal information for cross-context behavioral advertising.
7. Retention
We keep account and product records while an account is active and afterward only as reasonably needed for the purposes described above, including billing, security, suppression, dispute, and legal-record requirements. Contact unlock records are kept to provide unlock history and avoid repeat charges. Business contact data is refreshed, corrected, suppressed, deleted, or deidentified when it is no longer reasonably needed, when a valid request requires it, or when our rights to use it end. Suppression records may be kept longer so that a deleted record is not reintroduced.
We delete these items on a fixed schedule:
- Uploaded spreadsheets and their working copies: 30 days after the enrichment job finishes.
- Finished enrichment files, contact exports, and saved export files: 150 days after they are created.
- Security and access logs: 180 days. When you delete your account, we delete your content, but security events from the last 180 days move to a restricted archive and are deleted when their 180 days end.
- Privacy and opt-out requests: 24 months, so we can show how we handled them.
- Records of which policy versions you accepted: while your account exists.
8. Security and international processing
We use measures designed for the risk, including access controls, row-level database restrictions, server-side secrets, private storage, transport encryption, payment-webhook verification, logging, and least-privilege access. No system is completely secure. Information may be processed in countries other than where a person lives. Where required, we use contractual or other recognized transfer safeguards. See Data & Security for more detail.
9. Your choices and rights
Depending on your location, you may have rights to know or access, correct, delete, restrict, object, withdraw consent, obtain a portable copy, opt out of the sale or licensing of personal information, or appeal a decision. You may also complain to a privacy regulator. We do not discriminate against a person for exercising privacy rights. Visit Privacy Choices to make a request, or use the Do Not Sell or Share My Personal Info form, which needs no account. We treat a Global Privacy Control browser signal as an opt-out of sale and sharing for that browser. Customers remain independently responsible for honoring requests and marketing opt-outs relating to their own outreach.
10. Children
ContactYard is a business service and is not directed to people under 18. We do not knowingly license or sell personal information about children. Please report a suspected child record for prompt review.
11. Changes and contact
We may update this policy as the service or law changes. We will post the revised version with a new version number and effective date and provide additional notice when required. We record which version you accepted when you sign up or check out. Privacy questions can be sent to admin@contactyard.com. Postal address: Shirpur, India.