Privacy Policy

Last updated: July 19, 2026

This Privacy Policy explains how Account Finder LLC (“Account Finder”, “we”, “us”) collects, uses, and shares information when you use the Account Finder application and website (the “Service”). Account Finder is a business-to-business prospecting tool; we designed it to collect the minimum personal data needed to operate.

1. Information we collect

Google account information

You sign in with Google. At sign-in we request only your basic profile: name, email address, and profile picture. If you later choose to export results to Google Sheets, we additionally request permission to create spreadsheets in your Google Drive (see Section 3).

Usage information

• Search parameters you enter (locations, states, filters, brand context) and summary metadata about results.
• A usage ledger of credits granted and consumed, tied to your account email.
• Technical logs (timestamps, request status, approximate region) for reliability and abuse prevention.

Customer Data you upload or connect

You may upload a spreadsheet (CSV or Excel), connect a Google Sheet, or connect a CRM so that your own accounts appear on the map alongside search results. We store the records you provide — typically business name, address, and optionally phone, email, and any other columns in your file — together with coordinates we derive by geocoding the address. This is your “Customer Data” under the Terms; you own it, and we process it on your behalf to provide the Service.

Customer Data is stored in your own workspace, keyed to your account, and is not visible to other customers of the Service. Addresses are sent to Google's Geocoding API to obtain coordinates. We may derive aggregated, de-identified statistics that cannot identify you, your customers, or any individual (see Terms §8a). Please do not upload special-category or sensitive personal data; the Service is not designed for it. You can export or delete any uploaded dataset at any time from within the Service.

Billing information

Payments are processed by Stripe. We receive your subscription status, plan, and billing events; we never see or store your full card number.

We do not collect data from children, and the Service is not directed at anyone under 18.

2. How we use information

• To operate the Service: authentication, running searches, metering credits, exports.
• To provide support and respond to your requests.
• To secure the Service, prevent abuse, and enforce our Terms.
• To send service-related notices (billing, security, material changes). We do not send marketing email without your consent.

We do not sell personal information, and we do not use it for third-party advertising.

3. Google user data and the Limited Use policy

Account Finder's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• Profile data (name, email, picture) is used only to create and display your session and account records.
• Google Sheets / Drive access is requested only when you click “Export to Google Sheets”, is limited to creating files on your behalf, and can only access files the app itself creates — never your existing Drive files.
• We do not transfer Google user data to third parties except as necessary to provide the feature you requested, to comply with law, or as part of a merger or acquisition with equivalent privacy commitments.
• We do not use Google user data for advertising, and we do not allow humans to read it except with your explicit consent, for security purposes, to comply with law, or where aggregated and anonymized.
• We do not use Google user data to train artificial-intelligence or machine-learning models.

You can revoke Account Finder's access to your Google account at any time at myaccount.google.com/permissions.

4. AI processing

Some features send your search context (for example, brand description and venue names) to large-language-model providers — currently Anthropic, with Google Gemini as a fallback — to generate fit scores, rationales, and outreach drafts. We send only what the feature needs; we do not send your Google profile data or Google Drive content to these providers, and our API agreements with them do not permit training on this data.

5. How we share information

We share personal data only with service providers who process it on our behalf:

• Vercel (hosting), Supabase (database), Upstash (rate limiting)
• Google (sign-in, Maps/Places, and exports you request)
• Stripe (payments)
• Anthropic / Google (AI processing, per Section 4)

We may also disclose information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset sale (with notice to you). We never sell personal information.

6. Data retention

• Account and usage-ledger records are kept while your account is active and for up to 24 months after, for billing and audit purposes, unless law requires longer.
• OAuth tokens are kept only while your session or grant is active and are deleted when you revoke access.
• Technical logs are retained for a short rolling window.
• Uploaded or connected Customer Data is retained until you delete the dataset or your account. Deletion removes records from active systems promptly and from routine backups within 30 days. On account termination we delete or de-identify Customer Data within 30 days. Aggregated, de-identified datasets that cannot identify you or any individual may be retained (Terms §8a).

You can request deletion of your account data at any time (Section 8), and we will delete it except where retention is legally required.

7. Security

We use industry-standard safeguards: encryption in transit (TLS), encrypted storage with our hosting providers, scoped API keys, and access limited to those who need it to operate the Service. No system is perfectly secure; if a breach affecting your personal data occurs, we will notify you as required by law. Report security issues to security@accountfinder.app.

8. Your rights

Depending on where you live (including under the GDPR and the California Consumer Privacy Act), you may have rights to access, correct, delete, or receive a copy of your personal data, and to object to or restrict certain processing. To exercise any of these rights, email privacy@accountfinder.app from the address associated with your account. We respond within the timelines required by law, and we do not discriminate against you for exercising your rights.

9. International transfers

The Service is operated from the United States, and data is processed on US-based infrastructure. If you use the Service from outside the US, you understand your data is transferred to and processed in the US.

10. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice (for example, by email or an in-app notice) before they take effect. The “Last updated” date above reflects the current version.

11. Contact

Account Finder LLC
Privacy requests: privacy@accountfinder.app
General: hello@accountfinder.app