Privacy Policy

Argorant is a business contact data platform operated by Argorant ("Argorant", "we", "us"). This policy explains how we handle three kinds of information: the business contact data in our searchable database, account and usage data about our customers, and data our customers upload to the service.

This policy applies to argorant.com, our web application, REST API, MCP server, CLI, Chrome extension, and related services. Where we process personal data inside customer-uploaded files on a customer's behalf, we act as a processor under our Data Processing Agreement, and the customer's own privacy notices apply to that data.

Business contact information in the database: name, job title, employer and company details, business email address, business phone number where available, business location, and links to professional or company web profiles. This is professional information about people in their business capacity.

Account and billing information from customers: name, work email, company, plan and subscription details, payment status (payments are processed by our payment provider; we do not store full card numbers), support messages, and API keys.

Product and device information: searches, exports, reveals, verification requests, pages viewed, authentication events, browser and device type, IP-derived security metadata, and cookies or similar technologies.

Contribution data: if a customer explicitly opts in to the Chrome extension's data-contribution program, structured business-contact fields they choose to share. This program is strictly opt-in; the extension contributes nothing without that choice.

We do not intentionally collect sensitive personal information, household or consumer contact data, government identifiers, personal financial account data, health data, or children's data for the database.

We compile business contact data from licensed commercial datasets, publicly available sources such as company websites and business directories and public professional profiles, and our own verification pipeline, which checks whether business email addresses are deliverable.

Records from different sources are deduplicated, merged, and quality-checked before they appear in the database. We also incorporate business-contact fields contributed by customers who have explicitly opted in to the Chrome extension's contribution program.

We do not enrich the database from customer-uploaded lists or CRM data; uploaded customer data is processed only to provide the service to that customer.

Business contact data: to provide search, per-contact reveals, exports with verification, saved lists, the email verifier, API and MCP and CLI access, and integrations — so that our customers can run B2B sales, marketing, recruiting, and research workflows.

Account and usage data: to operate accounts, meter credits and verification checks, process billing, enforce plan limits and our Terms, prevent fraud and abuse, secure the service, provide support, improve the product, and comply with legal obligations.

Privacy request data: information submitted with a privacy request is used only to locate the relevant records, verify the request where necessary, process the choice, and maintain a suppression record so the choice keeps being honored.

We do not use the database to make automated decisions with legal or similarly significant effects about data subjects, and we prohibit customers from using it for consumer-eligibility decisions under our Terms.

Customers: business contact data is made available to paying customers under a license that restricts use to legitimate internal B2B purposes and prohibits resale, redistribution, and use for regulated eligibility decisions.

Service providers: hosting, security, analytics, authentication, email delivery, payment processing, and support providers may process data for us under contractual confidentiality and data-protection obligations. We do not sell usage or account data to advertisers, and we do not share data with ad networks for behavioral advertising.

Legal and corporate: we may disclose information to comply with law or legal process, to protect rights, safety, and security, to investigate abuse, or in connection with a financing, merger, acquisition, or similar transaction, subject to continued protection of personal data.

We never publish the identity of our upstream data sources; what matters for your rights is that every record, whatever its origin, is subject to the access, correction, deletion, and opt-out processes in this policy.

If you are in our database, you can ask us at any time what information we hold about you (access), ask us to fix it (correction), ask us to remove it (deletion), or opt out of our processing of your record.

We honor verified opt-out and deletion requests within 30 days. When we remove a record, we keep a minimal suppression entry (a hashed identifier) so the same record is not re-added by future data acquisition or enrichment — the suppression file exists solely to keep you excluded.

You do not need an account to exercise these rights. Use our privacy choices page or email privacy@argorant.com. Removal, access, or correction requests may require email verification so we do not act on the wrong record. Authorized agents may submit requests with proof of authorization where the law permits us to ask for it.

We will not discriminate against you for exercising privacy rights, and exercising them is free of charge.

For data subjects in the European Economic Area and the United Kingdom, Argorant is the controller of the business contact database and of customer account data.

Legal bases: we process business contact data on the basis of legitimate interests (Article 6(1)(f)) — specifically, enabling business-to-business communication using professional contact details — and we have conducted a balancing test weighing those interests against data subjects' rights, taking into account that the data is limited to professional, business-capacity information. We rely on contract (Article 6(1)(b)) for customer accounts and billing, consent (Article 6(1)(a)) for the opt-in contribution program and non-essential cookies, and legal obligation (Article 6(1)(c)) where laws require processing.

EU and UK data subjects have the right of access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests, and withdrawal of consent where processing is based on consent. To exercise any of these, contact privacy@argorant.com; we respond within the timeframes the GDPR requires.

An objection to direct-marketing-related processing is honored absolutely. You also have the right to lodge a complaint with your local supervisory authority, although we would appreciate the chance to address your concern first.

Residents of California and other US states with comprehensive privacy laws may have the rights to know what personal information we hold, access it, correct it, delete it, and opt out of the sale or sharing of personal information. Because we license business contact data to customers, that licensing may constitute a "sale" under some of these laws, and we make the opt-out available to everyone regardless of state.

Given the nature of our product, we may be considered a data broker under certain state laws, and we make the rights those laws provide — including deletion and opt-out mechanisms — available as described in this policy.

Submit requests through our privacy choices page or privacy@argorant.com. Opt-out of sale/sharing requests do not require identity verification beyond what is needed to locate the record. We do not use or disclose sensitive personal information for purposes requiring a right to limit, and we do not knowingly sell or share the personal information of minors.

We will respond to verifiable requests within the timelines required by the applicable state law, and you may appeal a refusal by replying to our decision or emailing privacy@argorant.com with "appeal" in the subject line.

Our primary infrastructure is hosted in the European Union. When personal data is transferred to countries that have not received an adequacy decision — for example to service providers or in connection with our US-based corporate entity — we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK Addendum or International Data Transfer Agreement, together with supplementary technical and organizational measures.

Business contact records are retained for as long as they remain useful and accurate for the product, and are refreshed, corrected, or removed through our data-quality workflows. Records are deleted on verified request, with a hashed suppression entry retained so the record stays excluded.

Account information is kept while the account is active and afterwards as needed for billing, security, dispute, legal, and tax purposes. Verification results are retained only as long as needed for metering and then discarded. Usage logs are retained on a rolling basis for security and abuse prevention.

We use cookies and similar technologies for authentication, session management, security, preferences, and standard product analytics that help us understand how the service is used.

We do not sell analytics or usage data, and we do not allow third-party ad networks to build profiles from our properties. Where consent for non-essential cookies is required by law, we ask for it. You can also control cookies through your browser settings.

Lists and files customers upload are processed only to provide the service to that customer — for example, matching, verification, deduplication, and export. The customer remains the controller of that data; we act as a processor under our Data Processing Agreement, which covers sub-processors, security measures, audits, and deletion on termination.

We do not merge customer-uploaded data into the searchable database. The only contributor-style flow is the explicitly opt-in Chrome extension program described in Sections 2 and 3.

We use technical and organizational safeguards designed to protect personal information, including encryption in transit, access controls, API key scoping, logging and monitoring, and limited internal access on a need-to-know basis.

No service can guarantee absolute security. If you believe your information has been handled incorrectly or you suspect a security issue, contact privacy@argorant.com and we will investigate promptly. Where a breach triggers legal notification duties, we will notify affected parties and authorities as required.

Argorant is a business product and is not directed to children. We do not knowingly collect personal information from anyone under 16, and our database is limited to professional, business-capacity information. If you believe we hold information about a person under 16, contact privacy@argorant.com and we will delete it.

We may update this policy as our product, processing activities, or legal obligations change. The "Last updated" date above shows the current version. For material changes affecting data subjects' rights, we will give more prominent notice, such as a notice on this site or, for customers, by email.