Privacy Policy

Who Is Responsible for Your Data

The controller of personal data processed through the service is the administrator of the clientvetter.com service. For any question about this policy or your data, or to use any of the rights described below, write to [email protected]. We answer every request in writing.

Data We Collect

We collect only what the service needs to work, to protect it and to bill for it.

• Account data: your work email, a one-way hash of your password, sign-in codes in hashed form, your plan, seats and roles.
• Billing data: plan, billing period, invoices and the status of payments. Card details are entered on the payment processor's page and are not stored by us.
• Check data: the domains, company names, states, client types and project value bands you enter, the results of each check, notes, monitoring lists and exports.
• Member report data: the facts of a non-payment report you submit and the evidence files you upload.
• Technical data: IP address, browser type, pages requested, time of the request and the source that brought you to the site, such as a referring page or campaign tag.
• Support data: the messages you send to [email protected] or through help inside your account.

People Who Appear in Reports

ClientVetter reports cover businesses. When a report mentions a person, it is only in their role at a business: a name and title shown on the company's own pages, a registered agent or officer listed in a public state registry, a public professional profile, or a match against a government sanctions list. We do not collect home addresses, criminal history, family details, health, finances or other private information about any person, and reports may not be used for credit, insurance, employment or housing decisions about an individual. The rules are set out on the fcra compliant background check page.

If you are named in a report and believe the information is wrong or should not be there, write to [email protected]. A business named in a member report can also reply and dispute through the dispute a non-payment report page.

Why We Use Data and on What Basis

• To provide the service you request: running checks, keeping your history, monitoring clients, sending alerts and exports. Basis: performance of our contract with you.
• To create and secure your account, including sending sign-in codes. Basis: contract and our legitimate interest in keeping accounts safe.
• To bill subscriptions, issue invoices and keep accounting records. Basis: contract and legal obligations.
• To prevent abuse, enforce preview limits and protect the service. Basis: legitimate interest.
• To compile business records about companies from public sources. Basis: legitimate interest of members in knowing whether a business client is real and pays, balanced by the business-only scope and the right to object.
• To moderate member reports and handle disputes. Basis: legitimate interest and, where relevant, legal claims.
• To answer support requests. Basis: contract or legitimate interest.

We do not sell personal data, we do not share it for cross-context behavioral advertising and we do not use it for automated decisions that have legal effects on a person.

Where Report Data Comes From

Report data comes from public sources: state business registries, public domain registration records (RDAP), public DNS records, the company's public website and listings, public review platforms, public court indexes and news, and government sanctions lists. Member reports come from paying members who must attach evidence, and each report is moderated before other members can see it.

Who Receives Data

We share personal data only with service providers that process it on our instructions and under confidentiality, and only as far as each one needs.

• A hosting provider that runs our servers and encrypted storage
• A payment processor that handles card payments and subscription billing
• An email delivery provider that sends sign-in codes, alerts and receipts
• A provider of language models that writes short report summaries for paying accounts, receiving business information about the checked company and no account data
• Professional advisers such as accountants and lawyers, where needed

Other members see only the moderated facts of a non-payment report and the reported company's reply, never your evidence files, checks or notes. We disclose data to authorities when the law requires it.

International Transfers

Some providers may process data outside your country, including in the United States and the European Union. Where data from the European Economic Area, the United Kingdom or Switzerland is transferred to a country without an adequacy decision, we rely on standard contractual clauses or another lawful transfer mechanism.

How Long We Keep Data

• Free preview results and the IP address used for preview limits: 30 days.
• Account, checks, notes and monitoring lists: while your account is active. On closure they are deleted from live systems, and encrypted backups expire on their normal rotation.
• Invoices and billing records: as long as tax and accounting law requires.
• Member reports: while the report is accurate and relevant. Reports marked Resolved stay visible as resolved. Reports found unsupported are removed.
• Support messages: as long as needed to resolve the request and keep a record of it.
• Security logs: for a limited period needed to detect and investigate abuse.

Cookies

We use only essential cookies: a session cookie that keeps you signed in, a security token that protects forms and a preference cookie for settings such as your billing view. We do not use advertising cookies or advertising pixels, and we do not build profiles across sites. Any measurement of how the site is used is aggregate and does not rely on cookies. Because there are no optional cookies, there is no consent banner.

Security

Data is encrypted in transit and at rest, access is limited by roles, and administrative access is individual and logged. The details are on the client data security page. No system is perfectly secure, and if a breach affects your data we will tell you and the competent authority as the law requires.

Your Rights

Depending on where you live, you may have the right to access your data, correct it, delete it, receive a copy in a portable format, restrict or object to processing, and withdraw consent where processing relies on consent. Residents of California and other US states with privacy laws may ask what we collect and why, ask us to delete or correct it, and are protected against discrimination for using these rights. We do not sell or share personal data as those laws define it.

To use any right, write to [email protected] from the address the request concerns, or describe how you appear in a report. We may ask for information needed to confirm your identity. We answer within the time the law sets, usually within one month. You can also complain to your local data protection authority.

Children

The service is for businesses and is not directed to anyone under 18. We do not knowingly collect data about children.

Changes to This Policy

When we change this policy, we update the date at the top of the page, and for material changes we tell account holders by email before the change applies.

Contact

The administrator of the clientvetter.com service, [email protected].