Privacypolicy.

AskOSINT is responsible for the personal data described here. Questions and requests go through our contact form.

Our customers also make their own decisions about how they use a report, and are responsible for those decisions themselves.

You do not need an account. We collect:

• What you enter at intake: the details of the person or company, the purpose you choose, your note about it, and any document you upload.
• Your declaration that you have a lawful reason for the research, with the time you made it.
• A record of each payment: the amount, currency and status. For a crypto payment, also the wallet address it was paid from and the blockchain transaction, both of which are public on that blockchain. We never receive your wallet's keys. If you pay by card, where card payment is offered, your card details stay with the card payment provider and never reach us.
• Your choices when you accept or reject a matched social profile.
• Your IP address, read to limit how many requests can be made in a short time.

Your research opens through a private link. We store only a scrambled form of the link, so we cannot send it to you again. Anyone who has the link can open the research, so keep it safe.

A research collects information about the person or company it names, and about people connected to them. You may not have heard from us before reading this. Depending on the details supplied, we may collect:

• Web pages and search results that mention you.
• Public social profiles, their posts, and the accounts they follow or that follow them.
• Company registry records, and the company pages and team pages that name you.
• Whether an email address or username appears to exist, and where a username is in use.
• Where this check is switched on, whether a phone number is registered on a messaging app and the profile details shown there.
• People and organisations linked to you, and how they connect.

We keep where each finding came from and how confident we are in it. Findings can be wrong, including when a profile belongs to someone else with the same name.

The contact form asks for your email address and your message, and optionally your name. We use them only to read and answer your message. Your IP address is read to limit how many messages can be sent in a short time, and is not stored with the message.

• To carry out the research you ordered and write its report, which is needed to perform our contract with you.
• To take payment and keep the records the law requires, which is a legal obligation.
• To collect information about the subject of a research, which relies on legitimate interests: the customer's declared purpose, weighed against the subject's rights. You can object to this (see Your rights).
• To prevent misuse and keep the service secure, which is also a legitimate interest.

We do not sell personal data, and we do not use it for advertising. Scores and AI-written text help the customer read the evidence. We do not make decisions about anyone, and our acceptable use policy tells customers to check findings before relying on them.

Outside companies work on our behalf, and receive only what their part needs:

• A crypto payment service that checks and settles each crypto payment on the blockchain. It may see your private link, because the payment is requested for an address that contains it.
• If you connect a phone wallet by QR code, WalletConnect, which relays the connection between this page and your wallet.
• Where card payment is offered, a card payment provider. It also sees your private link, because the link is where it returns you after checkout.
• Web search, social data, email check and messaging providers, which receive the names, handles, addresses or numbers being searched.
• An AI analysis provider, which receives findings in order to write the report.
• Hosting and infrastructure providers.

People on our team can open a research to operate the service and handle problems. We also disclose data when the law requires it.

Some of these companies are outside your country, so your data may be handled there.

The customer can open a research through its private link until 14 days after its report is generated, or until 30 days after payment if no report has been generated by then. Closing the link ends the customer's access only. It does not delete the research.

We keep the research, what was found for it, its sources and its report in our internal records after the link has closed. Only our authorised staff can see them there. We keep them to show what was researched and why, to answer questions and complaints about a research, to establish, exercise or defend legal claims, and to meet our legal obligations, and only for as long as we need them for those purposes. We review that need, and delete or anonymise records we no longer need.

If you, or a person who was researched, ask us to delete personal data, we do so unless the law allows or requires us to keep it (see Your rights).

We keep payment records, and the record of what the customer accepted before paying (the version of the terms and statements, and when), for as long as the law requires.

You do not need to be a customer to use these rights. Depending on where you live, you can ask us to:

• Tell you whether we hold data about you, and give you a copy.
• Correct what is wrong.
• Delete it, or restrict how we use it.
• Stop using it, by objecting. We then stop unless we have a compelling reason that overrides yours.
• Move data you gave us to another service.

Use our contact form. Tell us the name and any details that could appear in the research, because we cannot look anything up without them. We may ask you to confirm who you are, and we answer within one month. We use what you send only to handle the request.

You can also complain to the data protection authority where you live.

These pages use no advertising or analytics cookies. Research pages remember in your browser tab whether you have copied your private link, so they can warn you before you leave without it. If you connect a crypto wallet, the connection is kept in your browser's storage so the page can reach the wallet again. Where card payment is offered, the card payment provider's own page sets its own cookies under its own policy.

The service is for adults. It may not be used to research anyone under 18. If you believe a research concerns a child, tell us and we will delete it.

When this policy changes we update the date at the top of this page. A change that matters more will be made clear on this page before it applies.