Privacy policy | Unearth

Who we are

Unearth is operated by [Legal business name], registration number [Business registration number], at [Registered business address]. This policy covers unearth.chat and the hosted Unearth service.

For privacy questions or requests, contact [Privacy contact email]. An independently self-hosted installation is operated by its administrator; contact that administrator about its processing.

Information we handle

The information involved depends on how you use Unearth:

Account and workspace details, such as your name, email address, authentication records, and workspace membership.
Research content you submit or save, including prompts, property addresses, uploaded material, results, and exports.
Property, ownership, professional, and contact information returned by public records, websites, connected services, and data providers.
Subscription and transaction records. [Identify the payment processor and the payment details Unearth receives.]
Support correspondence and technical information such as IP addresses, browser information, request logs, and security events.

We receive information directly from you, from your workspace members, and from the sources or services used for your research. [List the actual providers, data categories, and sources used in the hosted service.]

Purposes and legal grounds

We use information to operate accounts and workspaces, respond to research requests, provide support, manage billing, and protect the service.

Where the GDPR applies, the appropriate basis depends on the activity: performing our contract with you, complying with legal obligations, pursuing legitimate interests such as security and service administration, or your consent where required. Legitimate interests must be assessed against the rights of the people affected.

[Confirm and document the purpose and legal basis for each activity, especially owner and contact enrichment, provider sharing, product analytics, and any marketing.]

Retention and security

Information is retained for the purposes described in this policy, including applicable accounting, dispute-resolution, and security obligations.

[Set specific periods or criteria for accounts, saved research, provider results, support messages, security logs, invoices, deleted records, and backups. Explain how account deletion affects each category.]

[Describe the technical and organisational safeguards actually implemented, including access controls and incident handling. Avoid claims of certifications or guaranteed security that have not been established.]

Your rights and choices

Depending on applicable law, you may request access, correction, deletion, restriction, or portability of your personal information, or object to certain processing. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Rights are subject to legal conditions and exceptions.

Send requests to [Privacy contact email]. We may request information reasonably needed to verify your identity. You can also complain to your competent data-protection authority.

If an ownership record or contact detail concerns you, identify the record and its source so we can assess your request. Correcting a record in Unearth does not automatically change the original public record or a provider’s database.

[Confirm applicable US state privacy disclosures, sale or sharing classifications, opt-out methods, and any authorised-agent process.]

Workspace responsibilities and policy changes

A workspace customer may act as controller for information it submits, with Unearth acting as processor under an applicable data-processing agreement. Unearth may act separately as controller for account administration and other defined purposes. [Confirm these roles and provide the applicable data-processing agreement.]

See our cookie policy for browser storage. [Confirm whether any solely automated decisions with legal or similarly significant effects occur and provide any required explanation.]