Privacy policy

1. Who is responsible

Nositeo (an online business run by its owner from Pakistan) decides how this information is used. Questions and requests go to support@nositeo.tech.

2. If you have an account

• What we keep: your name, email address, a hash of your password (never the password itself), your organisation’s name, credit purchases, orders and downloads, API keys (stored as a hash) and API usage.
• Security data: the IP address and browser of sign-ins and requests, used to keep accounts safe and to enforce rate limits.
• Why: to run your account, take payments, deliver the leads you buy, send the emails the service needs (sign-up codes, password resets, receipts) and prevent abuse. We do not send marketing emails without your permission.

3. If your business is in our data

• What we hold: business name, business phone, street address, website and whether it works, opening hours, trade, city and time zone. No personal email addresses, no owner names.
• Where it comes from: publicly available business listings and the business’s own website.
• Why: agencies and sales teams buy it to offer their services to local businesses. Where UK or EU data protection law applies, our legal basis is legitimate interests: business-to-business contact using details the business has made public.
• Your choice: remove your business at any time on our opt-out page. It takes effect at once for every search, new order and download, and we keep only the phone or website you gave us, so the business stays excluded. For anything else, email support@nositeo.tech.

4. Who we share data with

Only the providers that run the service, each for its own job:

• our hosting provider, which runs the website and database;
• Cloudflare, for the domain, secure connections and protection from attacks;
• Resend, which sends our emails;
• our payment providers, such as NOWPayments for crypto payments, which see the amount and the order reference;
• Google, only if you choose Sign in with Google, or if you accept analytics cookies (Google Analytics).

Customers who buy leads receive the business details described in section 3. We do not sell customers’ personal data.

5. Cookies

• Needed: a sign-in cookie that keeps you logged in, and one that remembers your cookie choice. These are always on.
• Analytics: Google Analytics cookies that count visits and page views. They are set only after you accept them in the cookie banner, and you can change your choice at any time from the link in the footer.

6. How long we keep it

• Account details: while the account is open, and deleted within 30 days after you ask us to close it.
• Purchase and payment records: as long as accounting and tax law require, up to seven years.
• Security logs: up to 90 days.
• Opt-out records: kept, so a removed business is never listed again.

7. Your rights

You can ask for a copy of your data, a correction, deletion, or that we stop using it, by emailing support@nositeo.tech. We reply within 30 days. If you are in the UK or EU you can also complain to your data protection authority, such as the ICO in the UK.

8. Security and transfers

Passwords and API keys are stored only as hashes, every connection uses HTTPS, and only the people who run the service can reach the database. Our providers may process data in other countries; we choose providers that protect it to the standard the law requires.

9. Children and changes

Nositeo is a business service and not meant for anyone under 18. If we change this policy, the date at the top changes, and we email account holders about important changes.