Privacy Policy

When you create an account, we collect your email address. Authentication is passwordless via magic link, so we never store passwords. We do not collect personal information beyond what is necessary to provide the service.

API queries are logged for rate limiting and billing purposes. Domain names submitted for analysis are not stored beyond the cache retention period (typically 24 hours for free tier, configurable for paid tiers).

Your account information is used for authentication, billing, service communication, and understanding product usage. We use service providers for these purposes and do not sell or rent your personal data.

We use PostHog to understand acquisition, product usage, and credit conversion. Browser analytics use a device identifier and may use browser storage; after sign-in, events are linked to an internal account ID. Browser analytics collect coarse page categories, campaign slugs, and explicit product actions, excluding credentials, analysis contents, and full page URLs. Automatic browser interaction capture and session recording are disabled. Browser Do Not Track, Global Privacy Control, and existing PostHog opt-outs are respected. Server-side operational and billing analytics are collected separately; browser analytics preferences do not disable those server events.

All data is encrypted in transit (TLS 1.3) and at rest. API keys are hashed. We use passwordless authentication, so no passwords are stored. Stripe handles all payment processing, and we never see or store your credit card information.

For privacy-related questions, contact us at privacy@whoisgeni.us.