Privacy notice

This explains what information InvestiSearch collects, why, who it is shared with, and what choices you have. It describes what the product does today; it does not promise that the service is secure, compliant or error-free.

Account and business information: your name, email address, badge or license details, business name, phone, address and website, and the license information used to verify the business (license holder's name, state, number and expiry date).

Information you put into the service: cases, notes, search requests and results, the people and details you record, and files you upload (photos and documents), including text we read out of them.

Records of use: sign-in events, searches and views of records, acceptance of the Terms (with the date and version), and device settings kept on your device such as the device lock.

Searches use outside services such as public court-record sources and news sources. The name or details you search may be sent to them to run the search. Information you import from your own licensed tools is your own data, and the service labels it so.

We use service providers to run InvestiSearch: hosting and database (Vercel, Supabase), AI processing (Anthropic, which receives the text of your requests and the files you ask it to read), email delivery (Resend), payments (Stripe, which receives billing details; we do not see full card numbers), and, when you tap "Use my position" in the surveillance log, an address lookup service (OpenStreetMap's Nominatim service), which receives that position to return the nearest street address. We do not sell your information. [ATTORNEY TO COMPLETE: list of providers, locations, and data processing terms.]

Your business's information is kept while the account is active. Field contacts expire after a set period chosen by the business (currently a provisional default of 365 days). When an account is deleted we remove the business's information, except records we must keep for the law, security, or billing. [ATTORNEY TO COMPLETE: exact retention and backup timing.]

Inside a business, people can see only what their role and the case settings allow. InvestiSearch staff are not meant to browse customer cases. Access to systems for support, billing and verification should be limited to the few people who need it and should be logged. [ATTORNEY TO COMPLETE: confirm support-access wording, and make sure it matches what is actually done.]

You can ask to see, correct or delete information. A person can delete their own account at any time from their profile: their sign-in and profile are permanently deleted, while work they entered in a business's cases stays with the business, credited to “Former team member”. A business owner can delete the whole business: access and billing stop at once, the owner can undo it for 30 days, and after that the business's cases, uploaded files, notes, time and expenses, and evidence access record are permanently deleted. Backups, and records we must keep for the law, security or billing, may remain for a limited time. [ATTORNEY TO COMPLETE: rights that apply by state or country, backup and retention timing, and how to make a request.]

InvestiSearch is for professional use by adults.

[ATTORNEY TO COMPLETE: how changes are announced, company legal name and a contact address for privacy questions.]