Your workspace is private
Every table is locked down in the database itself, not just the interface. A member of one workspace cannot read another’s lists, notes, campaigns or relationships, and this is tested automatically on every change.
Security and privacy
Customers trust us with their relationships. The people in the directory trust us with their professional details. We protect both, and we try to be plain about how.
Every table is locked down in the database itself, not just the interface. A member of one workspace cannot read another’s lists, notes, campaigns or relationships, and this is tested automatically on every change.
Email addresses are masked by default. Revealing one is audited, limited by plan, and refused for anyone marked do-not-contact or protected by their outlet. Campaign recipients’ addresses are never sent to the browser.
Staff and outlet editors must use an authenticator app. Lost your phone? Single-use recovery codes, or an account owner can reset it for you.
Sign-in attempts, sign-ups, reveals, searches and sends are rate limited, so a stolen account or a script can’t quietly pull a database out.
Our staff cannot look inside your workspace unless you approve a time-boxed, read-only request, and every view appears in your audit log.
Reveals, sends, plan changes and staff actions are written to an append-only log. Even our own service account cannot rewrite it.
Suggestions come only from cited, public work. The system never invents facts about a person, filters sensitive traits, and every generation is logged and capped.
Anyone can claim their profile, opt out, or request removal. Removal creates a suppression so they aren’t added back, and we respond within 30 days.
Individuals who want a record corrected or removed can use the privacy request form or claim their listing.
Start with a name. Leave knowing who they are, what they care about, and how to approach them well.