Privacy Policy
Last updated:
This Privacy Policy explains what personal data Namvey (“Namvey”, “we”, “us”) handles, why, for how long and what choices you have. It covers three groups of people: visitors to our website, customers who create an account, and people whose names are searched through the service.
It is written for the United States and Brazil, the two markets we serve, and takes into account the Brazilian General Data Protection Law (LGPD, Law 13.709/2018) and US state privacy laws such as the California Consumer Privacy Act (CCPA).
1. The short version
- We build reports only from publicly available web data.
- We never publish a profile of anyone. A report is visible only to the customer who ordered it.
- Reports do not provide home addresses, phone numbers, dates of birth, relatives or sensitive categories.
- We do not sell personal data and we do not use it for advertising.
- Raw search results of a one-time report are deleted 90 days after delivery.
- Anyone can block searches on their own name on the opt-out page.
2. Who is responsible
Namvey is the controller of the personal data described in this policy.
Our data protection officer (the “encarregado” under LGPD) can be reached at support@namvey.com. Write “Privacy” in the subject line so your message reaches the right person faster. You can also use the contact page and choose the topic “Privacy or data request”.
3. Data we collect
From customers
- Account: your email address, your name if you provide it, your language and the dates of your sign-ins. Sign-in uses a link sent by email, so we do not store passwords.
- Orders: the name or brand to search, whether it is a person or a company, the country, how you relate to that name, the purpose you declare for a third-party search, and optional context (city, state, company, profession, website, other spellings, company registry number, competitor names).
- Attestations: the confirmations you give on each order, with date and time.
- Payments: handled by Stripe. We receive the payment status, the plan, the currency and transaction identifiers. We do not receive or store your full card number.
- Your choices in the app: your “this is me / not me” answers, the monitors you pause or delete, and the messages you send us.
About the people and companies searched
- Search results: link, domain, title, short excerpt, position in the results and publication date, as returned by search and news providers.
- Company registry facts for Business reports: in Brazil, data published by Receita Federal (legal name, status, partners, activity); in the United States, SEC filings of listed companies.
- Our classification: whether a result appears to be about the searched name or about a namesake, the type of site, the tone, the severity and a one-sentence note.
We do not look for, and reports do not provide, home addresses, phone numbers, dates of birth, relatives or sensitive categories such as health, religion, sexual orientation or political views.
From everyone who uses the site
- Technical data: IP address, browser type and the pages requested, kept in server logs for security, rate limiting and troubleshooting.
- Cookies: a session cookie when you sign in and a cookie that remembers your language. We do not use advertising cookies or cross-site tracking.
- Forms: what you type in the contact form (name, email, topic, message) and in the opt-out form (name, country, email, details).
4. Why we use data and on what legal basis
| Purpose | Data | Legal basis under LGPD |
|---|---|---|
| Create your account, sign you in and deliver what you ordered | Account and order data | Performance of a contract (art. 7, V) |
| Charge payments and keep tax and accounting records | Payment data | Performance of a contract (art. 7, V) and legal obligation (art. 7, II) |
| Search the public web for a name and classify the results | Public web data about the searched name | Legitimate interest of the customer and of Namvey (art. 7, IX), observing art. 7, paragraphs 3 and 4, on publicly accessible data |
| Send alerts about new mentions and service emails | Email address and monitors | Performance of a contract (art. 7, V) |
| Prevent abuse, enforce our policies, keep records of attestations and honor opt-outs | Orders, attestations, logs and opt-out data | Legitimate interest (art. 7, IX), legal obligation (art. 7, II) and the regular exercise of rights (art. 7, VI) |
| Answer contact messages and privacy requests | Form data | Legitimate interest (art. 7, IX) and legal obligation (art. 7, II) |
Legitimate interest. People and companies have a real interest in knowing and managing what is public about them, and businesses have a real interest in lawful due diligence. We weighed that against the privacy of the people searched and adopted safeguards: public data only, excluded categories, a declared purpose and attestations on every order, no public profiles, short retention and an opt-out open to anyone.
US residents. We use personal information only for the business purposes listed above. We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use sensitive personal information to infer characteristics about anyone. Several US state laws exclude publicly available information from their scope. Even so, we accept opt-out and deletion requests from anyone.
We send service emails such as sign-in links, receipts and alerts. You stop alerts by pausing or deleting a monitor.
5. AI and automated processing
We use an AI model provided by Anthropic to classify search results (match, type of site, tone, severity) and to write the summaries in a report. The model receives the name searched, the context the customer provided, and the titles, links and excerpts of the search results.
Classification can be wrong. Customers can correct a match with “this is me / not me”. Reports are informational and must not be used for decisions covered by the FCRA or for other decisions that produce legal effects for the person searched.
If you believe an automated classification about you is wrong, write to support@namvey.com and a person on our team will review it.
7. International transfers
Our providers may process data in the United States and in other countries. When data of people in Brazil is transferred abroad, we rely on the mechanisms allowed by LGPD (art. 33), such as contractual clauses that require an adequate level of protection.
8. How long we keep data
- Raw results of one-time reports: deleted 90 days after the report is delivered. The summary, the score and the totals stay in your account until you delete it.
- Monitoring: the timeline of mentions is kept while the monitor is active and is removed when you delete the monitor or your account.
- Account data: kept until you delete your account, which you can do at any time from the account page. Deletion erases the account with its reports and monitors.
- Payment and tax records: kept for the period required by tax and accounting law.
- Opt-out list: kept for as long as the opt-out is in force, because we need it to keep blocking searches. We use it only for that.
- Contact messages: kept for as long as needed to answer you and to keep a record of the request.
- Server logs: kept for a short period.
After an account is deleted we keep only what the law requires or what we need to defend legal claims: payment records, and the record of which names were searched, when and for what declared purpose. That record is kept for up to 24 months, without your email address.
9. Your rights
In Brazil (LGPD, art. 18)
- confirmation that we process your data, and access to it;
- correction of incomplete, inaccurate or outdated data;
- anonymization, blocking or deletion of unnecessary or excessive data;
- portability;
- deletion of data processed with your consent, and revocation of that consent;
- information about who we share data with;
- objection to processing based on legitimate interest;
- review of decisions made solely by automated means (art. 20);
- a complaint to the National Data Protection Authority (ANPD).
In the United States
Depending on the state where you live (for example California, Colorado, Connecticut or Virginia), you may have the right to:
- know what personal information we hold about you and get a copy of it;
- ask us to correct or delete it;
- opt out of the sale of personal information, of sharing for targeted advertising and of profiling (we do none of these);
- not be treated differently for exercising your rights;
- appeal if we deny your request;
- use an authorized agent to make a request for you.
How to exercise them
Write to support@namvey.com or use the contact page with the topic “Privacy or data request”. We answer within the time limits of the applicable law (15 days for access requests under LGPD, 45 days under most US state laws) and may ask for information to confirm your identity. If we deny a request, we explain why and how to appeal.
Customers can also delete their account directly from the account page.
10. If your name was searched
A Namvey customer may have run a search on your name. Reports are private to the customer who ordered them, and we never publish a profile of anyone.
- To block future searches by other customers, use the opt-out page. It takes one form and one confirmation email.
- To know whether we hold search results about your name, or to ask for their deletion, write to support@namvey.com. We will ask for information to confirm your identity.
Opting out does not remove pages from search engines or from the sites that published them, because we do not control those pages.
11. Children
Namvey is for adults. We do not knowingly collect data from anyone under 18, and customers must confirm on every order that the person searched is not a minor. If you believe a minor was searched, write to support@namvey.com and we will delete the data.
12. Security
We protect data with encryption in transit, access restricted to the people who need it, sign-in links that expire and payment details kept by the payment processor instead of by us. No system is perfectly secure. If an incident creates a relevant risk for you, we will notify you and the authorities as the law requires.
13. Changes to this policy
We may update this policy. When a change is material, we will tell customers by email or with a notice on the site before it takes effect. The date at the top of this page shows the latest version.
14. Contact
Namvey. Privacy and data protection officer: support@namvey.com. You can also use the contact page.
Questions about this document? Contact us.