NECRONOMICOMM

Privacy Policy

Effective / last updated: 2026-07-01

This Privacy Policy explains what NecronomiComm collects, why, and your choices. We aim to collect as little as possible and to hold nothing we don't need.

1. Information we collect

• Account details — your email address, an optional agency/org name, and an optional logo you upload for white-labelling client documents.
• Authentication — a securely hashed password (we never see or store your plaintext password), or, if you use Google sign-in, the email address Google confirms. We also record which version of these terms you accepted, and when.
• Usage & diagnostics — product events such as sign-ups, logins, scans, audits, pitches, subscription changes, and errors, used to operate and improve the Service and to detect abuse (including short-term IP-based rate limiting).
• Research data you generate — the cities/areas you scan and the leads you save, which include publicly available business information (name, public address, phone, website, and similar) drawn from OpenStreetMap and public websites.
• Billing status — your subscription state via Stripe. We do not store your card number or full payment details; Stripe does.

2. What we do NOT collect

We do not store your payment card details, we do not ask for or hold any API keys, and we do not sell your personal information or share it for advertising.

3. Cookies

We use only strictly necessary cookies: a secure, HttpOnly session cookie to keep you signed in, a CSRF-protection token, and a short-lived state cookie during Google sign-in. We do not use third-party advertising or cross-site tracking cookies.

4. Service providers (sub-processors)

We share the minimum necessary data with providers who help us run the Service:

• Stripe — subscription billing and payment processing.
• Google — optional sign-in, and PageSpeed website audits.
• Anthropic — generating AI sales pitches; we send a lead's public business details and the computed findings to produce the copy.
• Email delivery provider — sending verification, password reset, and account emails.
• Hosting & CDN providers — running the app and providing DNS/TLS security.

5. Information about businesses (the leads)

The Service processes publicly available information about businesses and organizations, sourced from © OpenStreetMap contributors (ODbL) and public websites. This is public, business-level information. If you are a business and want your information removed from a report, contact us at support@necronomicomm.com.

6. How long we keep data, and closing vs. erasing

We keep account and research data while your account is active. From Settings you can close your account — which erases your operational data (saved leads, notes, branding) but keeps a minimal billing record (your email and subscription's paid-through date) so any time you already paid for is honored and can be restored if you return with the same email — or erase everything permanently, with no billing record kept and no reactivation. Retaining that minimal billing record is permitted under data-protection law as necessary for our legal/tax obligations and to perform our contract with you. Payment records held by Stripe are governed by Stripe's own retention.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, object to or restrict certain processing, and lodge a complaint with your data-protection authority. You can Close or Erase your account yourself in Settings (deletion), and export your saved leads any time via CSV. To request a copy of your other personal data, or to exercise any other right, email support@necronomicomm.com; we respond as required by applicable law.

8. Security

We protect data with measures including scrypt password hashing, encryption in transit (HTTPS/TLS), signed session tokens stored only as hashes, CSRF protection, and access controls that isolate each user's account and data. No system is perfectly secure, but we deliberately hold little of value — no card numbers, no API keys.

9. Children

The Service is for business use and is not directed to children. We do not knowingly collect information from anyone under 18.

10. International users

The Service is operated from and hosted in the United States. If you use it from elsewhere, you consent to processing in the United States.

11. Changes & contact

We may update this policy; material changes update the date above. Questions or requests: support@necronomicomm.com.