Privacy Policy

Last updated: 2026-04-16

This Privacy Policy explains how Enrichabl ("we", "us", or "our") collects, uses, discloses, and protects information when you use https://enrichabl.com and our lead enrichment services (the "Service"). By using the Service you agree to the practices described below.

1. Information We Collect

We collect only the information needed to operate the Service:

  • Account information. Name, email address, password hash, and organization details you provide when you sign up.
  • Usage data. Logs of how you interact with the Service, including feature usage, request volumes, error events, IP address, browser type, and timestamps.
  • Uploaded data. CSV files, lead lists, and any contact records you upload, paste, or send to our API for enrichment.
  • API key metadata. When you connect a third-party data provider via BYOK, we store your API key in encrypted form along with metadata about which provider it belongs to and which projects use it. We do not log the key itself in plaintext.
  • Billing information. Plan, invoice history, and last four digits of your payment method. Full card numbers are handled exclusively by our payment processor.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service.
  • Authenticate users and secure accounts.
  • Process payments and send invoices.
  • Respond to support requests and communicate about the Service.
  • Detect, investigate, and prevent abuse, fraud, or security incidents.
  • Comply with legal obligations.

We do not sell your personal information, and we do not use the contents of your uploaded lead lists to train machine-learning models.

3. BYOK (Bring Your Own Key)

Enrichabl operates on a BYOK model. When you connect a third-party data provider, your API key is encrypted at rest using envelope encryption with a managed key service. When you run an enrichment job, the provider call is made directly from our servers to your chosen provider using your key - we do not proxy responses through external aggregators and we do not retain provider responses beyond the duration of the job and your account history.

You can revoke or rotate any provider key at any time from your account settings.

4. Data Sharing and Sub-Processors

We share data only with the minimum number of sub-processors required to operate the Service. Our current sub-processors are:

  • Clerk - authentication and user identity management.
  • Stripe - payment processing and billing.
  • PostHog - product analytics and usage telemetry.
  • Cloudflare - content delivery network, DNS, and edge security.
  • Railway - application hosting and database infrastructure.

We do not sell, rent, or trade personal information to third parties for marketing purposes. We may disclose information when required by law, subpoena, or to protect the rights, property, or safety of Enrichabl, our users, or others.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we purge your account data, uploaded lead lists, enrichment results, and stored API keys within 30 days. Backups are rotated on a rolling schedule and any residual copies are overwritten in the normal course of backup expiration.

We may retain limited information (such as invoice records) for longer where required by tax, accounting, or other legal obligations.

6. Your Rights Under GDPR

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights with respect to your personal data:

  • Right of access. Request a copy of the personal data we hold about you.
  • Right to rectification. Ask us to correct inaccurate or incomplete data.
  • Right to erasure.Request that we delete your personal data ("right to be forgotten").
  • Right to data portability. Receive your data in a structured, commonly used, machine-readable format.
  • Right to restriction. Ask us to restrict the processing of your data.
  • Right to object. Object to processing based on legitimate interests or for direct marketing.

To exercise any of these rights, email support@enrichabl.com. You also have the right to lodge a complaint with your local supervisory authority.

7. Your Rights Under CCPA

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, gives you the following rights:

  • Right to know. Request information about the categories of personal information we have collected, the purposes for which it is used, and the categories of third parties with whom we share it.
  • Right to delete. Request deletion of personal information we have collected from you, subject to legal exceptions.
  • Right to opt out.Opt out of the "sale" or "sharing" of personal information. Enrichabl does not sell personal information.
  • Right to non-discrimination. We will not discriminate against you for exercising any of your CCPA rights.

To exercise these rights, email support@enrichabl.com.

8. International Data Transfers

Enrichabl is operated from infrastructure that may be located in the United States and the European Union. When we transfer personal data across borders, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and equivalent transfer mechanisms.

9. Cookies and Tracking

We use a small number of essential cookies to keep you signed in and remember your preferences, and limited analytics cookies (via PostHog) to understand product usage. We do not use third-party advertising cookies. You can control cookies through your browser settings; disabling essential cookies may impair the functionality of the Service.

10. Children's Privacy

Enrichabl is a B2B service intended for use by professionals. We do not knowingly collect personal information from anyone under the age of 16. If we learn that we have collected such information, we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the "Last updated" date at the top of this page and, where appropriate, notify you by email or in-product notice. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

Questions about this Privacy Policy or your data:

General privacy inquiries: support@enrichabl.com

Data protection / GDPR / CCPA requests: support@enrichabl.com