Privacy Policy

1. Who we are

BreakVentures LLC operates Breaknorm (breaknorm.co, app.breaknorm.co, mcp.breaknorm.co). Contact for privacy matters: [email protected].

2. Customers: data we collect

• Account data — name, email address, password hash, company name if you give it.
• Billing data — handled by Stripe. We store your Stripe customer id, plan and subscription status; we never see full card numbers.
• Usage data — API calls, searches, records pulled, email jobs, timestamps and IP addresses, used to run the service, enforce plan limits and detect abuse.
• Files you upload — CSVs for email finding or verification are processed for that job and deleted 30 days after the job completes, or earlier on request.
• Support correspondence — emails you send us.

Legal bases (GDPR): performance of a contract (running your account), legitimate interest (security, abuse prevention, product analytics) and legal obligation (tax and accounting records).

3. Business contacts in the database

The Breaknorm database contains information about companies and the people who represent them professionally: name, job title, employer, business email address and the page or source the information was found on. It is compiled from:

• companies' own websites — imprint, team, about and contact pages;
• publicly accessible professional profiles and the open web — registries, directories, press;
• technical email verification (SMTP), which checks whether a mailbox accepts mail and stores no message content.

We process this data on the basis of legitimate interest (GDPR Art. 6(1)(f)) in enabling business-to-business communication, limited to professional context: we do not collect private addresses, personal phone numbers, or any special-category data. Every record carries its source so that it can be checked and removed.

If you are a business contact and want to see, correct or remove your data, email [email protected] with the address in question. We remove records within 30 days and add the address to a suppression list so it is not re-collected.

4. Sharing

We share data only with processors needed to run the service:

• Stripe — payments and invoicing;
• hosting and database providers in the EU and US;
• email delivery for transactional messages;
• analytics, limited to aggregated product usage.

We do not sell personal data. Customers who retrieve contact data from Breaknorm become independent controllers of that data and are responsible for their own use of it.

5. International transfers

We are a US company and may process data in the US and the EU. Where data about EU or UK residents leaves those regions, we rely on Standard Contractual Clauses or an adequacy decision.

6. Retention

• Account data: for the life of the account and 12 months after closure.
• Billing records: 7 years, as required by tax law.
• Usage logs: 13 months.
• Uploaded job files: 30 days after completion.
• Database records about business contacts: refreshed as sources change; removed on request.

7. Your rights

Depending on where you live you may have the right to access, correct, delete or export your data, to object to or restrict processing, and to lodge a complaint with a supervisory authority. Write to [email protected]; we answer within 30 days. California residents have the rights set out in the CCPA, including the right to know and delete; we do not sell or share personal information as defined there.

8. Cookies

breaknorm.co uses only a cookie for the cookie notice itself and, if enabled, privacy-friendly analytics without cross-site tracking. The app uses a session cookie required to keep you signed in.

9. Security

Data is encrypted in transit and at rest. API keys are stored hashed. Access to production systems is limited to the people who operate the service.

10. Changes

We will post changes here and, for material changes, notify customers by email. Questions: [email protected].